63 lines
3.5 KiB
JSON
63 lines
3.5 KiB
JSON
{
|
|
"schema": "fable.stale_memory.quarantine.v1",
|
|
"createdAt": "2026-07-02T00:00:00.000Z",
|
|
"source": "factory/deploy memory reconciliation against current policy",
|
|
"claims": [
|
|
{
|
|
"claim": "memory-only factory snapshot that 25 Docker containers all UP with 6 agents and 63 skills",
|
|
"staleBecause": "this snapshot is stale-memory and exceeds the currently accepted proof model unless corroborated by live or committed receipts",
|
|
"replacementTruth": "container/deployment authority follows live receipt > committed receipt > memory; reconcile against a fresh live factory-status/checker receipt",
|
|
"severity": "advisory"
|
|
},
|
|
{
|
|
"claim": "memory-only autonomous Phase A-D loop completion with agents posting HTTP POST deploy commands using auth tokens",
|
|
"staleBecause": "repeated live and committed receipts confirm auto_patch_proven=false; any claim that agents can autonomously POST deploy with auth tokens is memory-only",
|
|
"replacementTruth": "agents must use guarded 8099/deploy via git-proxy with explicit approval and fresh ZTE/factory gate receipt; raw command/AWS-like POST deploy is blocked",
|
|
"severity": "dangerous"
|
|
},
|
|
{
|
|
"claim": "skill_health.py runs every 6 hours and covers all 63 skills for autonomous repair decisions",
|
|
"staleBecause": "cron and full-skill coverage are memory claims without an in-session live proof for this chain",
|
|
"replacementTruth": "repair decisions require current verify-cycle/RSI receipts and explicit gate posture, not memory-only scheduling claims",
|
|
"severity": "dangerous"
|
|
},
|
|
{
|
|
"claim": "8098/deploy-webhook is the trusted deploy path",
|
|
"staleBecause": "current policy marks 8098/deploy-webhook as legacy/internal/stale, not canonical deploy authority",
|
|
"replacementTruth": "8099/deploy via git-proxy is the canonical signed/gated deploy route",
|
|
"severity": "dangerous"
|
|
},
|
|
{
|
|
"claim": "agents/loops can perform raw POST deploy or signed-action-less autonomous deployment",
|
|
"staleBecause": "safety policy requires explicit approval and fresh ZTE/factory gate receipts; autonomous POST deploy remains unsafe/unproved",
|
|
"replacementTruth": "guarded 8099/deploy via git-proxy with explicit approval and fresh route-health proof",
|
|
"severity": "dangerous"
|
|
},
|
|
{
|
|
"claim": "Phase 4 recursive self-improvement and full non-canary auto-patch repair is proven",
|
|
"staleBecause": "memory-only phase claims are not current authority and non-canary recovery receipts are still missing",
|
|
"replacementTruth": "auto_patch_proven remains false until a fresh local degraded-skill recovery receipt is produced",
|
|
"severity": "dangerous"
|
|
},
|
|
{
|
|
"claim": "memory-only factory/deploy state can authorize deploy",
|
|
"staleBecause": "current policy orders authority as live receipt > committed receipt > memory",
|
|
"replacementTruth": "deploy authority requires a live receipt or, when live state is unavailable, a committed receipt; memory is advisory only",
|
|
"severity": "dangerous"
|
|
}
|
|
],
|
|
"blockedTrustPaths": [
|
|
"8098/deploy-webhook",
|
|
"memory-only deploy authority",
|
|
"autonomous deploy without fresh gate receipt",
|
|
"raw signed/action-less POST deploy claims"
|
|
],
|
|
"canonicalTrustPaths": [
|
|
"live receipt > committed receipt > memory",
|
|
"8099/deploy via git-proxy",
|
|
"explicit approval + fresh valid ZTE/factory gate receipt"
|
|
],
|
|
"decision": "quarantined",
|
|
"deployAttempted": false
|
|
}
|