{
  "_comment": "Copy to <workspace>/.joule-fix/formal.json to enable the formally-verified fix tier. Delete this _comment key (or keep it — unknown keys are ignored). Serde forms that bite if you guess: rigor_target is one of JR-1..JR-4 (uppercase); enb_ref is a STRING 'sha2-256:<64-hex>', not an object; kind is one of Trivial|Arithmetic|Decidable|General|Hard; grounding is one of Ungrounded|HumanReviewed|CrossChecked (all PascalCase). 'obligation' indexes the contract's obligations in declaration order: pre[0..], then post, then inv, then frame.",
  "contract": {
    "joulecontract": "joulecontract/0.6",
    "subject": "settlement netting — net(debits, credits)",
    "rigor_target": "JR-2",
    "pre": ["debits and credits are integers"],
    "post": ["when debits == credits, the net is zero"],
    "inv": [],
    "frame": ["the settlement ledger row"],
    "ceiling": {
      "enpi_joules": 10.0,
      "unit": "joules/settlement",
      "enb_ref": "sha2-256:0000000000000000000000000000000000000000000000000000000000000000"
    }
  },
  "formalizations": [
    {
      "obligation": 1,
      "statement": "(declare-const debits Int)(declare-const credits Int)(declare-const net Int)(assert (= net (- debits credits)))(assert (= debits credits))(assert (not (= net 0)))",
      "kind": "Decidable",
      "grounding": "CrossChecked"
    }
  ]
}