# MiniModel Acquisition Contract

## Route Selection

Resolve one exact catalog identity. Prefer one exact currently qualified peer
offer. Otherwise, after explicit disclosure and user consent, select one pinned
public source for one local conversion. The selected route remains visible.

There is no invisible peer rotation, hidden route retry, remote inference,
best-of-N transfer, or instruction-file handoff.

## Peer Import

Before requesting bytes, bind composition identity, piece-set identity,
protocol profile, sender lane, consent, and expiry. Verify every requested
range and piece digest. Bound concurrency, queue size, memory, disk, and time.
Persist progress without treating partial state as installed. Quarantine
corruption and verify complete member and composition identities before atomic
activation.

## Local Conversion

Bind publisher, source revision, source-file locks, model card, license,
conversion profile, tool identities, resource ceilings, and one-shot operation
identity before source-derived build or execution. Independently inspect the
new output and require the relevant numerical and quality evidence before it
can be called qualified.

## Cancellation And Failure

Cancellation stops actual work and records one typed terminal result. Disk
full, source drift, corrupt pieces, identity mismatch, companion failure,
timeout, or verification rejection never silently starts another operation.

## Installation

Only a complete accepted six-member SLM2 composition is installed. Activation
uses an immutable composition identity and an atomic pointer update. Staging,
partial, rejected, and stale data never becomes active.