A formal agreement that bounds each accepted command and records execution evidence for failure analysis.