CHAIN ANCHORING

Verified hashes can be inspected without exposing raw evidence.

This local cockpit shows adapter registry, signer manifests, simulated receipts, public verifier records, and the no-real-chain-write boundary.

Anchoring API Adapters API Production chain API Production evidence API Production broadcast readiness API Production external binding API Production Human Gate submission API Production chain closure handoff API Verifier API Module cockpit

Receipts

Confirmed

Pending retry

Blocked

Adapters

Local chain state

.next/cache/wcn-agent-os/blockchain-anchoring.json

No production chain write

chain=false · key=false · adapter=false

Production chain adapter bindings

Local ready

Production bound

External required

Chain ready

false

Evidence sections

Evidence ready

Production bound

Chain ready

false

Production chain adapter bindings

Workflows

Runbook ready

true

Broadcast ready

false

Production bound

Human Gate inputs

Evidence items

Local ready

External binding ready

false

Production bound

Human Gate inputs

Submissions

Submission ready

true

Production bound

Human Gate inputs

Chain ready

false

Handoff items

Closure handoff

true

Missing candidates

Unsatisfied criteria

Partial closable

Broadcast ready

false

False boundary

productionSignerCustodyBound=false

walletAccessProvisioned=false

realChainAdapterSecretLoaded=false

realChainBroadcastExecuted=false

realFundsTouched=false

rawSensitiveEvidenceOnChain=false

productionChainExternalBindingsReady=false

productionChainSubmissionReadyLocal=true

humanGateProductionSubmissionReady=false

closureEvidenceStored=false

partialGateCanClose=false

productionCompletionReady=false

productionChainWriteExecuted=false

privateKeyTouched=false

productionReadyClaimAllowed=false

productionSideEffectExecuted=false

Production chain closure handoff package

This local package fuses the production chain adapter, chain evidence, broadcast readiness, external binding evidence, Human Gate submission, and production-chain-adapter closure matrix row into one takeover surface. It is locally ready but remains blocked by missing external chain authority evidence.

Production chain closure handoff API

wcn-production-chain-closure-handoff-production-chain-adapter · production-chain-adapter

Production signer and chain adapter

Closure matrix row: wcn-module-completion-closure-matrix-5-blockchain_anchoring_module-production-chain-adapter · wcn-module-completion-execution-packet-5-blockchain-anchoring-module-production-chain-adapter · wcn-module-completion-work-order-5-blockchain_anchoring_module-production-chain-adapter

draft_not_submitted

Required candidates

Missing candidates

Closure criteria

Unsatisfied criteria

Partial closable

false

Broadcast ready

false

Closure blockers

7 required evidence candidates are missing for production-chain-adapter.

8 closure criteria remain unsatisfied for production-chain-adapter.

closureEvidenceStored=false and acceptedForHumanGateClosureReview=false.

closureReviewStatus=awaiting_dry_run_accepted_closure_evidence_bundle; closureEvidenceAcceptedLocal=false.

closureHumanGateDecisionStatus=draft_not_submitted; decisionSubmitted=false.

Production execution records, post-execution verification, rollback readiness, and ready-claim approval are still external Human Gate dependencies.

External production chain adapter evidence has not been submitted to Human Gate.

The local handoff package cannot close production-chain-adapter without signer custody, wallet access, adapter secrets, network provider binding, broadcast authorization, gas treasury evidence, retry reconciliation, public explorer smoke, and ready-claim approval.

Next action

Submit redacted candidate metadata for all 7 evidence requests in production-chain-adapter.

Dry-run a complete closure evidence bundle with POST /api/agent-os/production-readiness/closure-evidence.

Submit a closure review draft with POST /api/agent-os/production-readiness/closure-review/production-chain-adapter/human-gate-draft only after the closure evidence dry-run is accepted.

Record independent Human Gate review decisions without self-approval.

Attach real production execution records and post-execution verification outside local-only mode before any production-ready claim.

Submit all eight production chain external binding evidence groups through the Human Gate package.

Keep realChainBroadcastExecuted=false, realFundsTouched=false, privateKeyTouched=false, and productionChainWriteExecuted=false until an approved production authority packet exists.

Validation

npm run check:agent-os-implementation

npm run check:agent-os-chain

npm run check:agent-os-completion-roadmap

curl -s http://localhost:3000/api/agent-os/modules/completion-roadmap

curl -s http://localhost:3000/api/agent-os/modules/completion-work-orders

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-chain-adapter

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-evidence

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-broadcast-readiness

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-external-binding-evidence

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-chain-human-gate-submission

curl -s http://localhost:3000/api/agent-os/modules/completion-work-orders/execution-packets

curl -s http://localhost:3000/zh/agent-os/chain

npm run check:agent-os-production-readiness

curl -s http://localhost:3000/api/agent-os/modules/completion-work-orders/closure-matrix

curl -s http://localhost:3000/api/agent-os/production-readiness/closure-criteria

curl -s http://localhost:3000/api/agent-os/production-readiness/closure-evidence

curl -s http://localhost:3000/api/agent-os/production-readiness/closure-review

curl -s http://localhost:3000/api/agent-os/production-readiness/closure-review/human-gate-queue

curl -s http://localhost:3000/api/agent-os/production-readiness/closure-review/production-chain-adapter/human-gate-draft

curl -s http://localhost:3000/zh/agent-os/production-readiness

curl -s http://localhost:3000/api/agent-os/blockchain-anchoring/production-chain-closure-handoff

Human Gate inputs

production-chain-adapter-evidence-01

production-chain-adapter-evidence-02

production-chain-adapter-evidence-03

production-chain-adapter-evidence-04

production-chain-adapter-evidence-05

production-chain-adapter-evidence-06

production-chain-adapter-evidence-07

Binding ids

wcn-prod-chain-signer-custody

wcn-prod-chain-wallet-policy

wcn-prod-chain-adapter-secret

wcn-prod-chain-network-provider

wcn-prod-chain-broadcast-authorization

wcn-prod-chain-gas-treasury-limit

wcn-prod-chain-retry-reconciliation

wcn-prod-chain-public-explorer-verification

Evidence ids

wcn-chain-evidence-signer-custody

wcn-chain-evidence-wallet-policy

wcn-chain-evidence-adapter-secret

wcn-chain-evidence-network-provider

wcn-chain-evidence-broadcast-authorization

wcn-chain-evidence-gas-treasury

wcn-chain-evidence-retry-reconciliation

wcn-chain-evidence-public-explorer

Workflows

wcn-chain-broadcast-signer-custody-activation

wcn-chain-broadcast-wallet-policy-review

wcn-chain-broadcast-adapter-secret-preflight

wcn-chain-broadcast-network-provider-preflight

wcn-chain-broadcast-authorization

wcn-chain-broadcast-gas-treasury-guardrail

wcn-chain-broadcast-retry-reconciliation

wcn-chain-broadcast-public-explorer-verification

External binding kinds

operator_identity

human_gate_decision

external_alert_route

slo_monitoring

incident_timeline

retry_dlq_policy

reconciliation_export

Missing production bindings

wcn-chain-external-binding-signer-custody

wcn-chain-external-binding-wallet-policy

wcn-chain-external-binding-adapter-secret

wcn-chain-external-binding-network-provider

wcn-chain-external-binding-broadcast-authorization

wcn-chain-external-binding-gas-treasury

wcn-chain-external-binding-retry-reconciliation

wcn-chain-external-binding-public-explorer-smoke

Submissions

wcn-prod-chain-submission-signer-custody

wcn-prod-chain-submission-wallet-policy

wcn-prod-chain-submission-adapter-secret

wcn-prod-chain-submission-network-provider

wcn-prod-chain-submission-broadcast-authorization

wcn-prod-chain-submission-gas-treasury

wcn-prod-chain-submission-retry-reconciliation

wcn-prod-chain-submission-public-explorer-ready-claim

False boundary

productionSignerCustodyBound=false

walletAccessProvisioned=false

realChainAdapterSecretLoaded=false

productionNetworkProviderBound=false

realChainBroadcastExecuted=false

productionGasTreasuryBound=false

productionRetryReconciliationBound=false

productionExplorerBound=false

productionChainWriteExecuted=false

realFundsTouched=false

privateKeyTouched=false

rawSensitiveEvidenceOnChain=false

closureEvidenceStored=false

partialGateCanClose=false

productionCompletionReady=false

productionReadyClaimAllowed=false

productionAuthBound=false

productionDeployExecuted=false

productionSecretsLoaded=false

productionSideEffectExecuted=false

source=lib/agent-os/production-chain-closure-handoff.ts · localOnly=true · readOnly=true · productionBound=false · closureEvidenceStored=false · partialGateCanClose=false · productionCompletionReady=false · productionReadyClaimAllowed=false · productionChainWriteExecuted=false · realChainBroadcastExecuted=false · realFundsTouched=false · privateKeyTouched=false · productionSideEffectExecuted=false

Production chain Human Gate submission package

This local package turns signer custody, wallet policy, adapter secrets, network provider, broadcast authorization, gas treasury, retry reconciliation, and public explorer smoke into an ordered Human Gate submission. It prepares production review without signing, broadcasting, loading secrets, touching funds, or claiming chain readiness.

01 · signer_custody_submission · 07-blockchain-anchoring-module

Signer custody submission

Submit production signer custody, owner, rotation, recovery, and emergency pause evidence before any production transaction can be signed.

productionBound=false

Upstream refs

lib/agent-os/blockchain-anchoring.ts

lib/agent-os/production-chain-adapter.ts

lib/agent-os/production-chain-evidence.ts

Human Gate inputs

Approved custody provider and signer manifest id

Custody owner, recovery owner, rotation owner, and emergency pause owner

No-private-key-in-local-artifact review result

Missing production evidence

Production custody provider record

Hardware-backed or provider custody evidence

Key rotation and emergency pause proof

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

GET /api/agent-os/blockchain-anchoring/production-chain-human-gate-submission

Binding ids

wcn-prod-chain-signer-custody

Evidence ids

wcn-chain-evidence-signer-custody

Workflows

signer_custody_activation

External binding kinds

signer_custody_binding

02 · wallet_policy_submission · 08-human-gate-governance

Wallet policy submission

Submit wallet action authority, authenticated reviewer identity, and segregation-of-duties evidence before production wallet access can exist.

productionBound=false

Upstream refs

lib/agent-os/reviewer-identity.ts

lib/agent-os/production-governance.ts

lib/agent-os/production-authority-intake.ts

Human Gate inputs

Wallet policy version and policy owner

Authenticated reviewer identity roster

Role-to-chain-action matrix

Missing production evidence

Approved production wallet policy

Production reviewer identity proof

Segregation-of-duties enforcement evidence

Validation

npm run check:agent-os-governance

npm run check:agent-os-chain

GET /api/agent-os/production-authority-intake/wcn-authority-intake-blockchain-anchoring-module-production-chain-adapter/human-gate-draft

Binding ids

wcn-prod-chain-wallet-policy

Evidence ids

wcn-chain-evidence-wallet-policy

Workflows

wallet_policy_review

External binding kinds

wallet_policy_binding

03 · adapter_secret_submission · auth-rbac-security

Adapter secret submission

Submit RPC, signer, indexer, and adapter secret custody evidence without loading real secrets into local files, public pages, or agent context.

productionBound=false

Upstream refs

lib/agent-os/production-chain-adapter.ts

lib/agent-os/production-chain-evidence.ts

app/api/agent-os/blockchain-anchoring/production-chain-adapter/route.ts

Human Gate inputs

Approved production environment

Secret owner and rotation cadence

No-secret-in-artifact review evidence

Missing production evidence

Production RPC or adapter secret reference

Secret rotation audit proof

Production environment binding evidence

Validation

npm run check:agent-os-chain

npx tsc --noEmit --pretty false

GET /api/agent-os/blockchain-anchoring/production-chain-adapter

Binding ids

wcn-prod-chain-adapter-secret

Evidence ids

wcn-chain-evidence-adapter-secret

Workflows

adapter_secret_preflight

External binding kinds

adapter_secret_binding

04 · network_provider_submission · 07-blockchain-anchoring-module

Network provider submission

Submit chain id, RPC provider, explorer base URL, finality, reorg, rate-limit, and outage policy while preserving replaceable adapter governance.

productionBound=false

Upstream refs

lib/agent-os/blockchain-anchoring.ts

app/api/agent-os/blockchain-anchoring/adapters/route.ts

app/api/agent-os/blockchain-anchoring/public-verifier/route.ts

Human Gate inputs

Approved chain id and network provider

Finality, confirmation depth, and reorg policy

Primary or fallback adapter decision

Missing production evidence

Production RPC provider record

Explorer base URL and finality policy

Rate-limit and outage handling evidence

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

GET /api/agent-os/blockchain-anchoring/public-verifier

Binding ids

wcn-prod-chain-network-provider

Evidence ids

wcn-chain-evidence-network-provider

Workflows

network_provider_preflight

External binding kinds

network_provider_binding

05 · broadcast_authorization_submission · 08-human-gate-governance

Broadcast authorization submission

Submit the chain_anchor Human Gate decision, payload hash, Merkle root, adapter, signer, and off-chain evidence reference before production broadcast.

productionBound=false

Upstream refs

lib/agent-os/blockchain-anchoring-store.ts

lib/agent-os/decision-ledger.ts

lib/agent-os/production-authority-intake.ts

Human Gate inputs

Approved chain_anchor decision id

Payload hash, Merkle root, adapter id, and signer id

Explicit production-broadcast scope

Missing production evidence

Production broadcast authorization record

Approved Human Gate chain_anchor decision

Signed payload-to-broadcast audit packet

Validation

npm run check:agent-os-chain

npm run check:agent-os-governance

GET /api/agent-os/production-authority-intake/wcn-authority-intake-blockchain-anchoring-module-production-chain-adapter/human-gate-draft

Binding ids

wcn-prod-chain-broadcast-authorization

Evidence ids

wcn-chain-evidence-broadcast-authorization

Workflows

broadcast_authorization

External binding kinds

broadcast_authorization_binding

06 · gas_treasury_submission · 07-blockchain-anchoring-module

Gas treasury submission

Submit gas limits, treasury source, top-up policy, spend monitoring, and abnormal-spend pause thresholds without touching real funds locally.

productionBound=false

Upstream refs

lib/agent-os/production-chain-adapter.ts

lib/agent-os/production-governance.ts

lib/agent-os/production-readiness.ts

Human Gate inputs

Gas limit approval

Treasury owner and funding source

Abnormal spend pause threshold

Missing production evidence

Gas treasury limit approval

Real-funds authority proof

Spend monitoring and pause threshold evidence

Validation

npm run check:agent-os-chain

npm run check:agent-os-production-readiness

GET /api/agent-os/production-readiness

Binding ids

wcn-prod-chain-gas-treasury-limit

Evidence ids

wcn-chain-evidence-gas-treasury-limit

Workflows

gas_treasury_guardrail

External binding kinds

gas_treasury_binding

07 · retry_reconciliation_submission · 05-platform-reliability-kernel

Retry reconciliation submission

Submit failed-broadcast retry, DLQ, explorer reconciliation, incident timeline, and manual pause evidence before any production replay.

productionBound=false

Upstream refs

lib/agent-os/production-chain-broadcast-readiness.ts

lib/agent-os/reliability-operations-evidence.ts

app/api/agent-os/reliability-kernel/operations-evidence/route.ts

Human Gate inputs

Retry and reconciliation runbook owner

Duplicate transaction policy

Manual pause threshold

Missing production evidence

Production retry or DLQ record

Explorer reconciliation evidence

Incident timeline link

Validation

npm run check:agent-os-reliability

npm run check:agent-os-chain

GET /api/agent-os/reliability-kernel/operations-evidence

Binding ids

wcn-prod-chain-retry-reconciliation

Evidence ids

wcn-chain-evidence-retry-reconciliation

Workflows

retry_reconciliation

External binding kinds

retry_reconciliation_binding

08 · public_explorer_ready_claim_submission · 01-wcn-conductor

Public explorer and ready-claim submission

Submit production explorer smoke, public verifier invariants, raw-evidence exclusion, and explicit ready-claim approval before any public chain proof claim.

productionBound=false

Upstream refs

lib/agent-os/production-chain-external-binding-evidence.ts

lib/agent-os/production-readiness-external-evidence.ts

app/api/agent-os/production-readiness/external-evidence/route.ts

Human Gate inputs

Production explorer base URL and receipt URL template

Public verifier production smoke output

Production-ready claim approval decision

Missing production evidence

Production explorer receipt URL

Public verifier production smoke output

Residual-risk and ready-claim approval

Validation

npm run check:agent-os-chain

npm run check:agent-os-production-readiness

GET /api/agent-os/production-readiness/external-evidence

Binding ids

wcn-prod-chain-public-explorer-verification

Evidence ids

wcn-chain-evidence-public-explorer

Workflows

public_explorer_verification

External binding kinds

public_explorer_smoke_binding

source=lib/agent-os/production-chain-human-gate-submission.ts · localOnly=true · readOnly=true · productionBound=false

Production chain external binding evidence matrix

This local matrix joins adapter bindings, handoff evidence, broadcast workflows, reliability evidence, and production-readiness gates into one Human Gate handoff before real signer custody, wallet access, chain broadcast, funds, or explorer publication can exist.

01 · signer_custody_binding · 07-blockchain-anchoring-module

Signer custody external binding

Bind production signer custody to an approved external custody authority before any production chain transaction can be signed.

productionBound=false

Local signals

lib/agent-os/production-chain-adapter.ts

lib/agent-os/production-chain-evidence.ts

app/api/agent-os/blockchain-anchoring/adapters/route.ts

Human Gate inputs

Approved custody provider and signer manifest id

Custody, recovery, rotation, and emergency pause owners

No-private-key-in-local-artifact review result

Missing production bindings

Production custody provider record

Hardware-backed or provider custody evidence

Key rotation and emergency pause proof

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-chain-adapter

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

signer_custody

Evidence ids

signer_custody_packet

Workflows

signer_custody_activation

Evidence sections

operator_identity

02 · wallet_policy_binding · 08-human-gate-governance

Wallet policy external binding

Bind wallet actions to authenticated reviewers, segregation-of-duties, recovery, rotation, and revocation policy before production wallet access exists.

productionBound=false

Local signals

lib/agent-os/reviewer-identity.ts

lib/agent-os/production-governance.ts

app/api/agent-os/decision-ledger/production-governance/route.ts

Human Gate inputs

Wallet policy version and policy owner

Authenticated reviewer identity roster

Role-to-chain-action matrix

Missing production bindings

Approved production wallet policy

Production reviewer identity proof

Segregation-of-duties enforcement evidence

Validation

npm run check:agent-os-governance

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

wallet_policy

Evidence ids

wallet_policy_packet

Workflows

wallet_policy_review

Evidence sections

human_gate_decision

03 · adapter_secret_binding · auth-rbac-security

Adapter secret external binding

Bind RPC, signer, indexer, and adapter secrets to approved production secret custody without leaking secrets into local files, public pages, or agent context.

productionBound=false

Local signals

lib/agent-os/production-chain-adapter.ts

app/api/agent-os/blockchain-anchoring/production-chain-adapter/route.ts

scripts/check-agent-os-implementation.ts

Human Gate inputs

Approved production environment

Secret owner and rotation cadence

No-secret-in-artifact review evidence

Missing production bindings

Production RPC or adapter secret reference

Secret rotation audit proof

Production environment binding evidence

Validation

npm run check:agent-os-chain

npx tsc --noEmit --pretty false

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

chain_adapter_secret

Evidence ids

adapter_secret_packet

Workflows

adapter_secret_preflight

Evidence sections

external_alert_route

04 · network_provider_binding · 07-blockchain-anchoring-module

Network provider external binding

Bind chain id, RPC provider, explorer, finality, reorg, rate-limit, and outage policy while preserving WCN's replaceable adapter boundary.

productionBound=false

Local signals

WcnChainAdapterRegistryEntry.networkName

WcnChainAdapterRegistryEntry.productionNetwork

app/api/agent-os/blockchain-anchoring/public-verifier/route.ts

Human Gate inputs

Approved chain id and network provider

Finality, confirmation depth, and reorg policy

Primary or fallback adapter decision

Missing production bindings

Production RPC provider record

Explorer base URL and finality policy

Rate-limit and outage handling evidence

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/public-verifier

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

network_provider

Evidence ids

network_provider_packet

Workflows

network_provider_preflight

Evidence sections

slo_monitoring

05 · broadcast_authorization_binding · 08-human-gate-governance

Broadcast authorization external binding

Bind the final chain_anchor Human Gate decision, payload hash, Merkle root, adapter, signer, and off-chain evidence reference before production broadcast is allowed.

productionBound=false

Local signals

createLocalChainAnchor requires approved Human Gate decision

lib/agent-os/blockchain-anchoring-store.ts

lib/agent-os/__tests__/blockchain-anchoring.test.ts

Human Gate inputs

Approved chain_anchor decision id

Payload hash, Merkle root, adapter id, and signer id

Explicit production-broadcast scope

Missing production bindings

Production broadcast authorization record

Approved Human Gate chain_anchor decision

Signed payload-to-broadcast audit packet

Validation

npm run check:agent-os-chain

npm run check:agent-os-governance

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

broadcast_authorization

Evidence ids

broadcast_authorization_packet

Workflows

broadcast_authorization

Evidence sections

human_gate_decision

06 · gas_treasury_binding · 07-blockchain-anchoring-module

Gas treasury external binding

Bind gas limits, treasury source, top-up policy, spend monitoring, and abnormal-spend pause thresholds while keeping real funds untouched locally.

productionBound=false

Local signals

receipt.source.realFundsTouched=false

WcnChainAdapterRegistryEntry.policy.realFundsTouched=false

lib/agent-os/production-readiness.ts

Human Gate inputs

Gas limit approval

Treasury owner and funding source

Abnormal spend pause threshold

Missing production bindings

Gas treasury limit approval

Real-funds authority proof

Spend monitoring and pause threshold evidence

Validation

npm run check:agent-os-production-readiness

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

gas_treasury_limit

Evidence ids

gas_treasury_limit_packet

Workflows

gas_treasury_guardrail

Evidence sections

incident_timeline

07 · retry_reconciliation_binding · 05-platform-reliability-kernel

Retry reconciliation external binding

Bind failed broadcasts to retry, DLQ, explorer reconciliation, incident timeline, and manual pause controls before any production replay is possible.

productionBound=false

Local signals

receipt.retryState

chain_anchor.retry_scheduled

app/api/agent-os/reliability-kernel/operations-evidence/route.ts

Human Gate inputs

Retry and reconciliation runbook owner

Duplicate transaction policy

Manual pause threshold

Missing production bindings

Production retry or DLQ record

Explorer reconciliation evidence

Incident timeline link

Validation

npm run check:agent-os-reliability

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

retry_reconciliation_runbook

Evidence ids

retry_reconciliation_packet

Workflows

retry_reconciliation

Evidence sections

retry_dlq_policy

reconciliation_export

incident_timeline

08 · public_explorer_smoke_binding · 07-blockchain-anchoring-module

Public explorer smoke external binding

Bind production explorer URL, public verifier invariants, receipt URL template, and raw-sensitive-evidence exclusion smoke before any public chain proof claim.

productionBound=false

Local signals

buildPublicChainVerifierRecord

app/api/agent-os/blockchain-anchoring/public-verifier/route.ts

app/[locale]/agent-os/chain/page.tsx

Human Gate inputs

Production explorer base URL

Verifier data minimization approval

Raw-sensitive-evidence exclusion checklist

Missing production bindings

Production explorer receipt URL

Public verifier production smoke output

Evidence minimization review result

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/public-verifier

GET /api/agent-os/blockchain-anchoring/production-external-binding-evidence

Binding ids

public_explorer_verification

Evidence ids

public_explorer_packet

Workflows

public_explorer_verification

Evidence sections

external_alert_route

source=lib/agent-os/production-chain-external-binding-evidence.ts · localOnly=true · readOnly=true · productionBound=false

Production broadcast readiness

These local workflows turn chain adapter bindings and evidence packets into a broadcast handoff: signer custody, wallet policy, adapter secrets, network provider, authorization, gas guardrails, retry reconciliation, and public explorer verification.

01 · signer_custody_activation · 07-blockchain-anchoring-module

Signer custody activation

Prepare the signer custody activation checklist without touching private keys or production custody.

productionBound=false

Operator inputs

Approved custody provider reference

Signer manifest id and rotation owner

Emergency pause owner

Local signals

lib/agent-os/blockchain-anchoring.ts

lib/agent-os/production-chain-adapter.ts

app/api/agent-os/blockchain-anchoring/adapters/route.ts

Runbook

Verify the signer manifest is approved and does not expose private key material.

Confirm custody owner, recovery owner, and rotation owner are separate where required.

Keep production signer custody disabled until Human Gate approves activation.

Human Gate inputs

Custody provider and signer manifest id

Rotation and recovery owner

Emergency pause authority

Missing production bindings

Production custody provider record

Hardware or provider custody evidence

Key rotation and emergency pause proof

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

GET /api/agent-os/blockchain-anchoring/production-broadcast-readiness

Binding ids

wcn-prod-chain-signer-custody

Evidence ids

wcn-chain-evidence-signer-custody

02 · wallet_policy_review · 08-human-gate-governance

Wallet policy review

Map wallet actions to reviewer identity and segregation-of-duties before production wallet access exists.

productionBound=false

Operator inputs

Wallet policy version

Reviewer identity roster

Signer action permission matrix

Local signals

lib/agent-os/reviewer-identity.ts

lib/agent-os/production-governance.ts

app/api/agent-os/decision-ledger/production-governance/route.ts

Runbook

Review who can rotate, pause, recover, audit, and revoke signer keys.

Confirm no runtime agent can grant itself chain broadcast authority.

Attach wallet policy evidence to the chain-anchor Human Gate decision.

Human Gate inputs

Approved wallet policy version

Authenticated reviewer identity evidence

Role-to-chain-action matrix

Missing production bindings

Production wallet access

Production reviewer identity proof

Segregation-of-duties enforcement

Validation

npm run check:agent-os-governance

npm run check:agent-os-chain

GET /api/agent-os/decision-ledger/production-governance

Binding ids

wcn-prod-chain-wallet-policy

Evidence ids

wcn-chain-evidence-wallet-policy

03 · adapter_secret_preflight · auth-rbac-security

Adapter secret preflight

Prepare the production RPC, signer, indexer, and adapter secret review without loading real secrets.

productionBound=false

Operator inputs

Production environment name

Secret owner and rotation cadence

No-secret-in-artifact review evidence

Local signals

lib/agent-os/production-chain-adapter.ts

app/api/agent-os/blockchain-anchoring/production-chain-adapter/route.ts

scripts/check-agent-os-implementation.ts

Runbook

Confirm adapter secrets are provisioned only through approved production environment controls.

Reject secrets from local files, repo files, screenshots, or public artifacts.

Keep realChainAdapterSecretLoaded=false in local readiness exports.

Human Gate inputs

Approved production environment

Secret owner and rotation cadence

No-secret-in-artifact review result

Missing production bindings

Production RPC or adapter secret reference

Secret rotation audit proof

Environment binding evidence

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-chain-adapter

GET /api/agent-os/blockchain-anchoring/production-broadcast-readiness

Binding ids

wcn-prod-chain-adapter-secret

Evidence ids

wcn-chain-evidence-adapter-secret

04 · network_provider_preflight · 07-blockchain-anchoring-module

Network provider preflight

Prepare chain id, RPC provider, finality, reorg, and outage controls before selecting a production network.

productionBound=false

Operator inputs

Chain id and network provider

Finality and reorg tolerance

Rate-limit and outage policy

Local signals

WcnChainAdapterRegistryEntry.networkName

WcnChainAdapterRegistryEntry.productionNetwork

app/api/agent-os/blockchain-anchoring/adapters/route.ts

Runbook

Confirm the production network choice is replaceable through adapter boundaries.

Document finality, reorg, confirmation depth, and provider outage behavior.

Keep raw sensitive evidence off-chain regardless of network selection.

Human Gate inputs

Approved chain id and network provider

Finality and reorg policy

Primary or fallback adapter decision

Missing production bindings

Production RPC provider record

Explorer base URL and finality policy

Rate-limit and outage handling evidence

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

GET /api/agent-os/blockchain-anchoring/public-verifier

Binding ids

wcn-prod-chain-network-provider

Evidence ids

wcn-chain-evidence-network-provider

05 · broadcast_authorization · 08-human-gate-governance

Broadcast authorization

Prepare the final chain_anchor decision packet before any production transaction broadcast can be attempted.

productionBound=false

Operator inputs

Approved chain_anchor decision id

Payload hash and Merkle root

Adapter id, signer id, and off-chain evidence reference

Local signals

createLocalChainAnchor requires approved Human Gate decision

lib/agent-os/blockchain-anchoring-store.ts

lib/agent-os/__tests__/blockchain-anchoring.test.ts

Runbook

Verify the payload hash and Merkle root are recomputable.

Attach adapter id, signer id, off-chain evidence reference, and decision scope.

Block production broadcast when Human Gate authorization is missing or only authorizes a dry run.

Human Gate inputs

Approved chain_anchor decision id

Payload hash, Merkle root, adapter id, and signer id

Explicit production-broadcast scope

Missing production bindings

Production broadcast authorization record

Approved Human Gate chain_anchor decision

Signed payload-to-broadcast audit packet

Validation

npm run check:agent-os-chain

npm run check:agent-os-governance

GET /api/agent-os/blockchain-anchoring/production-broadcast-readiness

Binding ids

wcn-prod-chain-broadcast-authorization

Evidence ids

wcn-chain-evidence-broadcast-authorization

06 · gas_treasury_guardrail · 07-blockchain-anchoring-module

Gas treasury guardrail

Prepare gas limits, treasury authority, and abnormal-spend pause thresholds while keeping real funds untouched.

productionBound=false

Operator inputs

Gas limit and treasury owner

Funding source and top-up policy

Emergency pause threshold

Local signals

receipt.source.realFundsTouched=false

WcnChainAdapterRegistryEntry.policy.realFundsTouched=false

lib/agent-os/production-readiness.ts

Runbook

Confirm gas limits and funding source are approved before broadcast.

Separate real-funds authority from signer custody authority.

Keep realFundsTouched=false until production treasury binding is approved.

Human Gate inputs

Gas limit approval

Treasury owner and funding source

Abnormal spend pause threshold

Missing production bindings

Gas treasury limit approval

Real-funds authority proof

Spend monitoring and pause threshold evidence

Validation

npm run check:agent-os-production-readiness

GET /api/agent-os/production-readiness

GET /api/agent-os/blockchain-anchoring/production-broadcast-readiness

Binding ids

wcn-prod-chain-gas-treasury-limit

Evidence ids

wcn-chain-evidence-gas-treasury

07 · retry_reconciliation · 05-platform-reliability-kernel

Retry reconciliation

Prepare duplicate transaction, failed broadcast, explorer mismatch, and incident-timeline handling before production retry exists.

productionBound=false

Operator inputs

Failed or pending receipt ids

Duplicate transaction policy

Explorer mismatch and manual pause threshold

Local signals

receipt.retryState

chain_anchor.retry_scheduled

app/api/agent-os/reliability-kernel/operations-evidence/route.ts

Runbook

Route failed broadcasts to reliability retry, DLQ, reconciliation, and incident timeline.

Deduplicate by payload hash, idempotency key, and explorer receipt.

Escalate stuck or mismatched receipts to Human Gate before replay.

Human Gate inputs

Retry and reconciliation runbook owner

Duplicate transaction policy

Manual pause threshold

Missing production bindings

Production retry or DLQ record

Explorer reconciliation evidence

Incident timeline link

Validation

npm run check:agent-os-reliability

npm run check:agent-os-chain

GET /api/agent-os/reliability-kernel/production-operator-console

Binding ids

wcn-prod-chain-retry-reconciliation

Evidence ids

wcn-chain-evidence-retry-reconciliation

08 · public_explorer_verification · 07-blockchain-anchoring-module

Public explorer verification

Prepare public explorer verification while publishing only minimized hash, Merkle, receipt, adapter, and off-chain reference data.

productionBound=false

Operator inputs

Explorer base URL and receipt URL template

Verifier response invariants

Raw-sensitive-evidence exclusion checklist

Local signals

buildPublicChainVerifierRecord

app/api/agent-os/blockchain-anchoring/public-verifier/route.ts

app/[locale]/agent-os/chain/page.tsx

Runbook

Verify public responses expose only hash, Merkle root, adapter, receipt, and off-chain reference.

Check that raw sensitive evidence is absent from verifier payload, page source, and explorer metadata.

Attach public explorer smoke output to the chain-adapter Human Gate packet.

Human Gate inputs

Production explorer base URL

Verifier data minimization approval

Raw-sensitive-evidence exclusion checklist

Missing production bindings

Production explorer receipt URL

Public verifier production smoke output

Evidence minimization review result

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/public-verifier

GET /api/agent-os/blockchain-anchoring/production-broadcast-readiness

Binding ids

wcn-prod-chain-public-explorer-verification

Evidence ids

wcn-chain-evidence-public-explorer

source=lib/agent-os/production-chain-broadcast-readiness.ts · localOnly=true · productionBound=false

Production chain handoff evidence

This local package prepares the evidence Human Gate needs before real chain broadcast: signer custody, wallet policy, adapter secrets, network provider, broadcast authorization, gas limits, retry reconciliation, and public explorer verification.

signer_custody_packet · 07-blockchain-anchoring-module

Signer custody evidence

productionBound=false

Local signals

lib/agent-os/blockchain-anchoring.ts

lib/agent-os/production-chain-adapter.ts

app/api/agent-os/blockchain-anchoring/adapters/route.ts

Required production binding

Bind signer custody to an approved production custody provider or hardware-backed wallet.

Record custody owner, recovery owner, rotation authority, and emergency pause owner.

Prove that private keys are never loaded from local files or public artifacts.

Human Gate inputs

Approved custody provider and signer manifest id.

Named custody owner, recovery owner, and rotation owner.

Human Gate decision authorizing the custody scope and emergency pause path.

Missing production evidence

Production signer custody provider record.

Production signer manifest with custody reference.

Key rotation and emergency pause approval record.

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

wallet_policy_packet · 08-human-gate-governance

Wallet and key policy evidence

productionBound=false

Local signals

lib/agent-os/reviewer-identity.ts

lib/agent-os/production-governance.ts

app/api/agent-os/decision-ledger/production-governance/route.ts

Required production binding

Define who can rotate, pause, recover, audit, and revoke production signer keys.

Map each signer action to authenticated reviewer identity and segregation-of-duties rules.

Attach wallet policy evidence to the production-chain-adapter Human Gate decision.

Human Gate inputs

Wallet policy version and owner.

Reviewer identity roster with allowed chain-anchor decision kinds.

Segregation-of-duties rule for signer custody and broadcast approval.

Missing production evidence

Approved production wallet policy.

Authenticated reviewer identity proof.

Role-to-chain-action matrix.

Validation

npm run check:agent-os-governance

npm run check:agent-os-chain

adapter_secret_packet · auth-rbac-security

Real chain adapter secret evidence

productionBound=false

Local signals

lib/agent-os/production-chain-adapter.ts

app/api/agent-os/blockchain-anchoring/production-chain-adapter/route.ts

scripts/check-agent-os-implementation.ts

Required production binding

Provision RPC, signer, indexer, and adapter secrets through approved production environment settings.

Record secret owner, rotation cadence, least-privilege scope, and no-secret-in-artifact evidence.

Reject production adapter enablement if secrets are loaded from local files, repo files, or public artifacts.

Human Gate inputs

Secret owner and rotation cadence.

Approved production environment name and deployment target.

No-secret-in-artifact review evidence.

Missing production evidence

Production RPC or adapter secret reference.

Secret rotation record.

Environment binding audit proof.

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/production-chain-adapter

network_provider_packet · 07-blockchain-anchoring-module

Network provider evidence

productionBound=false

Local signals

WcnChainAdapterRegistryEntry.networkName

WcnChainAdapterRegistryEntry.productionNetwork

app/api/agent-os/blockchain-anchoring/adapters/route.ts

Required production binding

Select production network, RPC provider, finality policy, reorg tolerance, and rate-limit controls.

Record chain id, explorer base URL, confirmation depth, outage behavior, and rollback caveats.

Preserve WCN's replaceable-adapter boundary so the system is not locked into one chain assumption.

Human Gate inputs

Approved chain id and network provider.

Finality and reorg policy.

Decision on whether this adapter is replaceable, fallback-only, or primary.

Missing production evidence

Production network provider record.

Explorer base URL and finality policy.

Rate-limit and outage handling evidence.

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/adapters

broadcast_authorization_packet · 08-human-gate-governance

Broadcast authorization evidence

productionBound=false

Local signals

createLocalChainAnchor requires approved Human Gate decision

lib/agent-os/blockchain-anchoring-store.ts

lib/agent-os/__tests__/blockchain-anchoring.test.ts

Required production binding

Require an approved chain_anchor Human Gate decision before any production broadcast.

Attach verified payload hash, Merkle root, off-chain evidence reference, adapter id, and signer id.

Prevent runtime agents from self-approving or directly broadcasting production transactions.

Human Gate inputs

Approved chain_anchor decision id.

Payload hash, Merkle root, adapter id, and signer id.

Explicit scope stating whether the decision authorizes dry-run, local simulator, or production broadcast.

Missing production evidence

Production broadcast authorization record.

Approved Human Gate chain_anchor decision.

Signed payload-to-broadcast audit packet.

Validation

npm run check:agent-os-chain

npm run check:agent-os-governance

gas_treasury_limit_packet · 07-blockchain-anchoring-module

Gas and treasury limit evidence

productionBound=false

Local signals

receipt.source.realFundsTouched=false

WcnChainAdapterRegistryEntry.policy.realFundsTouched=false

lib/agent-os/production-readiness.ts

Required production binding

Define gas spending limits, treasury source, top-up policy, and escalation threshold.

Record real-funds authority separately from signer custody authority.

Block production broadcast when spend limits, treasury source, or funding authority evidence are missing.

Human Gate inputs

Gas limit and treasury owner.

Funding source and top-up policy.

Emergency pause threshold for abnormal spend.

Missing production evidence

Gas treasury limit approval.

Real-funds authority proof.

Spend monitoring and pause threshold evidence.

Validation

npm run check:agent-os-production-readiness

GET /api/agent-os/production-readiness

retry_reconciliation_packet · 05-platform-reliability-kernel

Retry and reconciliation evidence

productionBound=false

Local signals

receipt.retryState

chain_anchor.retry_scheduled

app/api/agent-os/reliability-kernel/operations-evidence/route.ts

Required production binding

Bind failed broadcasts to production retry, DLQ, reconciliation, and incident timeline.

Define duplicate transaction handling, explorer mismatch handling, and manual pause thresholds.

Attach retry outcomes to both reliability observability and chain-adapter decision evidence.

Human Gate inputs

Retry and reconciliation runbook owner.

Duplicate transaction policy.

Manual pause threshold for stuck or mismatched receipts.

Missing production evidence

Production retry or DLQ record.

Explorer reconciliation evidence.

Incident timeline link for failed or replayed chain actions.

Validation

npm run check:agent-os-reliability

npm run check:agent-os-chain

public_explorer_packet · 07-blockchain-anchoring-module

Public explorer verification evidence

productionBound=false

Local signals

buildPublicChainVerifierRecord

app/api/agent-os/blockchain-anchoring/public-verifier/route.ts

app/[locale]/agent-os/chain/page.tsx

Required production binding

Bind production explorer URL, receipt URL format, and verifier response invariants.

Publish only payload hash, Merkle root, receipt, adapter, and off-chain evidence reference.

Verify that raw sensitive evidence never appears in the public explorer, verifier payload, or page source.

Human Gate inputs

Production explorer base URL and receipt URL template.

Public verifier data minimization approval.

Raw-sensitive-evidence exclusion checklist.

Missing production evidence

Production explorer receipt URL.

Public verifier production smoke output.

Evidence minimization review result.

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/public-verifier

source=lib/agent-os/production-chain-evidence.ts · localOnly=true · productionBound=false

Public verifier

Select a confirmed receipt or pass receiptId in the URL.

Receipts

No local chain anchor receipts recorded yet.

Adapters

local_testnet_simulator

Local Testnet Simulator

enabled=true

local_simulator · wcn-local-31337

network: WCN Local Testnet Simulator

broadcast=true · verifier=true

local_merkle_log

Local Merkle Log

enabled=true

local_simulator · wcn-local-merkle-log

network: WCN Local Merkle Log

broadcast=true · verifier=true

production_evm_disabled

Production EVM Adapter

enabled=false

disabled_production · production-disabled

network: Production EVM Adapter Disabled Locally

broadcast=false · verifier=false

Signer manifests

wcn-local-manifest-signer

local_manifest

local://agent-os/chain/no-private-key

Human Gate required before any production custody or real signer rotation.

enabled=true · privateKey=false

wcn-local-merkle-log-signer

local_manifest

local://agent-os/chain/merkle-log/no-private-key

Human Gate required before switching this adapter into any production chain writer.

enabled=true · privateKey=false

wcn-production-custody-disabled

production_custody_disabled

Verify that raw sensitive evidence never appears in the public explorer or verifier payload.

Validation

npm run check:agent-os-chain

GET /api/agent-os/blockchain-anchoring/public-verifier