{
  "model": "finite-epoch-slot-v0",
  "states": 122,
  "transitions_checked": 462,
  "replica_state_pairs_checked": 900,
  "properties": [
    "acknowledgement requires committed allocation",
    "local slot exclusivity",
    "no same-epoch slot reuse",
    "quarantine monotonic until rollover",
    "conditional conflict convergence",
    "other slot unaffected"
  ],
  "counterexample": [
    "partition A from B",
    "A commits and acknowledges claim A",
    "B commits and acknowledges conflicting claim B",
    "both claims usable locally until valid evidence is delivered"
  ],
  "limitations": [
    "not a refinement proof of Rust",
    "finite two-slot/two-epoch abstraction",
    "crypto and guarded time abstracted",
    "no clock drift, resource saturation, or Sybil model",
    "eventual delivery/commit assumed for convergence; no unconditional liveness proof"
  ]
}