fable-agent/docs/agentic-layer-tac.md

Fable Agentic Layer — TAC Skill Stack

Golden path

idea → safety gate → ADW plan/build/test/review → agentic attestation → guarded 8099/deploy decision

Required skills

Skill	Purpose	Current state	Next proof
real-engineering	One front door for engineering work	pi-real-engineering@0.2.2 installed	/real-engineering verify
safety-gate	Block unsafe/adaptive reframing	plinius safety, Parseltongue framing 0/6	committed safety receipt
ADW pipeline	Plan → Build → Test → Review → Ship	documented skill available	run on one real change
verifier	Prevent fake PASS	prompt rule active	every receipt includes commands/output
verify-cycle	Factory/RSI/skill health proof	factory verify-cycle live-passed on rsi_canary and apple	non-canary degraded repair proof
agentic-attestation	Prove any harness output before done	fable-agent verify, factory verify, schema fable.verification.attestation.v1	attach to Pi/OpenClaw loops
skill-sync	Import skills without corrupting IDs	frontmatter + explicit ID parsing tested	clean generated duplicates
platform-engineer	Keep MVI discipline	active principle	no dashboard/orchestrator until receipts are boring green

Current class

• Class 1 Grade 6/7: skills, workflows, subagents, mental-model docs exist.
• Class 2 Grade 1: factory webhook/out-loop path exists at 8099/deploy.
• Class 2 Grade 2: deterministic workflow proof is emerging via verify-cycle and fable.verification.attestation.v1.
• Class 3: not yet. Do not claim orchestrator maturity until ADW runs are receipt-backed.

Acceptance criteria for next release

PASS real-engineering verify
✓ package installed
✓ command active
✓ safety gate active
✓ verifier rule present
✓ factory status ok
✓ deploy route 8099/deploy present
✓ stale-memory quarantine receipt refreshed: `fable5 stale-memory-quarantine --output .fable/memory/stale-memory-quarantine-live.json` and checked for `blockedTrustPaths` containing `8098/deploy-webhook` and `canonicalTrustPaths` containing `8099/deploy via git-proxy`
✓ verify-cycle receipt written
✓ agentic attestation attached

Pi integration

Pi/OpenClaw/Codex/Claude loops should call fable-agent as the proof layer before final completion:

fable-agent verify . --out .fable/attestations/latest.json

No final done without an attestation or explicit UNVERIFIED status. Current guarded deploy path remains 8099/deploy via git-proxy; 8098 deploy-webhook is legacy/stale for direct fable-agent decisions.

Do not build yet

• dashboard
• marketplace
• new orchestrator
• generic self-healing framework
• new deploy endpoint