pi_agent_rust/docs/contracts/operator-work-recommendation-contract.json at main · terraphim/pi_agent_rust · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
{
  "schema": "pi.swarm.operator_work_recommendation_contract.v1",
  "recommendation_schema": "pi.swarm.operator_work_recommendation.v1",
  "contract_version": "1.0.0",
  "bead_id": "bd-9yq7i.4",
  "purpose": "read_only_operator_work_recommendation_not_source_of_truth_or_mutation",
  "summary": "Defines the read-only operator work recommender that ranks safe next actions from incident replay and validation proof-memory evidence while preserving Beads, Agent Mail, RCH, git, validation, and deletion authority boundaries.",
  "allowed_statuses": [
    "pass",
    "blocked"
  ],
  "allowed_decisions": [
    "operator_work_recommendations_ready",
    "refresh_or_surface_operator_blocker"
  ],
  "required_top_level_keys": [
    "schema",
    "generated_at",
    "status",
    "decision",
    "purpose",
    "source_bead",
    "source_artifacts",
    "source_guard_issues",
    "action_catalog",
    "required_action_ids",
    "missing_action_ids",
    "required_fixture_ids",
    "missing_fixture_ids",
    "fixture_results",
    "ranked_recommendations",
    "negative_controls",
    "failed_negative_controls",
    "summary",
    "claim_boundaries"
  ],
  "required_action_ids": [
    "claim_ready_bead",
    "run_docs_only_work",
    "refresh_stale_evidence",
    "wait_for_rch",
    "use_beads_soft_lock",
    "open_follow_up_bead",
    "stop_and_surface_blocker"
  ],
  "required_fixture_ids": [
    "no_ready_beads",
    "healthy_ready_bead",
    "agent_mail_corrupt_soft_lock",
    "rch_saturated",
    "stale_proof_refresh",
    "duplicate_work_risk",
    "dirty_worktree_admission_denial"
  ],
  "required_fixture_keys": [
    "rank",
    "fixture_id",
    "selected_action",
    "secondary_actions",
    "confidence",
    "operator_explanation",
    "evidence_paths",
    "source_state",
    "rejected_alternatives",
    "assertions",
    "status"
  ],
  "required_fixture_assertion_ids": [
    "selected_action_allowed",
    "confidence_bounded",
    "evidence_paths_present",
    "rejected_alternatives_present",
    "operator_explanation_present"
  ],
  "required_negative_control_ids": [
    "missing_source_fails_closed",
    "stale_source_fails_closed",
    "contradictory_source_fails_closed",
    "unredacted_source_fails_closed",
    "advisory_evidence_as_authority_fails_closed"
  ],
  "required_claim_boundary_true_keys": [
    "read_only",
    "operator_evidence_only",
    "does_not_mutate_agent_mail",
    "does_not_mutate_beads",
    "does_not_launch_rch",
    "does_not_run_cargo",
    "does_not_mutate_git",
    "does_not_delete_files",
    "does_not_replace_source_systems",
    "does_not_authorize_release_performance_claims",
    "does_not_authorize_dropin_claims"
  ],
  "required_claim_boundary_false_keys": [
    "agent_mail_authority_authorized",
    "rch_authority_authorized",
    "beads_mutation_authorized",
    "git_mutation_authorized",
    "file_deletion_authorized",
    "advisory_evidence_as_source_of_truth_authorized",
    "raw_source_bodies_embedded"
  ],
  "recommendation_policy": {
    "source_policy": "The recommender consumes checked-in incident replay and proof-memory evidence. Missing, stale, malformed, contradictory, unredacted, or authority-confused sources must produce blocked output or fail before emission.",
    "action_policy": "Ranked actions are advisory. Beads claiming, Agent Mail reservations, RCH execution, git mutation, validation execution, and file deletion remain explicit operator actions in their source systems.",
    "evidence_policy": "Every fixture recommendation must cite exact evidence paths, explain the selected action, and list unsafe rejected alternatives.",
    "claim_boundary": "This artifact is operator evidence only and cannot authorize release performance, benchmark, capacity, strict drop-in, source-of-truth, or destructive-action claims."
  }
}