examples/http/counter.ts exports runCounter, an executor fixture for exactly one counter.increment action with amount one. It accepts only the fixed action, context and policy commitments used by the tests. It is not a general-purpose runner.
After ordinary human authorisation, it obtains an exclusive claim and fresh admission, verifies the original signed records and independent checkpoint acceptance, and creates a durable exclusive fence in a private per-request directory. Only then can it update the counter once. Initial reads count towards the same execution window.
Reinvocation uses a saved result to retry outcome reporting without repeating the effect. A fence without a result is uncertain and must not be relaunched, even if an external operation appears to have failed. Do not delete or share the directory to bypass that rule.
The local regression tests run normal HTTP confirmation with isolated PostgreSQL, OIDC and explicitly non-production storage fixtures: