# Fable Agentic Layer — TAC Skill Stack

## Golden path

```text
idea → safety gate → ADW plan/build/test/review → agentic attestation → guarded 8099/deploy decision
```

## Required skills

| Skill | Purpose | Current state | Next proof |
|---|---|---|---|
| real-engineering | One front door for engineering work | `pi-real-engineering@0.2.2` installed | `/real-engineering verify` |
| safety-gate | Block unsafe/adaptive reframing | `plinius safety`, Parseltongue framing 0/6 | committed safety receipt |
| ADW pipeline | Plan → Build → Test → Review → Ship | documented skill available | run on one real change |
| verifier | Prevent fake PASS | prompt rule active | every receipt includes commands/output |
| verify-cycle | Factory/RSI/skill health proof | `factory verify-cycle` live-passed on `rsi_canary` and `apple` | non-canary degraded repair proof |
| agentic-attestation | Prove any harness output before done | `fable-agent verify`, `factory verify`, schema `fable.verification.attestation.v1` | attach to Pi/OpenClaw loops |
| skill-sync | Import skills without corrupting IDs | frontmatter + explicit ID parsing tested | clean generated duplicates |
| platform-engineer | Keep MVI discipline | active principle | no dashboard/orchestrator until receipts are boring green |

## Current class

- Class 1 Grade 6/7: skills, workflows, subagents, mental-model docs exist.
- Class 2 Grade 1: factory webhook/out-loop path exists at `8099/deploy`.
- Class 2 Grade 2: deterministic workflow proof is emerging via `verify-cycle` and `fable.verification.attestation.v1`.
- Class 3: not yet. Do not claim orchestrator maturity until ADW runs are receipt-backed.

## Acceptance criteria for next release

```text
PASS real-engineering verify
✓ package installed
✓ command active
✓ safety gate active
✓ verifier rule present
✓ factory status ok
✓ deploy route 8099/deploy present
✓ stale-memory quarantine receipt refreshed: `fable5 stale-memory-quarantine --output .fable/memory/stale-memory-quarantine-live.json` and checked for `blockedTrustPaths` containing `8098/deploy-webhook` and `canonicalTrustPaths` containing `8099/deploy via git-proxy`
✓ verify-cycle receipt written
✓ agentic attestation attached
```

## Pi integration

Pi/OpenClaw/Codex/Claude loops should call fable-agent as the proof layer before final completion:

```bash
fable-agent verify . --out .fable/attestations/latest.json
```

No final `done` without an attestation or explicit `UNVERIFIED` status. Current guarded deploy path remains `8099/deploy via git-proxy`; `8098 deploy-webhook` is legacy/stale for direct fable-agent decisions.

## Do not build yet

- dashboard
- marketplace
- new orchestrator
- generic self-healing framework
- new deploy endpoint