Canwu terminology

Use this page to look up a Canwu term: its English and Chinese names, the matching code identifier, and what it means. Linked terms have their own page with more detail; the others are defined here and in the API documentation.

If you write Canwu documentation, use the listed term for each language, keep code identifiers unchanged, and avoid the alternatives marked as deprecated in the last table. In Chinese prose, you may add the English term or code name in parentheses at first use, for example 模拟插件 (simulation plugin). The source of truth is docs/terminology.md; this page mirrors it.

Product and runtime boundaries

English	中文规范写法	Code or API	Meaning and use
Canwu	参伍	Canwu	Product name and main public API entry point. Do not translate the brand as a generic noun.
headless historical simulation engine	无界面历史模拟引擎	—	Canwu’s product category: it simulates historical worlds without owning rendering, audio, or production UI.
simulation core	模拟内核	canwu-sim	The private runtime that owns mutable authoritative state, scheduling, settlement, persistence, and replay.
host application	上层应用	—	A game, research tool, service, client, or agent system that embeds Canwu. Chinese prose uses 上层应用, not 主机程序.
public API	对外 API	canwu-api	The supported API boundary for application code.
simulation run	模拟运行	run_id	One causally continuous execution with its own identity, inputs, state, and evidence.
scenario	场景	Scenario	The initial world and configuration used to create a simulation.
authoritative state	权威状态	SimulationSnapshot	State owned and validated by Canwu and used as the basis for commitments, persistence, and replay.
ground truth	真值	—	Facts present in authoritative state whether or not a particular actor knows them.
actor-relative view	角色相对视图	CanwuViewer, ViewerContext	A read surface derived from one actor’s knowledge and authority rather than omniscient state.
read-only snapshot	只读快照	WorldSnapshot	A detached state value for trusted reads, not a mutable reference to the live runtime.
simulation granularity	模拟粒度	SimulationGranularity	A domain-neutral engine level: aggregate, group, or actor. A host application may map them to its own categories, such as Population, Special Group, and Character.
aggregate	聚合层	SimulationGranularity::Aggregate	Coarse population-, economy-, or region-scale state. A host application may map it to Population.
group	群体层	SimulationGranularity::Group	A bounded social, institutional, military, or organizational group. A host application may map it to Special Group.
actor	角色层	SimulationGranularity::Actor	A person or other principal with knowledge and authority. A host application may map it to Character.

Time, input, and settlement

English	中文规范写法	Code or API	Meaning and use
wall time	现实时间	—	Real elapsed time observed by the host application. It never enters authoritative state directly.
simulation time	模拟时间	SimTime, SimDuration	Deterministic, representable time settled by Canwu.
presentation time	表现时间	—	Client-side animation or interpolation time; it may be fractional and is not authoritative.
command	命令	Command, CommandEnvelope	A typed request to change authoritative state through structural, precondition, and authority checks.
domain command	领域命令	Command::Plugin	Typed intent defined by a domain integration and validated through public canonical ingress.
canonical ingress	规范化输入	IngressRecord	The persisted, deterministically ordered input path for commands, communication, information, and scheduled systems.
admission	准入	—	The decision and cut that determine which pending inputs belong to a boundary. It is not a synonym for ingress.
plugin ingress cancellation	插件输入撤回	cancel_plugin_ingress, IngressPayload::PluginCancellation	Terminal withdrawal of one still-queued plugin ingress item strictly before its due time, journaled as its own record. The withdrawn item is never admitted; nothing is rolled back.
cancellation authority	撤回权限	IngressCancellationAuthority	Who withdrew a queued plugin item: the host for public packets it enqueued, the owning plugin’s registration permit for its internal packet type, or a boundary system of the plugin that scheduled the item. Only the issuer may withdraw.
pending ingress	待处理输入	pending_ingress, CanwuRun::pending_ingress	Ingress records queued and not yet admitted or withdrawn, in the order boundaries will admit them, including records a seal or a continuation restore pinned. A trusted host lists them with pending_ingress; the list covers every source and is not on SimulationView or CanwuViewer, so the host selects its own items before showing any to an actor.
scheduled work	调度工作	—	Work assigned a deterministic simulation due time and insertion order.
boundary	结算边界	BoundaryRequest, BoundaryRecord	One validated, all-or-nothing settlement pass that admits work, runs systems in fixed phases, records evidence, and commits or rolls back.
settlement phase	结算阶段	BoundaryPhase	One position in the fixed boundary execution order, not an independent settlement algorithm.
atomic commit	原子提交	—	Applying all validated boundary changes together so observers never see partial state.
rollback	回滚	—	Restoring state, evidence, counters, and random positions when a boundary fails.
transition manifest	转移清单	TransitionManifest, BoundaryDirective::RegisterTransitionManifest	A coordinating plugin’s declaration of the participant plugins, expected record versions, and single ready boundary of one multi-owner transition. Participants stage their writes with StageTransitionWrite in phase 10 of that boundary; phase-10 directives outside a manifest are unaffected.
transition audit	转移审计	TransitionAuditRecord	The kernel’s phase-11 check of every manifest ready at a boundary. A partially staged manifest or a wrong expected version fails the whole boundary; a manifest no participant staged expires. The committed or expired outcome is read-only boundary evidence for phase-12 systems.
boundary ledger	边界账	SimulationView::boundaries_between, BoundaryWindow, BoundarySummary, BoundaryIngressOrigin, boundary_schedule_horizon	The boundaries of a window of simulated time: those settled in it, the one being settled, and those still queued, each with its time, cadences, calendar marks, and ingress counted by class, kind, and origin. Only a phased boundary system may read it, after declaring canwu.core.boundary_schedule, to count a period’s boundaries before it carries work into another one; it declares how far back it reads with boundary_schedule_horizon. Settled boundaries are the same in live, sealed, restored, and replayed runs; the queued list is a lower bound.
calendar mark	历法标记	CalendarMark, schedule_calendar_marks, SimulationView::calendar_marks	A host calendar’s mark on a calendar boundary: the boundary is a period start (of a cadence) of that calendar. A system with a calendar key wakes only on its own calendar’s marks of its cadence; a system without one wakes on every boundary of its cadence, marked or not. The core keeps no calendar.
calendar key	历法键	BoundarySystemContract::calendar, MAX_CALENDAR_KEY_BYTES	The host’s name for one of its calendars (a canonical label of at most 64 bytes), on a mark and on a boundary system’s registration, where it is part of the plugin descriptor.
boundary profile	边界耗时明细	BoundaryProfile, set_boundary_profiling, take_boundary_profiles, replay_from_journal_with_boundary_profiles	An opt-in host diagnostic: the wall time of one settled boundary, of each plugin handler it ran, by kind, phase, plugin, and name, and of each engine phase. It is never part of authoritative state, evidence, a snapshot, or replay, and no plugin can read it. An exact replay can be profiled boundary by boundary.
engine phase	引擎阶段	BoundaryEnginePhase, BoundaryEngineTiming, BoundaryProfile::engine	One kind of the simulation core’s own work inside a boundary, timed in a boundary profile: admission, system dispatch, staging, commit, knowledge, journal, and hashing. The engine phases and the plugin handlers partition a boundary’s wall time. It is a profiling category, not a settlement phase.
request outcome retention	请求结果保留期	RunConfiguration::request_outcome_retention, with_request_outcome_retention, DEFAULT_REQUEST_OUTCOME_RETENTION, MAX_REQUEST_OUTCOME_RETENTION	How long, in simulated time after its attempt, a tracked command request’s exact outcome and queued receipt are kept to answer an exact retry: 30 days by default, from zero to 366, fixed when the run is created. The rule is simulated time alone, so a wall-clock pause retires nothing, a fast simulation speed retires sooner in wall time, and unsealed, sealed, restored, and replayed runs answer alike.
retired request outcome	已退役请求结果	ErrorCode::RequestOutcomeRetired, RetiredRequestRange, RequestIndex::retired_commands	What a tracked command request becomes once its attempt is older than the retention: its outcome is no longer kept, its ID stays used for the run inside a canonical range of retired IDs, and every later request with that ID, an exact retry or not, is refused with RequestOutcomeRetired without an attempt, a revision, or an event. A host that treats IdempotencyConflict as “take another ID” treats it the same way. Not 退休目标 (a culture target) and not 已清退条目 (a knowledge entry).

Plugins and extensions

English	中文规范写法	Code or API	Meaning and use
plugin	插件	—	Generic term. Qualify it when confusion with Codex or another tool plugin is possible.
simulation plugin	模拟插件	SimulationPlugin	A runtime registration unit implementing Canwu’s public plugin contract. Its name, version, and semantic hash identify the executable behavior required for loading and exact replay.
domain extension	模拟领域扩展	—	An optional domain-specific delivery package built on public engine contracts. It may contain one or more plugins, domain types, schemas, commands, queries, and supporting APIs. No DomainExtension trait is required.
simulation module	模拟模块	—	An informal, human-facing name for a coherent simulation capability, such as the social diffusion simulation module. It may be implemented by an extension and its plugins, but it is not an engine contract.
culture system SDK	文化系统 SDK	canwu-culture	A published optional authoring, compilation, and lifecycle extension above canwu-society; it validates content and produces a deterministic execution plan without becoming a core subsystem.
legal institutionalization	法律制度化	canwu-law	An experimental downstream extension that advances proceedings from admitted social evidence, uses controller decisions to record pending legal intents, and atomically writes legal sources, rules, and immutable versions inside a plugin boundary; culture never writes legal state directly.
legal source version	法律渊源版本	LegalSourceVersion	An immutable source record for an instrument, judgment, agreement, customary-recognition finding, received-law schedule, or another configured basis for a legal claim.
legal rule	法律规则	LegalRule	The stable identity and mutable head for one bounded normative rule; its immutable changes live in LawVersion records.
law version	法律版本	LawVersion	A create-only immutable normative change tied to a stable LegalRule, with exact source and predecessor refs, normative relations, applicability, effective and validity state, and evidence; enforcement is separate.
legal record reference	法律记录引用	LegalRecordRef	The exact kind and identity of a legal object within the sharded legal runtime. It is not a kernel DomainRecordVersionRef: law owns its object/version semantics while plan, directory, shard, and archive-head records persist separately.
caseload profile	案件量配置	CaseloadProfileDefinition, LegalDefinition::caseload, CompiledLawPlan::caseload	The part of a legal definition that declares what a plan settles in aggregate: the case classes (up to 64), the review levels (up to 16), the periods kept per jurisdiction (1 to 120), and the reports examined per boundary. It compiles only if the widest encoding of its records fits MAX_CASELOAD_STATE_BYTES (256 MiB); a plan without one keeps its encoding and hash.
aggregate caseload	汇总案件量	AggregateCaseloadRecord, LegalCaseloadHead, caseload_intake_v1, enqueue_caseload_intake, load_legal_caseload	Routine justice counted rather than followed case by case: a host’s report of intake and resolutions per case class and of entries and conclusions per review level, for one jurisdiction and one period that starts where the newest settled period ends, settled by the law admission system into one record per kept period (a fixed ring of slots behind a head) with the pending stock carried forward and conserved. A repeat of the newest period is already settled; every refused report changes nothing and is one canwu.law.caseload_rejected.v1 event with a stable code. The records declare no evidence, never load the legal runtime, and lie outside the legal state budget. A case the host follows on its own is still a LegalCase, counted in its class’s intake.
clearance rate	结案率	AggregateCaseloadRecord::clearance_bp	Resolutions over intake of one caseload period, in basis points, computed by the engine from the settled counts; absent when nothing arrived in the period.
cultural target generation reference	文化目标代际引用	CulturalTargetGenerationRef	The exact target and generation cited by a legal proposal or version, preventing retirement or reactivation from silently rebinding old evidence.
compiled culture plan	文化执行计划	CompiledCulturePlan	An externally immutable, content-hash-bound runtime plan containing compact IDs, reverse indexes, budgets, and lifecycle policy compiled from a culture definition.
dormant target	休眠目标	Dormant	A culture target with no engaged population or admitted work that has left hot settlement indexes but retains an explicit reactivation descriptor.
retired target	退休目标	Retired	A culture target removed from hot dynamic state while historical identities and evidence remain available through tombstone and archive contracts.
culture boundary plugin	文化结算插件	CultureBoundaryPlugin	The in-engine form of culture settlement: a Monthly phase-7 system consumes admitted exposure batches, persists culture state, and hands society lifecycle deltas to the society plugin, which remains the only society writer. A run uses it instead of the host-driven CulturePlugin flow, not beside it.
exposure signal batch	接触信号批次	CultureExposureSignalBatch, culture_exposure_v1	A bounded, evidence-bearing report that cohorts were exposed to one culture target generation, produced by an information or correspondence provider after access and interpretation and admitted at a later boundary.
cohort headcount rebase	cohort 人口校准	CohortHeadcountRebaseV1, cohort_headcount_rebase_v1	Canonical ingress that resets a cohort’s headcount to a cited external stock record, which must be current when the packet is admitted, and re-proportions every distribution with deterministic integer remainders at the next society settlement.
society settlement cadence	society 结算节奏	SocietyPlugin::with_settlement_cadence, SocietyPlugin::DAILY	The SystemCadence category whose boundaries settle society: Daily by default, or a category the host chooses. A transition rate applies once per settlement, and everything the society writer applies waits for the cadence. The cadence is recorded in the plugin descriptor, so a run is restored and replayed only with a plugin of the same cadence.
transfer settlement	转移结算模式	TransferSettlement, SocietyPlugin::with_transfer_settlement	How a society settlement checks the cohort transfers due at it. Batch (批量结算, the default) checks every due transfer against the state at the start of the settlement and applies the ones that still fit in admission order, each to the state the earlier ones left; a transfer whose quantity no longer fits settles as insufficient_source. One by one (逐笔结算) checks each transfer against the state the earlier transfers of the same settlement left, so of the due transfers that share a cohort one completes and the others settle as stale_source. The mode is part of the plugin identity.
society ingress queue	社群输入队列	SocietyIngressQueue, SocietyIngressBatch, society_ingress_queue_entries	The owner-side queue of rebases, lifecycle deltas, and pressure revisions that wait for the next society settlement: a small head record and one batch record per admitting boundary, so its evidence follows what each boundary admits. A packet that finds the queue full is refused with a recorded queue_full outcome.
society outcome retention	社群结果留存策略	OutcomeRetention, SocietyPlugin::with_outcome_retention	How long the cohort exchange ledger keeps rebase and lifecycle delta outcomes: for the run (Keep, the default) or the latest settlement’s only (LatestSettlement, under which a settlement that records such outcomes first drops those recorded at an earlier time). Transfer outcomes, which make a resent transfer idempotent, and pressure revision outcomes are kept under both. Part of the plugin identity, like the settlement cadence and the transfer settlement mode. Not the run’s request outcome retention (请求结果保留期).
cohort class	cohort 类别	CohortClass, SocietyState::cohort_classes, MAX_COHORT_CLASS_TEXT_BYTES	The set of cohorts whose classification carries one value, named by the classification’s dimension and value as authored (any text of up to 4,096 bytes). Both ends of an intergroup relation are cohort classes; cohorts and their classifications never change at runtime, so a class checked when a run is created holds for the run.
intergroup relation	群体间关系	IntergroupRelationEdge, IntergroupRelations, intergroup_relation_revision_v1, load_intergroup_relations	A directed, typed relation from one cohort class toward another in an optional region (a territory, a government, or a domain entity), with acceptance, tension, and trust per mille, bounded evidence, and a revision. The edges live in their own record, canwu.society:intergroup-relations, authored by the scenario and created or revised by expected revision through the public packet, which applies as a whole in phase 7; every refusal is a society_intergroup_relation_rejected_v1 event. An edge is never removed, the settlement neither reads nor writes the relations, the host reads them with load_intergroup_relations, and actors learn of them through knowledge the application publishes.
pressure revision	压力修订	PressureRevisionDecision, revise_society_pressure, society_pressure_revision_v1	A versioned decision of the institution behind an alignment that revises, within the alignment’s affected cohorts, policy pressure rows it issued and the activity and reach of its target’s influence edges and organization nodes. The society settlement applies it; it never creates or removes a row.
vote weight	表决权重	ProcedureStageDefinition::seat_weights	The integer weight a seat’s ballot carries in a procedure stage; a seat without an entry weighs 1. Quorum and threshold use summed weights; vetoes are seat powers and are never weighted.
unit block	表决单元	ProcedureStageDefinition::block_of_seat	A group of a stage’s seats that takes one position, the weighted majority of its seats. A block whose weighted votes are evenly divided, or one without counted ballots, takes no position.
block threshold	单元门槛	ProcedureStageDefinition::block_threshold	The number of unit blocks that must take the For position before a blocked stage passes, in addition to its weighted seat rule.
casting seat	决定票席位	casting-seat:<seat> tie-break	A seat named by a procedure’s tie-break whose own For ballot adds one For block when as many blocks are For as Against. It must sit in every blocked stage. The status-quo tie-break adds no block instead.
consultation stage	征询阶段	ProcedureStageKind::Consultation	An advisory procedure stage. Its seats receive tickets marked advisory, and their ballots persist as participation evidence but never count; the stage completes at its deadline and opens the next stage.
technology simulation extension	技术模拟扩展	canwu-technology	The optional generic extension for technique revisions, evidence, local capability, implementation, use-specific adoption, and transmission opportunities. It is not a global technology tree.
external transmission source	外部传播来源	ExternalTransmissionSourceV1	A practice-transmission source outside the simulation, such as an off-map teacher, cited as an initial-scenario content record with a declared reliability instead of a live capability. The destination opens the opportunity.
historical research plugin	历史研究插件	canwu-history-research	An optional simulation plugin that records a researcher’s bounded assessment of evidence without changing base technology truth.
command plugin	命令插件	register_command()	A simulation plugin that registers schema-validated commands and handlers.
boundary system	边界系统	BoundarySystemContract	A declared system that runs in a phase with bounded reads, writes, resources, and randomness.
domain schema	领域 schema	DomainRecordType	A versioned structural contract for plugin-owned domain data. Chinese code-adjacent prose retains schema.
domain record	领域记录	DomainRecord	Typed persisted domain state owned by a plugin rather than the generic world model.
plugin component	插件组件	PluginComponentRecord	Plugin-owned component state attached through declared keys and visibility.
plugin semantic environment	插件语义环境	PluginDescriptor	The exact plugin identities, versions, and semantic hashes required for load or exact replay.
reference content pack	参考内容包	—	A first-party or downstream package of versioned, namespaced, serializable domain definitions, scenario data, localization, and provenance. It supplies content to a domain extension; it is not a kernel subsystem or solver.
reference integration	参考整合包	—	A replaceable public-API implementation that maps generic domain capabilities to a small world, production, information, or society model. It may contain runtime plugins and host-adapter code.
starter kit	入门套件	—	A runnable host and composition example that combines compatible reference content and integrations into a complete vertical slice. It is reference code, not a privileged engine path.
fiscal simulation extension	财政模拟扩展	canwu-fiscal	The generic fiscal-procedure domain extension. It owns law, regional adoption, assessment, authorization, remission, receipt, audit, accounting cycles, the fiscal archive, and holder-relative knowledge reports, but not resource balances or transfers. Its state is partitioned into records, so a boundary reads and writes only the records its packets touch.
scope ledger	范围明细	FiscalScopeLedger, FiscalRecordKind::Ledger, fiscal_ledger_reference	The record of one scope binding: the binding, its adoptions, one accounting cycle book per hot cycle, its revision and recent outcomes, and its cycle watermark. It is the target of the actions on a scope.
accounting cycle book	核算周期账册	FiscalCycleBook, FiscalAction::CloseAccountingCycle	The assessments, remissions, execution requests, receipts, and audit findings of one scope in one accounting cycle, inside its scope ledger. An open book takes every object; a closed book takes only audit findings; an archived book has left the ledger. Each book object names the action that created it.
fiscal office	财政机构记录	FiscalOffice, FiscalRecordKind::Office, fiscal_office_key	The record of one institution: its authority and audit bindings, appointment policy and auditor proposals, revision and recent outcomes, the observers that see it, and per hot cycle its hot-book count, partition keys, and archived totals. Its identity is the office key (机构键), a digest of the institution’s reference.
jurisdiction record	辖区记录	FiscalJurisdiction, FiscalRecordKind::Jurisdiction	The record of one catalog region: scope counts per mechanism, adoption counts per rule, and the transition candidates, with its revision and recent outcomes. It is the target of ApplyTransition.
observer record	观察者记录	FiscalObserver, FiscalRecordKind::Observer, FiscalAction::RebindObserver, FiscalAction::RemoveObserver	The record of one observer binding: the binding with its granularity and cadence, its row layout, its cycle slots and the digest of every published part, and its revision. Report lines are named by roles on this record, so re-pointing or removing one binding moves no other binding’s lines.
binding directory	绑定目录	FiscalRecordKind::Directory	The 4,096 bucket records that map a binding, policy, or proposal ID to the office that holds it, so admission finds an office from a binding ID with one partial read.
scope index page	范围索引页	FiscalRecordKind::Index, FISCAL_INDEX_PAGE_SCOPES	A create-only record listing the scopes of one office or one region in rank order, 1,024 to a page; written once with the scenario.
report-queue page	报告队列页	FiscalRecordKind::ReportQueue, FiscalReportQueueEntry::due_at, FISCAL_REPORT_DRAIN_INGRESS	One of the 4,096 records that hold the report work owed to observers, each entry with its due time: the cycles and parts to publish, or a whole report. An interval observer always has one entry, due at its next due time. What a boundary cannot publish stays queued and the boundary schedules the internal drain packet, so the next boundary at the same instant continues.
report cadence	报告节律	FiscalReportCadence, FiscalObserverBinding::cadence	When an observer’s report is due: on change (OnChange, the default), in the boundary that changes something it shows, or at the aligned times of a report interval (报告间隔, Interval { every, offset }, spread with FiscalReportCadence::staggered), offset + k × every after SimTime::EPOCH, served by the first boundary at or after each due time that runs the report system. An interval report never shows a change between due times, and once it has been published its summary is republished at every due time, so silence never means “no report”. The cadence is the scenario’s and does not change with a rebinding.
wake cadence	唤醒节奏	FiscalPlugin::with_report_cadence, wake-fiscal-reports-on-cadence-v1	The SystemCadence category on which the fiscal plugin’s wake system runs: on a boundary of that category with no event it reads the root and, when a report is due, schedules the drain packet so the event-driven report system runs in the next boundary at the same instant. It is a plugin knob recorded in the plugin descriptor, not a binding’s report cadence, which says when one report is due.
report schedule	报告日程记录	FiscalReportSchedule, FiscalRecordKind::ReportSchedule, FiscalRoot::earliest_due	The record of each report-queue page’s earliest due time and the pages that hold parked entries; the root keeps the earliest due time of all. A boundary before that time, with nothing parked, reads only the root; one at or after it decodes only the pages whose earliest due time has come.
institution granularity	机构粒度	FiscalReportGranularity::Institution, FiscalObserverBinding::granularity	A report layout of one row per visible institution and mechanism, its facts the sums of the institution’s hot books of the cycle per unit and payment form, rendered at the observer’s confidence. The default, scope granularity (范围粒度, Scope), is one row per scope. A part of institution rows cites the office’s current version and counts the books it summed, weaker provenance than a scope part’s ledger citations.
report share	报告份额	FiscalReportBudget, FiscalPlugin::with_report_budget	The part of the engine’s publication budget the fiscal report system may use in one boundary (bodies, entries, payload bytes), by default half of KnowledgeLimitsV1::CURRENT. What fiscal publishes is the least of its share and the budget left at its cut; the rest waits for the drain. A share lies between FiscalReportBudget::MINIMUM (two bodies, two entries, 128 KiB) and the engine’s limits, and a custom share is carried in the report system’s name, so it is in the plugin descriptor. The prose term is “report share”; the code identifiers keep “budget”.
parked rotation	搁置轮询	FISCAL_PARKED_CHECKS_PER_BOUNDARY, FiscalRoot::parked_cursor	How the report system re-checks observers whose holder is a dead person: 16 parked entries per run, after the root’s cursor, in order of queue page and binding ID, wrapping round, so a revived holder is published to within ceil(parked / 16) runs at a fixed cost per run.
action target	行动目标	FiscalActionTarget, FiscalActionEntry::expected_revision, fiscal_target_revision	The one record an action names the revision of: a scope ledger, an office, a jurisdiction, or an observer. An action is stale only when its target changed since its issuer looked.
fiscal action batch	行动批次	FiscalActionBatch, FiscalActionEntry	The payload of apply_fiscal_action_v1: one authority binding and up to 4,096 entries, each an ordinary action with its own ID, expected revision, outcome, and event. Admission refuses the whole batch for an inadmissible entry, naming its index.
fiscal action batch set	行动批次组	FiscalActionBatchSet, fiscal_action_set_command	The payload of apply_fiscal_action_set_v1: up to 64 batches under one command issuer, each admitted as a batch command is and queued as its own settlement packet, so several offices’ batches settle in one round. Admission refuses the whole set, naming the batch. A set, and only a set, also admits a decision in one’s own name (本人名义决策): a decision whose origin is an actor and whose command subject is that same person, resolved as that person issuing directly, never as an institution.
outcome ring	结果环	FISCAL_RECENT_OUTCOMES, fiscal_recent_outcome	The newest eight outcomes an action target keeps, with the outcome floor (结果下限), the settled revision of the newest evicted outcome. Together they refuse a re-sent action from hot state alone; every outcome stays in its settled event.
cycle watermark	周期水位线	FISCAL_CYCLE_ARCHIVED	The greatest accounting cycle a scope has archived (scope watermark, 范围水位线) or whose institution totals its office has archived (office watermark, 机构水位线). No new book is opened at or below either, so an accounting partition is assessed at most once for the life of a run without reading the archive.
partition key	分区键	MAX_FISCAL_PARTITION_KEYS	The unit and payment form of one fact in a book or a report row. One institution’s books of one cycle and mechanism use at most four.
fiscal archive	财政归档	FiscalArchiveStore, prepare_fiscal_archive, enqueue_fiscal_archive, finalize_fiscal_archive_retention, archived_fiscal_record, FiscalArchiveKeyV1	The host-owned content-addressed archive of closed books, institution totals per cycle, and maintenance receipts, with a cumulative lookup index in the resource archive’s format. No boundary reads it; a run makes any number of commits. The helpers take the run and read only the records a commit needs, and they refuse a book citing evidence newer than the run’s own sealed cut (sealed_evidence_cursor; a run that has not sealed since it was created or restored, a continuation restore included, has none and refuses nothing), so a sealing host seals at each save.
cycle slot	报告周期槽位	MAX_FISCAL_REPORT_CYCLE_SLOTS	One of the 64 places in an observer’s report that a hot cycle takes; part p of slot s is report line 1 + s * 1,024 + p. A leaving cycle publishes its parts empty and frees its slot; a cycle past the slots is counted in the summary’s omitted_cycles.
report part	报告分段	FiscalReportRecord, FISCAL_REPORT_ROWS_PER_PART	One knowledge record of a report: 16 consecutive rows (scope rows, or institution rows) of one cycle, on its own report line, republished only when the digest of its rows changed. Line 0 is the summary.
fiscal historical context	历史财政语境	FiscalHistoricalContext	The explicit historical year and mode used to evaluate active periods and reform candidates. It changes through canonical ingress and never applies reforms automatically.
fiscal coverage cell	财政覆盖单元	FiscalCoverageCell	One period-region-mechanism cell resolved by deterministic priority to supported, archetype fallback, explicit unknown, or not applicable.
fiscal execution receipt	财政执行凭证	FiscalExecutionReceiptPacket	A settlement request citing exact typed adapter-result versions and naming the scope whose request it settles, sent in packets of up to 4,096 through enqueue_execution_receipts. The admitted receipt derives externally observed quantity and disposition from those results. An exact version settles at most one receipt in each scope it names, and one (evidence kind, external_operation_id) pair at most one among a scope’s hot books. A receipt that settlement cannot accept is refused with an event and never fails a boundary. It does not own resource truth.
aggregated execution evidence	汇总执行证据	FiscalExecutionEvidence::parts, FiscalExecutionEvidencePart	One evidence record of one execution across several scopes: no scope or request of its own, and up to 4,096 parts (证据分项), one per scope, each naming a request and a quantity, that sum to the record’s quantity. A receipt of each scope cites the one version and settles the part naming its scope at the part’s quantity.
acting actor	代理角色	FiscalAuthorityBinding::acting_actor	A second actor admitted for one binding’s fiscal actions only while its authority basis is the current version of its record. The standing authorized actor is unaffected. An acting actor cannot rebind the binding; an authority rebinding replaces or removes it.
authority basis	权限依据	FiscalAuthorityBinding::authority_basis, FiscalAuditBinding::authority_basis, MovementOrderRequestV1::authority_basis	The exact application record version, of a kind the owning plugin reads, that grants authority: to a fiscal binding’s acting actor, to an audit binding’s auditor, or to a movement order that moves subjects other than its owner. It must be the current version of its record when checked; a newer or retired version ends a fiscal grant until a rebinding installs the current one.
authority rebinding	权限改绑	FiscalAction::RebindAuthority, FiscalRebinding	A settled fiscal action that replaces an authority binding’s authorized actor, acting actor, and authority basis in one commit. It is issued under the binding it replaces, by its authorized actor or by the institution deciding as a body, never by an acting actor. The binding records the action and its issuer.
audit binding	审计绑定	FiscalAuditBinding, FiscalAction::RebindAudit	A fiscal binding that admits one auditor from outside an institution to record audit findings on that institution’s scopes, and no other fiscal action, while the binding’s own authority basis is current. Who installs, replaces, and removes it is the audited institution’s appointment policy; RebindAudit is the institution’s own direct decision only where that policy makes it its own appointer. A binding establishes who entered a finding, and its nomination who proposed the auditor.
appointment policy	审计任命政策	FiscalAppointmentPolicy, FiscalState::add_appointment_policy	A scenario-declared policy, one per audited institution, naming who appoints and removes its auditors. The appointer (任命机构) is an institution that decides with DecideAuditAppointment; nominators (提名方) propose a candidate with NominateAuditor; petitioners (请议方) ask for an auditor’s removal with PetitionAuditorRemoval; appoints_without_nomination and removes_without_petition say whether the appointer may act unprompted. An institution with no policy has only the audit bindings installed with the state.
auditor proposal	审计人提案	FiscalAuditProposal, FiscalProposalResolution, FiscalProposalRef	A pending nomination or removal petition in the audited institution’s office, recorded with its party and resolved once as accepted, dismissed, or superseded. A party has room for four pending proposals under a policy; each policy keeps its latest 64 resolved ones.
resource simulation extension	资源模拟扩展	canwu-resource	The optional conserved-quantity extension for exact resource/unit revisions, accounts, protected floors, demand, reservation, allocation, transfer, accepted delivery, consumption, loss, fulfillment, and deterministic receipts. It does not own money or markets.
production simulation extension	生产模拟扩展	canwu-production	The optional production-asset extension for processes, sites, facilities, capacity, work orders, work in progress, execution, projects, and output settlement. Site form and requirements are revisioned data, not universal building levels.
resource capability stage	资源能力阶段	ResourceCapabilityStage, ResourceCapabilityRevision	An effective-dated revision that places a resource at one stage between potential and delivered supply: potential, observed or surveyed, proven, technically extractable, operating site, route-accessible, or delivered and accepted. Each revision cites its model cards.
protected stock floor	受保护存量底线	ProtectedFloorPolicyRevision, ResourceProtectedFloorRequestV1::install	A revisioned policy reserving an amount such as seed, subsistence, or emergency stock from ordinary allocation unless a separately authorized action overrides it. The scenario authors a revision, or an account’s custodian installs one at runtime as a content-addressed revision; content-addressed revisions that no account or demand refers to are retired.
single-step completion lease	一步式完成租约	ResourceCompletionOperationV1::SingleStepLease, SingleStepCompletionLeaseV1	A completion lease whose four setup steps (acquire, grant, prepare, activate) take effect together in one operation, or not at all, with the checks and the activation certificate of the four-step path, leaving one outcome and one receipt. It is available only when the resource plugin is the lease’s only participant, and it enters through the completion ingress, never as a holder command.
skipped packet	跳过的数据包	RESOURCE_INGRESS_SKIPPED_EVENT, ResourceIngressSkipV1, ResourceIngressSkipReasonV1	A resource packet that cannot settle for an expected reason (its result does not fit the root, its operation key is taken or reserved, or it fails its settlement checks): it changes nothing, leaves its key free, and is named by one canwu.resource.ingress_skipped.v1 event with a stable reason, while its boundary commits. The sender sends it again when room returns. An expected refusal is never a failed boundary.
deferral	延后结算	RESOURCE_DEFERRED_INGRESS, ResourceIngressSkipV1::deferred_until	What the resource plugin does with work another plugin scheduled (a production output batch, or a completion step that can settle later as the same step) that does not fit the root while an archive commit or a lease release can make room: it queues the same work to itself one minute later, doubling up to 1,024 minutes, and the skip event says until when.
account-level loss	账户损耗	ResourceOperationRequestV1::RecordLoss	A loss debited in place from one account, without a transfer, citing its cause. It counts as admitted loss for conservation, never touches reserved stock, and respects the protected floor unless explicitly allowed.
partial transfer loss	转移部分损耗	ResourceOperationRequestV1::RecordTransferLoss, ResourceTransferLossRequestV1	A loss of part of an open transfer’s escrow; the transfer keeps its state and the rest, and the loss counts as admitted loss. Acceptance then credits the demand with what is accepted, so a loss reopens that much of it.
atomic exchange	原子交换	ResourceOperationRequestV1::BeginExchange, ResourceExchangeTermsV1	Two transfer starts admitted or rejected together under one outcome. Each leg’s completion lease is held by its source custodian and bound to the digest of the agreed terms; the two transfers then settle independently.
local acceptance	本地验收	ResourceTransferDispositionV1::AcceptLocal	Settling an undispatched transfer without a transport execution when both accounts declare the same place scope, citing the exact handover record.
place scope	地点范围	ResourceAccount::place_scope	A host-declared place identity for an account’s stock, set when the scenario installs the account and changed only by the host application (RescopeAccount). It is never inferred; without it, local acceptance is unavailable.
account rescope	账户改换地点	ResourceOperationRequestV1::RescopeAccount, enqueue_resource_account_rescope	The host application’s change of an account’s place scope, citing the current version of the record of the move; a holder never sets a place scope.
access grant	动用授权	ResourceAccessGrantV1, ResourceDemandSourcePolicyV1::Granted	A grantor custodian’s recorded consent, citing exact authority evidence, that a grantee may draw on its stock of one exact resource and unit revision up to a cap within a window. The grantee’s own completion lease authorizes each debit, and nothing falls back to other accounts.
live root	活动根	ResourceLiveRootV1, resource:runtime:v1	The domain record that persists the resource root without its bucketed records: open demands and their allocations, active transfers, leases, report grants, observation heads, and the two ledgers that count the hot terminal and live records it does not hold. Every boundary that settles resource work reads it.
hot terminal record	常驻终态记录	ResourceHotTerminalEntryV1, ResourceState::hot_terminal_records	A terminal record (an outcome, a closed demand with its reservations, a settled transfer, a receipt) that has not yet left the root through an archive commit. It counts against the candidate budget and is validated by every restore.
hot terminal bucket	常驻终态桶	ResourceHotTerminalBucketV1, resource:hot-terminal:{bucket}, resource_hot_terminal_bucket, ResourceBucketRecord	One of the bucket records, as many as half the candidate budget rounded up to a power of two (about two records each), that hold the hot terminal records whose identity hashes to it. A boundary writes only the buckets whose entries changed, and an archive commit rewrites or deletes each bucket it empties once. It shares the record kind canwu.resource bucket with the live buckets.
hot terminal ledger	常驻终态账	ResourceHotTerminalLedgerV1, ResourceState::hot_terminal	The counts in the live root (records, outcomes, transfers, applied maintenance receipts, demand requesters, floor policies, lease receipt acquisitions, bytes) that every rule reads instead of the hot terminal records themselves, so a boundary settles on the records it attached as it would on the whole root.
live bucket	活动桶	ResourceLiveBucketV1, resource:live:{bucket}, ResourceLiveLedgerV1, ResourceRootReader::attach_live	One of the bucket records, their count fixed for the life of the root, that hold the accounts, access grants, definitions, unit revisions, and custodian index entries by a hash of each identity, about four to a bucket, counted in the live root’s live ledger. A boundary attaches the live records a packet names and writes only the buckets it changed, so settling one operation costs the same whatever the number of accounts, and a release build refuses a boundary that would write over a live record it did not attach.
kept resource root	已读资源根	KeptResourceRoot, ResourceRootReader::keep, ResourceRootReader::reattach	What a host’s reader of the resource root read, kept between steps without borrowing the run: the state, the decoded records, the requests, and the run’s own copy of each record it read. A re-attach repeats the requests on the run’s current root and decodes only the buckets whose records the run no longer shares with it, never trusting a version number; a request that failed is repeated. Host memory, never saved, and a trusted-host read of every custodian. Not the movement kept booking (在持预订).
custodian index	保管人索引	ResourceCustodianAccountsV1, ResourceRootReader::attach_custodian_accounts, ResourceState::refresh_custodian_index	The live-bucket entry that lists the accounts one custodian holds. It changes only when the custodian gains an account, so a reader attaches one holder’s stock by naming the holder, and validation refuses an account missing from its custodian’s index. A fixture that inserts accounts into a state directly refreshes it before applying an operation.
consumption batch	消费批次	ResourceConsumptionBatchRequestV1, ResourceOperationRequestV1::ConsumeBatch, resource_consumption_batch_item_key, ResourceState::consumption_batch_can_fit, ResourceLimitsV1::max_batch_items_per_boundary	Up to 256 exact allocation-leg consumptions settled under one completion lease, entering through the provider’s adapter ingress with a typed consumption intent per item under the item’s reserved key. Each item is refused alone or consumed with its own outcome, several items may draw on one account, the batch outcome totals the consumed quantity with the refused quantity as its remainder, and the lease completes once. A batch whose result does not fit the root is skipped whole and records nothing; one past the boundary’s item bound is deferred to the next boundary at the same instant.
link history	运输关联历史	ResourceTransfer::link_history, ResourceTransferLinkV1, MAX_RESOURCE_TRANSFER_LINKS	The ordered transport links a transfer recorded as it advanced, each with its evidence, at most 16 (14 in transit), kept into the archive. While the transfer is open it is the only copy of its transport evidence.
intermediate leg	中间路段	TransferProgressV1::InTransit	A later leg or handoff of the same execution, recorded as an InTransit advance from InTransit while the transfer stays in transit; its leg index is not lower than the current one.
external inflow credit	外部流入入账	ResourceCreditSourceV1::ExternalInflow	A custodian’s evidence-backed credit of value from outside the modelled accounts, the counterpart of an external outflow; as a tracked command, only under a lease bound to exactly that credit. Its outcome keeps the cited record version.
lease operation binding	租约操作绑定	CompletionOperationBindingV1, EligibilityEnvelopeV1::operation_binding, EligibilityEnvelopeV1::bound_to	An optional record of the one irreversible operation (kind, quantity, and for a terminal transfer disposition optionally which one) a completion lease authorizes, written by the lease’s issuer, never a holder, in its eligibility envelope; redeeming the lease for another is refused.
archive lookup index	归档查找索引	ResourceArchiveLookupPageV1, ResourceArchiveIndexDirectoryV1::lookup_root	The cumulative, content-addressed index that each archive commit extends, so that checking whether a key was archived reads the head directory and one authenticated page per index level, however many commits the run has made. The resource archive, the production archive, the fiscal archive, and the reference package archive keep an index in this format, each under its own namespace. A restore, an exact replay, or a fork needs the pages of each archive head it passes.
work in progress	在制品	WorkInProgress	Inputs already admitted to an unfinished production execution, with exact process, facility, resource, and evidence bindings. It is neither available inventory nor settled output.
realized output	实际产出	realized_output_per_mille, realization_evidence	A completed execution’s output in thousandths of the nominal process output, floor-scaled into output settlement. Any non-nominal ratio needs an exact evidence record of a kind the process revision declares.
movement lifecycle extension	移动生命周期扩展	canwu-movement, MovementPlugin	The optional extension that owns the lifecycle of transport records: it admits movement orders, settles legs at their due times, holds legs before departure and under way, allocates capacity pools, and publishes holder-relative movement reports. Incidents, hazards, and their random draws stay in application systems.
military simulation extension	军事模拟扩展	canwu-military	The optional engagement engine: forces, stepped engagements, sieges, crossings, and engagement reports on a host-installed rulebook; it is not a universal combat model and owns no control or occupation.
engagement	交战	EngagementStateV1, OpenEngagement	A stepped fight between two sides at a host site, opened by command and closed into a summary.
engagement step	战斗步	StepV1, EngagementStepsV1	One resolution of the step formula; the per-step evidence.
combat rulebook	战斗规则册	CombatRulebookV1, InstallRulebook	The host’s versioned, hashed parameters every step reads.
step resolver	战斗步结算器	StepResolver, ParametricStepResolver	The deterministic function from step input and draws to step outcome; the crate’s parametric one or the host’s.
siege	围城	SiegeStateV1, InvestSite	Investment, emplacement, breach, assault, sortie, relief, and fall of a host site.
contested crossing	渡河作战	CrossingStateV1, OrderCrossing	A crossing made in waves that an interceptor may catch, ending in a bridgehead on the far bank.
condition input	战斗条件输入	ConditionInputV1, SupplyInput	The host-supplied per-side values a step reads, cited to the host records they came from.
pre-battle forecast	战前预判	ForecastV1, ForecastBandId	The opening ratio’s band from the rulebook’s cuts.
timed step	定时战斗步	timed_step_ingress, MILITARY_TIMED_STEP_INGRESS	A step the host queues as plugin ingress due at a named time; the boundary at that time steps the work due, so a host that steps once a day adds no boundary. Commands admitted in that boundary apply after it.
siege join	加入围城	JoinSiege	A command that adds free forces at the site to a siege’s besiegers or defenders, and to the siege’s assault or sortie in progress.
siege release	撤出围城	ReviseSiegeV1::release	The part of a siege revision that takes forces off a siege’s side, free to be placed.
engagement time limit	交战时限	OpenEngagementV1::max_minutes, EngagementStateV1::max_minutes	How long a fight runs before it closes Stalled without a break: its kind rule’s, or the shorter one the host named when it opened the fight.
force-supply reference consumer	军事补给参考消费者	canwu-force-supply-reference	A replaceable integration proving that military logistics can consume the shared resource API while owning force-local demand, readiness, shortage consequences, and requisition saga state. It is not a universal combat model.
local scarcity projection	本地稀缺度投影	LocalScarcityProjection	A detached, holder-bound read model explaining observed supply, demand, buffers, route access, security, and policy. It does not claim a price.
price-pressure projection	价格压力投影	PricePressureProjection	A detached read model materialized only from qualifying price-bearing evidence and a revisioned interpretation rule. It neither forms a market nor settles a trade.

Evidence, randomness, and persistence

English	中文规范写法	Code or API	Meaning and use
event	事件	SimEvent	A serializable causal record in authoritative evidence, not a UI notification.
causality	因果关系	CauseRef	The recorded relationship explaining why an event or change occurred.
correlation ID	相关标识	correlation_id	A stable identifier that groups records belonging to one authoritative causal root.
random stream	随机流	RandomStreamKey	A named, versioned deterministic source owned by a declared mechanic.
draw evidence	抽样证据	RandomDrawRecord	The recorded stream, range, operation, and result of one deterministic draw.
random decision policy	随机决策策略	DecisionPolicyKind::Random	A bounded ticket selector resolved by a declared boundary system with replayable draw evidence, not a general world-event generator.
decision option weight	决策选项权重	DecisionOptionWeight	A canonical option ID and nonnegative integer weight mapping one bounded draw to an existing ticket option.
operation-keyed random draw	操作定址随机抽样	random_sample_for_operation, random_draw_for_operation, RandomOperationDraw	A draw addressed by stable cause, operation ID, target, occurrence, purpose, and stream identity so retries and replay cannot consume a different sample. random_draw_for_operation also returns the ID of the draw’s evidence, and an exact retry is answered from the keyed-draw ledger whether or not that evidence is still retained. A fresh draw cites seal-stable operation evidence: evidence of the same boundary, an ordinal reference the journal counters prove, or a record’s current or initial-scenario version.
keyed-draw ledger	操作定址抽样明细	KeyedDrawEntry, ContinuationCheckpoint::keyed_draws	The persistent record of every operation-keyed address a run has drawn, retained or sealed, with its draw ID, evidence, bound, purpose, and value. A boundary commit extends it, a failed boundary restores it, a seal and a fork share it, and every restore builds it once; it keeps one entry per address until the draw retires, for the life of the run unless its stream declares a keyed-draw retirement.
keyed-draw retirement	定址抽样退役期	KeyedDrawRetirement, BoundarySystemContract::keyed_draw_retirement	How long after its boundary an operation-keyed draw of a stream stays in the keyed-draw ledger: a positive duration the stream’s owning boundary system declares, part of the plugin descriptor. The first boundary at or after a draw’s time plus the duration drops it before any system runs. Not 已退役请求结果 (a command request) or 已清退条目 (a knowledge entry).
retired keyed draw	已退役定址抽样	—	A keyed draw past its retirement: never answered again; a request with its address is a fresh draw under a new draw ID (the same value for the same bound and purpose), and the retired draw’s record stays in the draw journal as evidence.
evaluation trace	评估轨迹	EvaluationTraceRecord, BoundaryDirective::RecordEvaluationTrace	Bounded boundary evidence explaining, term by term, how an application rule produced one integer result for one subject. It is never state. A holder reads it through CanwuViewer::evaluation_traces only for its own entity, or for a subject its ledger learned of before the trace was evaluated.
reservation	资源预留	ReservationRequest	A declared request against a conserved resource pool before allocation.
demand source policy	需求来源策略	ResourceDemandSourcePolicyV1	Selects the eligible supply accounts before scarcity arbitration: pooled matching accounts, a bounded exact requester-custodied list, or listed grantor accounts under an access grant. Only the Granted form carries cross-custodian authority, and only within its grant.
allocation	资源分配	ReservationAllocation	The deterministic result of settling competing reservations against supply.
visibility	可见性	StateVisibility	The policy controlling which state and evidence can reach which readers.
snapshot	快照	SimulationSnapshot	A complete persisted state image validated on restore.
checkpoint	检查点	SimulationCheckpoint	A validated compact base state from which later journal evidence can continue.
checkpoint journal	检查点日志	CheckpointJournal	A checkpoint bundled with subsequent evidence for compact persistence and restoration.
paged checkpoint	分页检查点	PagedSimulationCheckpoint, prepare_paged_checkpoint	The content-addressed form of a checkpoint, stored as state pages so that each new checkpoint adds only the pages that changed. Restoring it needs the contiguous evidence prefix up to it. Its paged root also commits to which evidence is sealed, so it is not a state identity: a restore from sealed segments keeps the checkpoint hash but gets a different paged root. Compare checkpoint hashes instead. A record of up to 512 MiB is paged in record-value chunks, the knowledge ledger is paged as bodies and holder ledgers, and the compact body is chunked, so no part is limited to one page; every restore is bounded by a restore budget.
restore budget	恢复预算	PagedRestoreBudget, PagedRestoreBudget::new, PagedRestoreBudget::DEFAULT, ErrorCode::RestoreBudgetExceeded	The host-supplied bound, a required argument of every paged restore, on the bytes a restore assembles from pages: every record value, knowledge body, holder ledger, the compact body, and the hot decision state is charged before it is allocated, and one past the budget is refused with RestoreBudgetExceeded before any chunk of it is read, restoring nothing. It bounds assembled bytes, not heap; DEFAULT (2 GiB) is a ceiling for a host’s own checkpoints, and untrusted pages get a budget near the expected size plus an authenticated root.
assembled bytes	组装字节数	PagedSimulationCheckpoint::assembled_bytes	The exact number of bytes an honest restore of a paged checkpoint assembles from its pages, stated in the descriptor; a host restores its own checkpoint with that as the budget. A restore refuses a descriptor that states more than the budget before reading any page, and one whose count differs from what its pages assemble.
record-value chunk	记录值分块	STATE_PAGE_VALUE_CHUNK_BYTES, MAX_PAGED_RECORD_BYTES	One content-addressed 1 MiB page of a domain record longer than 1 MiB in a paged checkpoint. The record’s leaf page names its chunks in order, an unchanged chunk is not stored again, and a record of up to 512 MiB can be paged; a longer one makes preparing the paged checkpoint fail with value_out_of_range, never a boundary.
continuation checkpoint	接续检查点	ContinuationCheckpoint, continuation_checkpoint, CompactedCanwu::from_continuation_checkpoint_verified	A save from which a run continues without its evidence history: current state, the continuation closure, the keyed-draw ledger, the request index, the time index, the boundary ledger, and resumable journal commitments. It is byte-identical at the same cut whether or not the run ever sealed, restores to a CompactedCanwu without any evidence segment, and is verified against the continuation_hash the host stored. It holds ground truth and must not reach player, agent, or remote clients.
continuation closure	接续闭包	PinnedEvidenceRecords, UnadmittedEvidence	The evidence that work still in flight may read with its payload: pending ingress with their provenance facts, the causes of pending work, payload-required dependencies, and the unadmitted tail. It is a function of current state and the cut, never of when the run sealed; a seal keeps it as pinned evidence (固定证据) below the sealed cut.
provenance fact	有依据事实	PluginIngressProvenanceFact	What a seal keeps of a pending or declared ingress record besides its ID: the boundary that generated it, with its issuer, target plugin, packet type, and status (pending, admitted, or cancelled), or that no boundary generated it. plugin_ingress_matches and cancellation read the fact after the record is sealed, so a sealed run answers as an unsealed run does.
journal frontier	最新日志	JournalFrontiers, JournalFrontier	The exportable state of one journal’s resumable BLAKE3 commitment: its item count, byte length, chaining values, and unfinished chunk, about 2.8 KB at most. A continuation checkpoint carries five, so a restored run extends the same commitment streams and reaches the same checkpoint hash at every later boundary.
run handle contract	运行句柄契约	canwu_api::CanwuRun, typed_domain_record	The host trait that Canwu and CompactedCanwu implement: current-state reads, the records of one kind (domain_records_of_kind), the run’s own shared copy of a record (domain_record_shared, the allocation domain_record reads, replaced by every write), the current knowledge records of any holder (knowledge_heads, knowledge_current_records), replay-stable record versions, the journal counters, the boundary ledger, the pending ingress, and canonical ingress. Extension host helpers take any CanwuRun, so an archive-backed or continuation-restored run is driven through the same calls as a full-history run. It settles nothing, and its reads are trusted-host reads.
exact replay	精确重放	replay_from_journal()	Reconstructing and verifying the same run from recorded input and evidence without rerunning external choices.
alternative reality	平行现实	—	A new causal reality formed by choosing different inputs from a shared prior state; it is not exact replay.
fork	派生分支	fork()	An independent simulation copied from an existing point so it can advance with new input.
state commitment	状态承诺	CommitmentRoots	A cryptographic commitment that binds authoritative state or evidence for validation.
semantic hash	语义哈希	semantic_hash	A stable declaration of plugin behavior used to reject incompatible load or replay environments.
exact domain-record version	精确领域记录版本	DomainRecordVersionRef, domain_record_version()	A domain-record identity, version, and establishment source used to preserve the meaning of historical evidence after the current record changes.

Actors, knowledge, and decisions

English	中文规范写法	Code or API	Meaning and use
actor	角色	PersonId	A person or in-world principal whose knowledge and authority constrain a view or action.
person availability	人物可用性	PersonAvailability	One person’s core life and custody state, changed only by a declared boundary system. A person who is not alive, or who is detained or captive, cannot issue commands, make decisions, or act as a controller’s authority person. No recorded state means alive and free.
life state	生存状态	LifeState	Alive, Dead, or Missing; one half of person availability.
custody state	人身状态	CustodyState	Free, Detained, Hostage, Captive, Hiding, or Exile; the other half of person availability. By default only detained and captive block admission.
person creation	人物创建	BoundaryDirective::CreatePerson, PersonDraft, PersonPlacement, BoundaryCreatedPerson	A phase-7 directive that creates a person from an application draft and provenance with an engine-allocated ID. The draft carries a placement in the WorldSnapshot projection (a government and a location) or none. The receipt binds that ID to the proposing plugin, system, and correlation; the person is visible from the next boundary.
unplaced person	无定位人物	PersonDraft::placement, PersonPlacement	A person created without a placement: it exists in the entity registry with person availability and a creation receipt and has no Person record in the WorldSnapshot projection. The application keeps its attributes in its own records, and the built-in movement, letter, and army-report paths, which read the projection, do not reach it.
actor knowledge	角色知识	ActorKnowledge	What one actor knows, including source, confidence, and time, stored separately from ground truth.
report	报告	EventKind type "report_dispatched"	Information dispatched or delivered between actors before it can update their knowledge.
holder-relative knowledge	持有人相对知识	KnowledgeHolderRef, KnowledgeReadCut	Facts read from one person, institution, office, or other holder ledger at an exact cut, never from omniscient state.
current knowledge records	当前知识记录	SimulationView::knowledge_heads, KnowledgeHeads, HolderLedger::current_records, HolderLedger::current_record_views, knowledge_heads and knowledge_current_records on Canwu, CompactedCanwu, and CanwuRun	A holder’s current records of one schema kind: the entries no entry of the holder names in supersedes. A publishing system reads their global IDs, selected by typed subjects, to name the records its next record supersedes. The read comes from an index of committed state and the boundary being settled, so live, sealed, restored, and replayed runs agree, and it does not cost the holder’s whole ledger. A host reads the same from the run handles, the IDs or the records as holder-relative views newest first in publication order, without a read cut and without hashing the holder’s history; a trusted-host read of any holder.
knowledge record body	知识记录正文	KnowledgeRecordBody	The holder-independent part of a knowledge record, stored once whichever holders hold it: schema, subjects, payload, times, confidence, and origin. A body leaves the ledger when no holder holds it.
holder entry	持有人条目	HolderEntry, HolderPublication	One holder’s hold on one body: its holder-local record ID and its own supersession and contradiction lists, which name entries of the same holder and schema kind. A KnowledgeRecord is a body assembled with one entry.
holder-local record ID	持有人本地记录号	HolderKnowledgeRecordId, HolderEntry::local, HolderLedger::local_of	The ID a holder sees for one of its records, from the holder’s own counter and stored with the entry. It never changes, never restarts, and never names another holder’s record, so a reader cannot infer how many records other holders have.
shared publication	共享发布	KnowledgePublicationGroup, KnowledgeSupersession	One PublishKnowledge directive publishing the same drafts to every holder of a group: each body is stored once and each holder gets its own entry. Under Explicit the drafts’ relations apply to a group’s one holder; under CurrentOnSubjects the engine names, per holder, the holder’s current records of the draft’s kind that carry every subject of the draft.
publication budget	发布预算	KnowledgePublicationBudget, SimulationView::knowledge_publication_budget, KnowledgeRecordDraft::payload_bytes	What a boundary may still spend on knowledge at a system’s cut: record bodies, holder entries, and payload bytes, less what earlier phases and earlier systems of the phase took, with the per-directive bounds. Every publisher reads it and defers what does not fit; a publication past it fails the boundary.
knowledge retention	知识留存策略	KnowledgeRetention, PluginKnowledgeSchema::retention, KnowledgeQueryResult::retention	A schema’s rule for when an entry leaves its holder: kept for the run (Keep), or cleared when an entry of the same holder supersedes it (RetireWhenSuperseded), at publication, in the same commit, live and in replay alike. Part of the plugin descriptor.
cleared entry	已清退条目	—	An entry that left its holder under the schema’s retention: every relation that named it is dropped, its body leaves when no holder holds it, and the boundary’s evidence keeps the publication as it was. Not 退休 (retired), which this sheet uses for a culture target.
publication reservation	发布预留	KnowledgePublicationReservation, PluginRegistrar::reserve_knowledge_publication, KnowledgeReservedPlugin, PluginDescriptor::knowledge_publication_reservation	A share of every boundary’s publication budget held for one plugin at each boundary where its knowledge-writing system is due, which the systems of other plugins are not shown and cannot take, whatever their dispatch order. The plugin reads its share through the same knowledge_publication_budget(), and overshooting it still fails the boundary. Part of the plugin descriptor, so of the run’s identity. Not a reservation (资源预留) against a resource pool.
delegation ledger	委托账	DelegatedAuthority, DelegatedAuthorityLedgerPayload, DelegationExpiry, delegated_authority_reference	The versioned record, one per command grant, in which canwu-information keeps the grant’s live delegations with an expiry index. A later interpretation with delegated authority is checked against the ledger, not the command, so a seal that archives the command changes nothing; a delegation whose expires_at has come authorizes nothing and leaves the ledger at the next lifecycle boundary, and a claim already expired at admission is not recorded.
legal provider index	法律提供方索引	LegalRuntime::provider_packets, LawBudgets::max_provider_packets, DEFAULT_PROVIDER_PACKETS	The bounded record, in the legal coordinator shard, of every compiled provider packet a boundary admitted: ingress ID, plugin, packet type, and a hash of its due time and payload. A signal or publicity citation counts only when it names a recorded packet, at that boundary or any later one, so a sealed run and its exact replay decide alike. It keeps the newest max_provider_packets packets (256 by default; each kept packet costs about 9 µs of every law boundary) and forgets the oldest first; a citation of a forgotten packet is refused.
holder planning snapshot	持有人规划快照	planning_snapshot_from_holder_knowledge, KnowledgeReadCutDigest	A routing PlanningSnapshot built only from the endpoints and connections one holder’s ledger asserts at the read cut, returned with a read-set digest as evidence of what the planner read.
correspondence	通信	CorrespondenceOperation	Addressed communication demand composed with information delivery and, when needed, physical or signal transport.
delegated carrier	受托承运人	delegate_carrier_v1, InitiateCorrespondenceRequest::carrier_delegation	A carrier other than the sender that accepted the carrying through its own delegation command, whose claim names the sender and covers each dispatch. Planning reads the carrier’s ledger, and none of the carrier’s knowledge is published to the sender.
carrier seizure	承运人扣押	CorrespondenceIncidentKind::CarrierSeized	An incident in which someone takes the carrier and the packet. Unlike interception it ends the delivery attempt: after a terminal seizure handoff the transport execution can only be closed by its owner, and only the carrier holder receives an attempt report, which is not published when the carrier accepts no knowledge by then.
seed refusal	知识种子拒收	KnowledgeSeedRefusal, KnowledgeSeedReceipt::refusal	Why a knowledge seed published nothing: its holder accepts no knowledge, one publication cannot carry it, or it states a connection no planning network admits. Recorded on the seed’s receipt; the seed key is spent.
authenticity finding	真伪判定	AuthenticityFinding	An interpreting holder’s judgment, bound to the exact version of one interpreted representation, of whether its claimed source is accepted, with a basis and confidence. How likely a forgery is to be detected stays an application draw.
reroute	改道	ItineraryRevision	A successor itinerary for the same delivery attempt after disruption or changed route knowledge.
external condition	外部条件	ItineraryRevisionReason::ExternalCondition	A reroute reason citing an application-owned condition record at an exact positive version, with an application label. Transport records the citation and does not interpret the condition.
recurring departure	周期性班次	TraversalModel::Recurring, TraversalModel::next_departure, MAX_RECURRING_OFFSETS	A traversal model whose departures leave at every period after the epoch plus each listed offset, each taking one duration: a ferry every six hours is one pattern rather than a slot per sailing. The next departure at or after a time is found exactly in integer minutes, and the connection’s availability window bounds the season.
edge condition	连接条件	EdgeConditionOverlay, EdgeConditionSet, EdgeConditionEffect, RoutingIndex::plan_route_with_conditions, RoutePlan::edge_conditions_digest	A host-supplied window on one connection that closes it or scales its duration and resource cost and replaces its risk, applied by departure instant when a route is planned, without rebuilding the network. A validated set travels beside the snapshot per query, closures on one connection merge, adjustments on one connection do not overlap, and a plan records the set’s digest. Distinct from an external condition (外部条件), the application record a reroute cites.
routing index	路由索引	RoutingIndex, RoutingIndex::reobserve, RoutingCache::index_key, RoutingNetwork::digest	A planning snapshot compiled once per network revision: validated once, the network hashed once, a dense adjacency shared behind an Arc. A host keeps one per network revision, moves it to a new read cut with reobserve (which refuses another revision), and plans through it in about a hundredth of the time of a cold plan_route; its plans and digests equal plan_route’s on the same snapshot.
delivery retry	投递重试	DomainReference role "previous_attempt"	A new successor delivery attempt after terminal failure; it is not a reroute of the old attempt.
movement order	移动命令	MovementOrder, MovementOrderRequestV1	An admitted, immutable intent to move one or more subjects from an origin to a destination along a planned route. canwu-movement admits it through its Order operation and creates its transport execution; moving subjects other than the owner needs an authority basis.
persons group	人员群体	MovementSubjectRole::PersonsGroup	A movement subject for an aggregate of people moving as one, with a positive head count as its quantity; its identity is normally an application domain record.
seizure handoff	扣押交接	HandoffKind::Seizure	A custody handoff taken by an entity outside the itinerary, recording the seizing identity. A terminal seizure names its failed leg as both ends, so custody leaves the itinerary and only the execution’s owner can then close it. The incident and authority behind it stay in application systems; every other handoff is a planned handoff.
capacity pool	运力池	TransportCapacityPoolV1	A windowed quantity of interchangeable transport capacity, such as ferry crossings or relay mounts, offered by one holder. Confirmed and consumed bookings hold it, and its revision advances with every change so allocation evidence can cite it.
booking allocation	预订分配	allocate_capacity_bookings, CapacityBookingAllocationEvidenceV1	A pure, order-stable pass over one pool revision that confirms each requested booking in full or fails it with a recorded reason, visiting requests by priority, window start, tie-break key, admission sequence, and booking identity. It never preempts confirmed capacity.
leg hold	路段滞留	MovementOperation::DelayLeg, MovementLegHoldV1, MovementOrderRecordV1::hold	A hold on the current leg, set with DelayLeg by the order’s owner or operator or by an incident citing current evidence, that moves the leg’s departure (a leg that has not departed) or its arrival (a departed leg) to an absolute instant no earlier than the due it replaced, without an itinerary revision. Later holds lengthen, shorten, or lift it, only the latest is kept, and only the owner and operator see it before the due settles. In Chinese prose, not 延误 alone, which means any lateness.
scheduled due	排定时刻	MovementLegHoldV1::scheduled_at	The due a hold replaced and never ends before: a departed leg’s actual departure plus its planned duration, or the departure that was pending when the leg was first held. Lifting a hold sets its until back to it.
schedule shift	行程顺延量	MovementOrderRecordV1::schedule_shift, MovementReportDetailV1::schedule_shift, DelayLeg::retime_later_legs	How far the legs of the active revision that have not departed run behind their planned times because of the holds that re-timed them (retime_later_legs); it moves their planned departures and booking windows, grows only when a re-timing hold ends, and a reroute resets it.
booking revocation	预订撤销	MovementOperation::RevokeBooking, CapacityBookingStatus::Revoked, CapacityBooking::revocation	A pool custodian’s (or an application incident’s) withdrawal of a confirmed booking, with its time and reason; the capacity returns to the pool, and the leg fails at departure unless the booking is replaced first.
booking replacement	预订替换	MovementBookingRequestV1::replaces	A new booking of the same leg that takes the place of one earlier booking, once; a pending or confirmed original is cancelled or released, and the original leaves the execution.
kept booking	在持预订	MovementLimitsV1::bookings_per_execution, bookings_per_runtime	A booking an execution still keeps because it bears on a leg: requested or confirmed, consumed by the leg under way, or lost for a leg that has not departed and not yet replaced. Only kept bookings count against the booking bounds.
closed booking	已了结预订	—	A booking that no longer bears on any leg: released, cancelled, or replaced, consumed by a leg that arrived or failed, or lost for a leg that failed or was superseded or whose execution closed. It leaves its execution, and its binding leaves the runtime, in the step that closed it; consumed capacity stays counted by its pool.
projection	投影	—	A materialized actor-scoped representation that does not expose authoritative domain state.
authority	权限	CommandAuthority	The validated right to issue a command or perform an action. authoritative state is 权威状态.
issuer	签发者	Issuer	The identity presented as the command source; authority checks decide whether it may act.
controller	控制者	DecisionControllerBinding	The entity or process bound to a seat to make decisions.
seat	席位	seat_id	A stable decision-making role that can be bound to a controller.
policy	决策策略	DecisionPolicy	A human, external service, LLM, or deterministic evaluator that selects among current options.
guarded utility policy	前置规则效用策略	GuardedUtilityPolicy	A composite policy: ordered guard rules may select, defer, or exclude options; weighted utility scores the remaining options; an opt-in random tie-break settles near-equivalent top scores. Its semantic hash binds the configuration to the controller.
decision stage	决策阶段	DecisionStage	The composite-policy stage that produced a decision (Guard, Utility, or Random), recorded on the decision trace with the guards that fired. It is unrelated to settlement phases.
random tie-break	随机平局决胜	DecisionOutcome::PendingRandom	An opt-in controller path in which a guarded utility policy names only the near-equivalent top-scored options, and a boundary system chooses among them with one uniform operation-keyed draw.
decision ticket	决策票据	DecisionTicket	A persisted request for one controller to choose among versioned, currently valid options.
parent ticket	前序票据	DecisionTicket::parent_ticket	A terminal ticket that a new ticket follows up: one of the exact same decision maker, such as a cancelled ticket reopened for another controller, or one reached by seat succession. The link is copied onto the new ticket’s trace.
seat succession	席位继任	DecisionControllerBinding::seat_id, DecisionTicket::parent_ticket	Lineage from a terminal ticket to a new ticket whose assigned controller is bound to the same non-empty seat, so a successor can continue a predecessor’s decision without being the same decision maker.
seat rebinding	席位改绑	rebind_seat, SeatRebindingRequest	Host ingress that moves the run’s seat to another existing person while the run continues. From its boundary the seat’s command and viewer checks follow the new person, and the open tickets of the seat’s controllers that act for the previous person are cancelled with seat_rebound.
decision option	决策选项	DecisionOption	One candidate choice offered by a decision ticket.
decision attempt	决策尝试	DecisionAttemptRecord	An authoritative record of one admitted decision request and whether it was accepted or rejected. The request may register a controller or open, replace the options of, extend the deadline of, reassign, resolve, or cancel a ticket.
deadline extension	展期	DecisionMutation::ExtendDeadline	Moving an open ticket’s deadline later under the same ticket ID, checked against the ticket version.
ticket reassignment	改派	DecisionMutation::Reassign	Moving an open ticket to another registered controller, which alone may then resolve it; the decision maker and lineage stay.
option bias	选项偏置	WeightedUtilityEvaluator::with_option_bias, DecisionOption::bias, DecisionOptionEvaluation::bias	An integer preference for one option, added unweighted to its weighted score and recorded apart from the factor lines: the policy’s standing bias plus the ticket’s per-option bias.
ticket option bias	票据选项偏置	DecisionOption::bias	The bias a ticket’s drafter writes on one option: ticket content outside the policy’s identity, added to the policy’s bias for that option, so tickets whose biases differ share one controller.
admission batch	准入批次	DecisionState::tickets_opened_in_batch, SimulationView::decision_tickets_opened	The tickets the latest boundary’s admitted decision Opens created, in admission order; persisted decision state, committed in the decision root.
decision trace	决策轨迹	DecisionTrace	Persisted scores, evidence, policy identity, selected option, and outcome used for explanation and replay.

Consolidated wording

Preferred term	Deprecated or restricted alternatives	Scope and migration guidance
simulation core / 模拟内核	kernel	Restricted: use simulation core in product and integration prose; kernel remains permitted in architecture and internal implementation descriptions.
host application / 上层应用	host program / 主机程序	Deprecated: use host application and 上层应用 for a game, service, client, research tool, or agent system that embeds Canwu.
public API / 对外 API	public facade	Deprecated: use public API for the supported application boundary and the broader API surface.
simulation plugin / 模拟插件	runtime simulation plugin / 运行时模拟插件; domain plugin / 模拟规则插件	Restricted: use the longer forms only to contrast runtime plugins with agent tools or to describe a plugin’s domain role. They are not separate plugin kinds.
boundary / 结算边界	transaction, settlement boundary	Deprecated: use boundary for the validated Canwu unit, matching settle_boundary and BoundaryPhase.
boundary ledger / 边界账	day boundary ledger / 日边界账	Deprecated: 0.14.0 replaced 0.13.3’s day read (boundaries_on_day) with a window read; use boundary ledger and boundaries_between.
alternative reality / 平行现实	反事实分支 / counterfactual branch; branch (when a different input creates a new causal run)	Deprecated: use alternative reality for a new causal reality created by divergent input; use fork only for the API operation and copied simulation.
authority / 权限	permission (when meaning CommandAuthority)	Restricted: use authority for the validated right to act; retain permission profile for the separate run-policy context.
unplaced person / 无定位人物	未落位人物	Deprecated: 0.16.0 renamed the Chinese term; the English term and PersonDraft::placement are unchanged.
current knowledge records / 当前知识记录	knowledge heads / 知识头记录	Deprecated as prose: use current knowledge records and 当前知识记录; knowledge_heads and KnowledgeHeads stay the code identifiers.
boundary profile / 边界耗时明细	边界耗时剖面	Deprecated: 0.16.0 renamed the Chinese term; BoundaryProfile is unchanged.
scheduled due / 排定时刻	scheduled arrival / 排定到达时刻	Deprecated: 0.20.0 widened the leg hold to a leg that has not departed, so the due a hold replaces may be a departure; MovementLegHoldV1::scheduled_at replaces scheduled_arrival_at.
single-step completion lease / 一步式完成租约	单步完成租约	Deprecated: 0.16.0 renamed the Chinese term; SingleStepLease is unchanged.
cleared entry / 已清退条目	retired knowledge record / 退役知识记录; 退休记录	Deprecated: use cleared entry and 已清退条目 for an entry that retention removed from its holder; retired target / 退休目标 stays the culture term, and RetireWhenSuperseded stays the code identifier.
report share / 报告份额	report budget / 报告预算	Restricted: prose uses report share and 报告份额 for fiscal’s part of the publication budget; FiscalReportBudget and with_report_budget keep “budget”.
delegation ledger / 委托账	delegated authority record / 委托权限记录	Deprecated: 0.18.0 replaced the create-only record per delegation command with one versioned ledger per command grant; DelegatedAuthority stays the record name.
retired request outcome / 已退役请求结果	retired request / 已退役请求; 退休请求	Deprecated: use retired request outcome and 已退役请求结果 for a tracked command request past its retention; retired target / 退休目标 stays the culture term and cleared entry / 已清退条目 the knowledge term. RequestOutcomeRetired is the code identifier.

Maintenance rule

When a public concept is added or renamed, update the repository terminology file and both website language pages in the same change. Add a link only after a focused website page exists; this terminology table is the public definition until then.