the-custodian/docs/assessments/2026-09-09-helixforge-replay-and-operating-contract.json
codex 3d5027678d
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
docs: retain legacy Custodian projection refusal explicitly
2026-09-09 10:18:31 +02:00

308 lines
11 KiB
JSON

{
"date": "2026-09-09",
"repositories": {
"secrets-engine": {
"commit": "9eb07fd8fcae56e38a533c85fcb6e3a5750b646f",
"clean": true,
"origin_matches": true,
"primary": {
"schema": "state-hub.repository-projection-reconcile.v1",
"instance_role": "primary",
"instance_label": "railiance01",
"expected_commit": "9eb07fd8fcae56e38a533c85fcb6e3a5750b646f",
"derived_commit": "9eb07fd8fcae56e38a533c85fcb6e3a5750b646f",
"outcome": {
"schema": "state-hub.projection-reset.v1",
"repo_slug": "secrets-engine",
"commit": "9eb07fd8fcae56e38a533c85fcb6e3a5750b646f",
"status": "applied",
"counts": {
"created": 0,
"updated": 11,
"retired": 0,
"refused": 0,
"released": 0,
"created_tasks": 0,
"updated_tasks": 2,
"cancelled_tasks": 0
},
"created": [],
"updated": [
"SECRETS-WP-0001",
"SECRETS-WP-0002",
"SECRETS-WP-0003",
"SECRETS-WP-0004",
"SECRETS-WP-0005",
"SECRETS-WP-0006",
"SECRETS-WP-0007",
"SECRETS-WP-0008",
"SECRETS-WP-0009",
"SECRETS-WP-ADHOC-2026-08-21",
"SECRETS-WP-ADHOC-2026-08-23"
],
"retired": [],
"released": [],
"created_tasks": [],
"updated_tasks": [
"SECRETS-WP-0008-T02",
"SECRETS-WP-0009-T03"
],
"cancelled_tasks": [],
"refused": [],
"notes": []
}
}
},
"prj-helixforge-factory": {
"commit": "cd6e2f28beb5233a2acaa054648c5a2304a8c74a",
"clean": true,
"origin_matches": true,
"primary": {
"schema": "state-hub.repository-projection-reconcile.v1",
"instance_role": "primary",
"instance_label": "railiance01",
"expected_commit": "cd6e2f28beb5233a2acaa054648c5a2304a8c74a",
"derived_commit": "cd6e2f28beb5233a2acaa054648c5a2304a8c74a",
"outcome": {
"schema": "state-hub.projection-reset.v1",
"repo_slug": "prj-helixforge-factory",
"commit": "cd6e2f28beb5233a2acaa054648c5a2304a8c74a",
"status": "applied",
"counts": {
"created": 0,
"updated": 1,
"retired": 0,
"refused": 0,
"released": 0,
"created_tasks": 0,
"updated_tasks": 3,
"cancelled_tasks": 0
},
"created": [],
"updated": [
"HFACT-WP-0001"
],
"retired": [],
"released": [],
"created_tasks": [],
"updated_tasks": [
"HFACT-WP-0001-T01",
"HFACT-WP-0001-T03",
"HFACT-WP-0001-T05"
],
"cancelled_tasks": [],
"refused": [],
"notes": []
}
}
}
},
"regression_tests_passed": 334,
"component_receipt": {
"schema_version": 1,
"target": "disposable local processes; synthetic credentials",
"started_at": "2026-09-09T06:38:34.485308+00:00",
"keycape_image": "forgejo.coulomb.social/coulomb/key-cape@sha256:7ff54c54e63ee172ae9e6e7fd2da96e427352f712343d74626ee6fe0f6f82611",
"approval_engine_commit": "b46b0f26669dc83c944ee5145426bad03d5ef720",
"flex_auth_commit": "88b354377c8e26b162f1234e673072f1c06dcd89",
"keycape_contract_commit": "0f5535eed95f1223c83a28f5a0bd6fa594cecae8",
"consumer_source_sha256": {
"approval_auth.py": "6f3b033e7928e1c527bc19f5a1e01bf243540769a8646bd8cd47268da25637b5",
"approval_consume.py": "9ccc6997fd4c1c82af8cf3dd440daf7b695d6272bb302eb083b73a2fe3674345",
"approval_claim.py": "54dd469e4e3ac9472c4e21222d5a08f70723a63f01904a35922fcc0a07a41541",
"authorization.py": "75c472f30cce1c3d66be1ded1eb6dcc62684668b0da5bf83d5fcdd37e92d1935",
"config.py": "2f2f1b60664d89bbb806aed0c768378923062077740e1f96e4c359238eb06955",
"service_auth.py": "653723ef5babce2157771416d93cb15cdbb7caca3c45509c3730520c55e4515c",
"cli.py": "a789fcea59e9a03d7ef07bf3ec1baf58234058585149511333c3fb7570f5916a"
},
"limitations": [
"standalone Flex Auth source, not deployed pin",
"local Approval Engine source, not deployed image",
"no live custody or client-side read grant",
"no OpenBao effect or model execution"
],
"checks": {
"operator_issued_and_approved_via_verified_jwt": true,
"wrong_action_refused_before_consume": true,
"producer_origin_join_with_carried_claim": true,
"actual_consumer_claim_check_consume": true,
"same_digest_retry_idempotent": true,
"different_digest_refused": true,
"spent_claim_refused": true,
"operator_consume_scope_denied_by_issuer": true,
"wrong_secret_refused": true,
"no_access_token_file_created": true,
"registry_override_accepts_exact_submission": true,
"same_enriched_result_different_submission_refused": true,
"real_dual_control_denial_then_claim_check_consume": true
},
"flex_auth_binary_sha256": "c7a1f35aa2cd7cf2733272923ace7fc4b4e55171db4ef8f3d0d6629183dcf1fa",
"producer_input_sha256": {
"policy_package.md": "657fa9312c9dcabee059ec31c89ee13396fe9aa54d852edc9e6559a74bbc139a",
"registry_snapshot.json": "37fba44ec0e0fd9b1e17a05ad1b7e4f9bb6ec9e0fc0bb3133e8af2ac6f832d7c"
},
"status": "passed",
"cleanup_complete": true,
"finished_at": "2026-09-09T06:38:44.956593+00:00"
},
"operating_review": {
"observed_at": "2026-09-09",
"method": "read-only source review; no model or queue request",
"source_pins": {
"rein-aharness": {
"commit": "1429db5ad4c83331b6375349ffde1eb13af9575b",
"files": {
"rein_aharness/adapter.py": "5e8a6ce9767a8b9cca215ae075a72d137b2d3223d86e7de2363b8a8b47759717",
"rein_aharness/claim_loop.py": "7af7c97c28a35d252867f73f21391b06f52debc8dee0398284bee914dc8339a3",
"rein_aharness/glas_execution.py": "83786df1aab509431984932e2d739d774c68cd2b37fd93c28239cf96e122a9df",
"docs/repository-grant.md": "9e05e19d2bbf88dcfccf448838111ba50ada5fdea6947242261f734121a47b7e"
}
},
"glas-harness": {
"commit": "44991600f377fa7b2bb380d4f4f255c33c480369",
"files": {
"src/glas_harness/contract.py": "30c7d361d132ca9ffc67f0edcd07ce21d33de634c8cc7e578c39f807708cfd2f",
"src/glas_harness/gateway.py": "bad3c2ef40a8fb1a3dcd7eaeca5dbeb937e9404be70dbbe3b374016f381a8dbe",
"src/glas_harness/reins/rein_aharness.py": "1edf0ae56ad646f032c940bda9f7af5b43b87030756dbc2134b038bf3bd4a40e",
"docs/local-profile-acceptance.md": "ff5b550c9b22950f969b7f63172ae9b3dacfecd4e14fd1791ced6516eff52d7f"
}
},
"llm-connect": {
"commit": "00560945f81ba6ff1f5cacd9fe99c7fe756cc4b1",
"files": {
"llm_connect/adapter.py": "6a1464705a273a2af188a85fb5eb3c1bed2c94e14457578382c8f331463c7c34"
}
},
"sand-boxer": {
"commit": "3e49a98a0e2c4a64539a5ccd674be8cd67ac9845",
"files": {
"profiles/profile.claude-agent-dev-proof.yaml": "8c4ea56b5cc524f459b4fd0e960661bc0d06ec7e06d68a7aa1795e2c17cc29ac"
}
},
"reuse-surface": {
"commit": "fc814cd554c882536fbdef9c32bb73ffc1ba8ccc",
"files": {
"reuse_surface/cli.py": "da968735cb45dc9944c3a722234641e17cd49a6bef9aa91f40e78ddde3fb9c0e",
"reuse_surface/plan_snapshot.py": "1c020e77786d179cc2f20cb554b63051b3cb77ed31dfa06b2de76ef0bec07ae0"
}
}
},
"findings": [
"Rein Claude command supplies no monetary cap; token consumption occurs after execute_prompt returns. Blocking response has empty usage. Existing budget token field cannot evidence hard euro enforcement.",
"The outer profiled worker already applies repository acceptance and durable external metrics. Do not duplicate or describe those as absent.",
"The selected local sandbox mirrors the repository. Glas returns commit identifiers and destroys its sandbox; the worker validates its original target. The inspected route has no artifact import. A synthetic gateway that mutates the host cannot establish this join.",
"Inner Glas rein task omits repository_grant and uses --no-metrics. Resolve the actual ownership/export acceptance design; do not simply enable the inner grant with that flag.",
"Repository grant v1 allows only local commits, so staged artifact publication and release need existing separately authorized owners."
],
"validation": {
"actual_rein_v1_grant_parser": "passed",
"grant_id": "dfb606dedd81ad2ef9c61f73774ec19b",
"publish_true_refused": true,
"dispatch_disabled": true,
"approval_absent": true,
"runtime_enforcement": "not yet proved",
"model_requests": 0
}
},
"source_hub_parity": [
{
"task": "SECRETS-WP-0008-T02",
"source_fields_match": true,
"repaired_fields": [
"description"
],
"status": "wait"
},
{
"task": "SECRETS-WP-0009-T03",
"source_fields_match": true,
"repaired_fields": [
"description"
],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T01",
"source_fields_match": true,
"repaired_fields": [],
"status": "progress"
},
{
"task": "HFACT-WP-0001-T02",
"source_fields_match": true,
"repaired_fields": [],
"status": "progress"
},
{
"task": "HFACT-WP-0001-T03",
"source_fields_match": true,
"repaired_fields": [
"intervention_note"
],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T04",
"source_fields_match": true,
"repaired_fields": [],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T05",
"source_fields_match": true,
"repaired_fields": [],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T06",
"source_fields_match": true,
"repaired_fields": [],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T07",
"source_fields_match": true,
"repaired_fields": [],
"status": "wait"
},
{
"task": "HFACT-WP-0001-T08",
"source_fields_match": true,
"repaired_fields": [],
"status": "wait"
}
],
"progress": [
{
"id": "6bb71d5d-9037-4a2f-87ca-09dfeda62ea1",
"task_id": "3eb9cff8-1441-5437-9e92-a2b655c82d04"
},
{
"id": "cde157c6-f02c-43fb-a927-04193846b519",
"task_id": "5cee3251-faf9-5925-8ffd-7a8bf378b0a4"
},
{
"id": "4e30ab0a-d298-4fab-a47d-d411d749e29d",
"task_id": "2b171ebd-75f3-5ce2-85a9-98e8ab77fd19"
},
{
"id": "7440d826-b1bd-438a-9fd8-8e6f369b8cf7",
"scope": "custodian publication exception"
}
],
"governed_factory_attempts": 0,
"new_credential_or_spending_authority": false,
"remaining": [
"current deployed PDP contract and client-side/audit/approval/native delivery",
"hard model-spend enforcement",
"sandbox artifact import into original grant/lease transaction",
"named operating/profile/Railiance admission",
"G1-G4 live evidence and fourteen-day G5"
],
"custodian_projection": {
"status": "blocked-before-reconcile",
"reason": "pre-existing invalid CUST-WP-0000b and duplicate unqualified task IDs",
"owner_record": "CUST-IN-0017",
"git_publication": "separate from failed work-record projection"
}
}