ARLE-CORE-STD: Run-Package and Admissibility Semantics Core Standard

ARLE-CORE-STD specifies a byte-deterministic, adversary-robust standard for producing and independently verifying admissibility verdicts from sealed run packages. It fixes a required artifact set at canonical paths and mandates canonicalization for JSON (RFC 8785/JCS with additional prohibitions) and tar (uncompressed POSIX ustar only, canonical re-emission). The standard defines domain-separated SHA-256 hashing with framed hash material and an RM-first binding topology in which the Receipt Manifest is the authoritative binder; any post-production tampering is detected and classified as DATA_COMPROMISED. Verdicts are derived mechanically from structural failure classification and governing refusal tokens, with extensibility via requested EXT gates authorized by a bound gate registry and normalized by a bound refusal-code registry. To prevent “lying packages,” verifiers conditionally recompute producer-claimed derived outputs (CORE gate trace and verdict) and enforce bytewise equality when applicable; any mismatch yields a governing derived-mismatch refusal and final REFUSE outcome. CORE is explicitly scoped to determinism and governance, not domain methodology or scientific truth. Keywords (Zenodo) admissibility; run package; reproducibility; deterministic verification; canonical JSON; JSON Canonicalization Scheme (JCS); RFC 8785; canonical tar; POSIX ustar; domain separation; SHA-256; receipt manifest; supply-chain integrity; tamper detection; conformance testing; refusal codes; governance tokens; verifier algorithm; derived artifact recomputation; bytewise equality; auditability