Project a household you send (nothing stored)

Household object model v0.2.0 (docs/household-schema-spec.md). Validation rejects, never clamps, and returns every issue with a path. Cross-field rules: ids are unique per collection; every ownerId references a member; exactly one primary member and at most one spouse (a spouse requires married_joint); costBasis only on taxable accounts; holdings fractions sum to 1; a socialSecurity block only on social_security streams; endYear never precedes startYear.

Unknown keys are rejected — the accepted set is exactly: annualReturn, inflationRate, defaultIncomeGrowth, socialSecurityCola, returnsByWrapper.

Execution choices, hashed into the evidence record — a policy run never hashes like a default run. Unknown keys are rejected.

returnVolatility is not read on the keyless route (engine default 0.15 applies).

Projection spec v0.11.0 (docs/model-specs/household-projection.md).

The effective Monte Carlo configuration (after clamping); present with monteCarlo.

Evidence record v2. Verify with POST /api/v1/records/verify or the SDKs' verifyRecord.