Idempotency Key Guard

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-00000000000d",
  "name": "Idempotency Key Guard",
  "slug": "idempotency-key-guard",
  "summary": "Rejects conflicting request replays and safely returns prior outcomes using canonical fingerprints and bounded retention policies.",
  "granularity": "primitive",
  "purposes": [
    "idempotency",
    "duplicate request prevention",
    "payments",
    "webhooks"
  ],
  "features": [
    "canonical request fingerprint",
    "TTL policy",
    "replay response",
    "conflict detection"
  ],
  "functionalDescription": "Rejects conflicting request replays and safely returns prior outcomes using canonical fingerprints and bounded retention policies. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "application/json",
      "description": "Validated application/json request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/json",
      "description": "Typed application/json response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "Zod",
    "Redis-compatible"
  ],
  "deploymentTargets": [
    "node-service",
    "aws-lambda"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "internal"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 99,
    "tests": 267,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "passing"
  },
  "securityEvidence": {
    "criticalFindings": 0,
    "highFindings": 0,
    "score": 97,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 188,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared idempotency-key-guard contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 19500,
      "high": 48500
    },
    "agentTimeMinutes": {
      "low": 14.5,
      "high": 41
    },
    "humanReviewHours": {
      "low": 0.3,
      "high": 0.9
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 0.5,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "middleware",
    "compatibleWith": [
      "webhook-retry-dead-letter-worker",
      "subscription-billing-state-machine",
      "audit-log-event-pipeline"
    ],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "licensed-artifact",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "developer",
      "name": "Developer artifact",
      "scope": "individual",
      "priceCents": 900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "commercial-use"
      ],
      "developerSeats": 1,
      "restrictions": [
        "No redistribution",
        "One named developer"
      ]
    },
    {
      "id": "commercial-source",
      "name": "Commercial source",
      "scope": "commercial-source",
      "priceCents": 2900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 10,
      "restrictions": [
        "No standalone redistribution",
        "One production application"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "a301060bc824177e8268c4d23f47f7f10b21b2658c2553919471af6d510b53b0",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-idempotency-key-guard-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "active",
  "version": "1.13.0",
  "seller": {
    "name": "Reliable Systems",
    "verified": true,
    "reputation": 4.8
  },
  "verificationBadges": [
    "Contract verified",
    "High coverage",
    "Composition declared"
  ]
}