This cockpit turns the architecture diagrams into a reviewable operating surface: each module has an owner, maturity state, evidence anchors, gates, commands, and the next milestone.
The roadmap keeps all eight modules visible, then orders the four remaining production gates by dependency. Local MVP is ready; production completion still requires external authority.
Use the production governance binding registry to attach real auth provider claims, MFA, reviewer proof, role matrix, emergency pause roster, audit export, and authority evidence before allowing production release, deploy, chain, or scope-expansion approvals.
First required evidence
Production auth provider binding
Local boundary: canCompleteLocally=false · humanGateRequired=true
Execution 2 · 05 · platform_reliability_kernel
Platform Reliability Kernel
external_authority_required
Phase: production_observability_authority
Production observability and operator UI
Use the production observability binding registry to attach real metrics, alert delivery, authenticated operators, runbook acknowledgements, incident timeline, and post-release smoke evidence.
First required evidence
Production metric stream binding and dashboard URL
Local boundary: canCompleteLocally=false · humanGateRequired=true
Execution 3 · 06 · trust_proof_layer
Trust / Proof Layer
external_authority_required
Phase: production_proof_authority
Production proof outputs require external authority
Use the production proof controls, reliability readiness, external binding evidence matrix, and Human Gate submission package to attach real evidence storage, PoB review queues, scoring, dispute ops, settlement eligibility, reputation writes, chain request handoff, and public proof claim review outside local-only mode.
First required evidence
Production evidence storage and verifier identity binding
Local boundary: canCompleteLocally=false · humanGateRequired=true
Execution 4 · 02 · wcn_product_system
WCN Product System
external_authority_required
Phase: production_release_authority
Production release gate
Use the local release gate package to assemble a Human Gate release decision, then bind production deploy, smoke, rollback, and evidence export outside local-only mode.
First required evidence
Approved release Human Gate decision with scope, owner, rollback owner, and affected public surfaces
Local boundary: canCompleteLocally=false · humanGateRequired=true
Execution 5 · 07 · blockchain_anchoring_module
Blockchain Anchoring Module
external_authority_required
Phase: production_chain_authority
Production signer and chain adapter
Use the production chain adapter binding registry to attach signer custody, wallet policy, network provider, secrets, broadcast authorization, gas limits, retry reconciliation, and public explorer verification before real chain broadcast.
First required evidence
Production signer custody provider and custody owner
Local boundary: canCompleteLocally=false · humanGateRequired=true
Agent completion work orders
Each open production gate is converted into a fixed-agent local work order with a lead, support agents, reviewer, publish gate, acceptance commands, Human Gate inputs, and blocked production boundaries.
Deep moduledocs/agent-os/modules/01-meta-agent-os.deep.md
Module registrylib/agent-os/module-registry.ts
Module APIapp/api/agent-os/modules/route.ts
Gates
Fixed role registry exists
agents/wcn-fixed-15-agent-registry.md
Agent takeover contract is documented
docs/agent-os/modules/01-meta-agent-os.deep.md
Eight-module completion roadmap is productized
lib/agent-os/module-completion-roadmap.ts, app/api/agent-os/modules/completion-roadmap, app/[locale]/agent-os/modules, and lib/agent-os/__tests__/module-completion-roadmap.test.ts turn the 9 architecture artifacts and 8 local MVP modules into a dependency-ordered completion queue for the five remaining production gates while keeping productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, and productionSideEffectExecuted=false.
Eight-module completion work orders are productized
lib/agent-os/module-completion-work-orders.ts, app/api/agent-os/modules/completion-work-orders, app/[locale]/agent-os/modules, and lib/agent-os/__tests__/module-completion-work-orders.test.ts convert the five remaining production gates into local-only work orders with fixed 15-agent role assignments, execution steps, Human Gate inputs, handoff prompts, and acceptance commands while keeping workOrderExecutesProduction=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, and realFundsTouched=false.
Module completion execution packet queue exists
lib/agent-os/module-completion-execution-packets.ts, app/api/agent-os/modules/completion-work-orders/execution-packets, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/module-completion-execution-packets.test.ts bind the five completion work orders for governance ops, production observability, production proof outputs, public release, and production chain adapter to module-specific evidence systems, Human Gate submission steps, fixed-agent milestones, acceptance commands, and blocked production boundaries while keeping workOrderExecutesProduction=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, and productionSideEffectExecuted=false.
Module completion closure matrix exists
lib/agent-os/module-completion-closure-matrix.ts, app/api/agent-os/modules/completion-work-orders/closure-matrix, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/module-completion-closure-matrix.test.ts link the five execution packets to evidence candidate review coverage, closure criteria, closure evidence bundles, closure review drafts, and closure Human Gate queue state while keeping missingCandidates=32, unsatisfiedCriteria=40, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, workOrderExecutesProduction=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, and productionSideEffectExecuted=false.
System handoff package is productized
lib/agent-os/system-handoff.ts, app/api/agent-os/system-handoff, app/[locale]/agent-os/handoff, and lib/agent-os/__tests__/system-handoff.test.ts bind the eight modules, nine architecture artifacts, verification commands, production gaps, 06 proof-output cross-module readiness signals, 32 evidence candidate templates, 5 production authority action plans, 40 operator steps, and Human Gate boundaries into one local takeover package without claiming production completion or allowing local production execution.
Meta Agent OS kernel closure handoff is productized
lib/agent-os/meta-agent-os-closure-handoff.ts, app/api/agent-os/meta-agent-os/closure-handoff, app/[locale]/agent-os/handoff, and lib/agent-os/__tests__/meta-agent-os-closure-handoff.test.ts fuse roadmap, work orders, execution packets, closure matrix, system handoff, and evolution adoption into a 01 kernel takeover package while keeping sourceRegistryMutated=false, moduleRegistrySourceMutated=false, registryMutationApplied=false, systemCanSelfApprove=false, agentCanExpandOwnScope=false, metaOsCanOverrideHumanGate=false, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, and productionSideEffectExecuted=false.
Nine-diagram implementation matrix is productized
lib/agent-os/architecture-implementation-matrix.ts, app/api/agent-os/architecture-implementation-matrix, app/[locale]/agent-os/handoff, and lib/agent-os/__tests__/architecture-implementation-matrix.test.ts bind the 9 architecture artifacts to all 8 local MVP modules, per-module anchors, verification commands, closure matrix rows, and remaining production gates while keeping architectureArtifactMutated=false, sourceRegistryMutated=false, moduleRegistrySourceMutated=false, registryMutationApplied=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, and productionSideEffectExecuted=false.
Runtime evolution ledger is productized
lib/agent-os/evolution-ledger.ts, app/api/agent-os/evolution-ledger and app/[locale]/agent-os/evolution
Critical evolution changes bind to Human Gate and local git diff import
lib/agent-os/evolution-ledger.ts, lib/agent-os/evolution-git-diff-draft.ts, app/api/agent-os/evolution-ledger/git-diff-draft, app/[locale]/agent-os/_components/evolution-git-diff-draft-button.tsx, app/[locale]/agent-os/evolution and lib/agent-os/__tests__/evolution-ledger.test.ts enforce approved Human Gate decisions for critical or high-impact evolution changes and import real local git status/diff/hash evidence without claiming production execution.
Verified evolution records route into local adoption queues
lib/agent-os/evolution-adoption-queue.ts, lib/agent-os/module-gate-draft.ts, lib/agent-os/module-gate-human-gate-queue.ts, lib/agent-os/module-gate-registry-apply-plan.ts, lib/agent-os/module-gate-registry-apply-ledger.ts, lib/agent-os/system-handoff.ts, lib/agent-os/product-release-evidence.ts, app/api/agent-os/evolution-ledger/adoption-queue, app/api/agent-os/modules, app/api/agent-os/modules/human-gate-queue, app/api/agent-os/modules/[moduleId]/human-gate-draft, app/api/agent-os/modules/registry-apply-plan, app/api/agent-os/modules/registry-apply-plan/[moduleId]/apply, app/api/agent-os/system-handoff, app/api/agent-os/product-system/release-evidence, app/[locale]/agent-os/evolution, app/[locale]/agent-os/modules, app/[locale]/agent-os/governance, app/[locale]/agent-os/handoff, app/[locale]/agent-os/product-system, app/[locale]/agent-os/_components/module-gate-apply-plan-panel.tsx, lib/agent-os/__tests__/evolution-ledger.test.ts, lib/agent-os/__tests__/module-registry.test.ts, lib/agent-os/__tests__/module-gate-human-gate-queue.test.ts, lib/agent-os/__tests__/module-gate-registry-apply-plan.test.ts, lib/agent-os/__tests__/module-gate-registry-apply-ledger.test.ts, lib/agent-os/__tests__/system-handoff.test.ts, and lib/agent-os/__tests__/product-release-evidence.test.ts route verified records into system handoff, release evidence, per-module cross-module adoption snapshots, Human Gate-bound module gate update drafts, pending_review Human Gate queue items, read-only registry apply plans, and local overlay apply ledger records while blocking production-ready claims, source registry mutations, deploys, chain writes, funds, secrets, public proof publication, source deletion, and uncontrolled self-modification.
Approved module gate decisions produce read-only registry apply plans
lib/agent-os/module-gate-registry-apply-plan.ts, app/api/agent-os/modules/registry-apply-plan, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/module-gate-apply-plan-panel.tsx, and lib/agent-os/__tests__/module-gate-registry-apply-plan.test.ts turn approved_local_only module gate decisions into hashed, read-only module registry apply plans with verification commands while keeping registryMutationApplied=false, gitPushExecuted=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, productionAuthBound=false, and uncontrolledSelfModification=false.
Approved module gate plans can be recorded as local overlays
lib/agent-os/module-gate-registry-apply-ledger.ts, lib/agent-os/module-gate-registry-apply-ledger-store.ts, app/api/agent-os/modules/registry-apply-plan/[moduleId]/apply, app/api/agent-os/modules/registry-apply-plan, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/module-gate-apply-plan-panel.tsx, and lib/agent-os/__tests__/module-gate-registry-apply-ledger.test.ts require approved_local_only Human Gate decisions, exact plan hashes, idempotency keys, and APPLY_LOCAL_MODULE_GATE_OVERLAY confirmation before recording local overlays while keeping moduleRegistrySourceMutated=false, registryMutationApplied=false, gitPushExecuted=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, productionAuthBound=false, and uncontrolledSelfModification=false.
Production readiness gate map exists
lib/agent-os/production-readiness.ts, app/api/agent-os/production-readiness, app/[locale]/agent-os/production-readiness, and lib/agent-os/trust-proof-reliability-readiness.ts expose remaining production gates plus 06 proof-output readiness signals without overclaiming production readiness.
Production readiness external evidence package exists
lib/agent-os/production-readiness-external-evidence.ts, app/api/agent-os/production-readiness/external-evidence, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/production-readiness-external-evidence.test.ts aggregate 02 product release, 05 production observability, 07 chain adapter, and 08 governance external evidence matrices into one Human Gate handoff while keeping productionReadinessExternalEvidenceComplete=false, humanGateProductionSubmissionReady=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority final handoff matrix exists
lib/agent-os/production-authority-final-handoff.ts, app/api/agent-os/production-readiness/final-authority-handoff, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/production-authority-final-handoff.test.ts align the five remaining production gates with external evidence packets, authority intake packets, and Human Gate submission packages while keeping finalHandoffReadyLocal=true, externalEvidenceComplete=false, humanGateProductionSubmissionReady=false, productionCompletionReady=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority evidence candidate templates exist
lib/agent-os/production-authority-evidence-candidates.ts, app/api/agent-os/production-readiness/evidence-candidates, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/production-authority-evidence-candidates.test.ts expose 32 real external evidence candidate templates and a local dry-run POST schema with redaction requirements while keeping rawSecretAllowed=false, evidenceStored=false, humanGateProductionSubmissionReady=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority evidence candidate intake queue exists
lib/agent-os/production-authority-evidence-candidate-intake-queue.ts, lib/agent-os/production-authority-evidence-candidate-intake-store.ts, app/api/agent-os/production-readiness/evidence-candidates/intake-queue, app/[locale]/agent-os/production-readiness, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-evidence-candidate-intake-queue.test.ts record only redacted local dry-run candidate metadata for the 32 required external evidence templates while keeping evidenceStored=false, storesRawEvidence=false, storesProductionEvidence=false, rawSecretStored=false, privateKeyStored=false, customerSecretStored=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority evidence candidate Human Gate queue exists
lib/agent-os/production-authority-evidence-candidate-human-gate-queue.ts, app/api/agent-os/production-readiness/evidence-candidates/human-gate-queue, app/api/agent-os/production-readiness/evidence-candidates/human-gate-queue/[candidateId]/draft, app/[locale]/agent-os/production-readiness, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-evidence-candidate-human-gate-queue.test.ts connect accepted local dry-run candidate metadata to pending_review Human Gate candidate decisions while keeping candidateNotSubmitted=32 by default, evidenceStored=false, storesRawEvidence=false, storesProductionEvidence=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority evidence candidate review coverage exists
lib/agent-os/production-authority-evidence-candidate-review-coverage.ts, app/api/agent-os/production-readiness/evidence-candidates/review-coverage, app/[locale]/agent-os/production-readiness, app/[locale]/agent-os/handoff, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-evidence-candidate-review-coverage.test.ts map 32 candidate review slots into 5 closure gates so closure evidence bundle context can see missing, ready, pending, and accepted-local-only states while keeping evidenceStored=false, partialGatesClosable=0, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority action plan exists
lib/agent-os/production-authority-action-plan.ts, app/api/agent-os/production-readiness/authority-action-plan, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/production-authority-action-plan.test.ts turn the five remaining production gates into 40 ordered operator steps across evidence collection, dry-run validation, Human Gate draft, Human Gate review, production preflight, outside-local execution, post-execution verification, and ready-claim review while keeping productionExecutionReady=false, productionActionAllowedLocal=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority closure criteria exist
lib/agent-os/production-authority-closure-criteria.ts, app/api/agent-os/production-readiness/closure-criteria, app/[locale]/agent-os/production-readiness, app/[locale]/agent-os/handoff, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-closure-criteria.test.ts define 5 criteria sets and 40 closure criteria with 0 satisfied criteria and 0 closable gates while keeping partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority closure evidence bundle dry-run exists
lib/agent-os/production-authority-closure-evidence.ts, app/api/agent-os/production-readiness/closure-evidence, app/[locale]/agent-os/production-readiness, app/[locale]/agent-os/handoff, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-closure-evidence.test.ts define 5 closure evidence bundle templates and a POST dry-run path covering all 40 closure criteria while keeping acceptedForHumanGateClosureReview=0, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority closure review draft dry-run exists
lib/agent-os/production-authority-closure-review.ts, app/api/agent-os/production-readiness/closure-review, app/[locale]/agent-os/production-readiness, app/[locale]/agent-os/handoff, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-closure-review.test.ts define 5 local Human Gate closure review draft templates that require accepted closure evidence bundle dry-runs before review while keeping draftedClosureReviews=0, humanGateClosureDecisionRecorded=0, closureEvidenceStored=false, recordsDecision=false, approvesGateClosure=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production authority closure Human Gate queue exists
lib/agent-os/production-authority-closure-human-gate-queue.ts, app/api/agent-os/production-readiness/closure-review/human-gate-queue, app/api/agent-os/production-readiness/closure-review/[gateId]/human-gate-draft, app/[locale]/agent-os/production-readiness, app/[locale]/agent-os/handoff, lib/agent-os/system-handoff.ts, and lib/agent-os/__tests__/production-authority-closure-human-gate-queue.test.ts connect dry-run accepted closure review drafts to local pending_review Human Gate decisions while keeping decisionsSubmitted=0 by default, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionEvidenceComplete=false, and productionSideEffectExecuted=false.
Production gate closure dossier exists
lib/agent-os/production-gate-closure-dossier.ts, app/api/agent-os/production-readiness/closure-dossier, app/[locale]/agent-os/production-readiness, and lib/agent-os/__tests__/production-gate-closure-dossier.test.ts fuse final handoff, evidence candidate review coverage, closure criteria, closure evidence bundles, closure review drafts, closure Human Gate queue, and module completion closure matrix into 5 local operator takeover dossiers while keeping missingCandidates=32, unsatisfiedCriteria=40, closureHumanGateDraftNotSubmitted=5, evidenceStored=false, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, publicProofPublished=false, publicClaimsPublished=false, realChainBroadcastExecuted=false, privateKeyTouched=false, and productionSideEffectExecuted=false.
Production authority intake package exists
lib/agent-os/production-authority-intake.ts, lib/agent-os/production-authority-human-gate-queue.ts, app/api/agent-os/production-authority-intake, app/api/agent-os/production-authority-intake/human-gate-queue, app/[locale]/agent-os/_components/production-authority-queue-panel.tsx, app/[locale]/agent-os/_components/production-authority-draft-button.tsx, app/api/agent-os/production-authority-intake/[packetId]/human-gate-draft, and lib/agent-os/__tests__/production-authority-intake.test.ts convert the remaining production gates into external authority evidence requests, pending_review Human Gate decision drafts, and a local-only queue action without claiming production completion.
Boundary
Organization governance only; it cannot approve production release, funding, legal, chain, or scope expansion by itself.
Verification commands
npm run check:agent-os-modules
npm run check:agent-os-architecture
npm run check:agent-os-implementation
npm run check:agent-os-completion-roadmap
npm run check:agent-os-handoff
npm run check:agent-os-evolution
npm run check:agent-os-governance
npm run check:agent-os-proof
npm run check:agent-os-production-readiness
npm run check:agent-os-closure-dossier
npm run check:agent-os-authority-intake
Next milestone：Persist adopted evolution records into real module gate status changes and production evidence stores outside local-only mode.
02 · wcn_product_system
WCN Product System
Local MVP
Operate the real WCN website, dashboard, APIs, public mirrors, whitepaper surface, and local MVP cockpit.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Deep moduledocs/agent-os/modules/02-wcn-product-system.deep.md
Local MVP seedscripts/seed-wcn-mvp-local.ts
Gates
Local MVP is reproducible
npm run seed:mvp-local && npm run check:mvp-local
Next.js build passes
npm run build
Local release gate package exists
lib/agent-os/product-release-gate.ts, app/api/agent-os/product-system/release-gate, app/[locale]/agent-os/product-system and lib/agent-os/__tests__/product-release-gate.test.ts define source freeze, build proof, route proof, public-claim review, deployment authorization, smoke, rollback, and release evidence export without claiming production binding.
Local release evidence export exists
lib/agent-os/product-release-evidence.ts, app/api/agent-os/product-system/release-evidence, app/[locale]/agent-os/product-system and lib/agent-os/__tests__/product-release-evidence.test.ts export Human Gate packet, source-truth manifest, build/typecheck artifact, route/claim matrix, module gate snapshot, smoke plan, rollback plan, and agent handoff context without claiming production release.
Local release execution plan exists
lib/agent-os/product-release-execution-plan.ts, app/api/agent-os/product-system/release-execution-plan, app/[locale]/agent-os/product-system and lib/agent-os/__tests__/product-release-execution-plan.test.ts turn the release gate and evidence export into eight ordered preflight phases with command plan, Human Gate inputs, missing production evidence, and false boundaries for deploy, secrets, domain, smoke, rollback, public claims, and production side effects.
Local release cutover command center exists
lib/agent-os/product-release-cutover-command-center.ts, app/api/agent-os/product-system/release-cutover-command-center, app/[locale]/agent-os/product-system, and lib/agent-os/__tests__/product-release-cutover-command-center.test.ts organize release candidate intake, source truth and claim freeze, build/route/claim acceptance, API access and external agent preflight, deployment target cutover authorization, smoke observability monitoring, rollback and emergency pause rehearsal, and release evidence handoff while keeping productionDeployExecuted=false, productionSecretsLoaded=false, productionDomainTouched=false, productionSmokeExecuted=false, productionRollbackExecuted=false, publicClaimsPublished=false, productionApiKeyIssued=false, customerSecretStored=false, customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local production release external binding evidence matrix
lib/agent-os/product-release-production-binding-evidence.ts, app/api/agent-os/product-system/production-binding-evidence, app/[locale]/agent-os/product-system, and lib/agent-os/__tests__/product-release-production-binding-evidence.test.ts organize approved release decision, deployment target, production environment and secrets, production build/deploy, post-deploy smoke, rollback execution, production API key issuance, customer provider secret custody, production evidence export, and production-ready claim approval while keeping productionDeployExecuted=false, productionSecretsLoaded=false, productionDomainTouched=false, productionSmokeExecuted=false, productionRollbackExecuted=false, publicClaimsPublished=false, productionApiKeyIssued=false, customerSecretStored=false, customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local release Human Gate submission package exists
lib/agent-os/product-release-human-gate-submission.ts, app/api/agent-os/product-system/release-human-gate-submission, app/[locale]/agent-os/product-system, and lib/agent-os/__tests__/product-release-human-gate-submission.test.ts bind public-release into eight Human Gate submission steps: release decision, source/claim freeze, build/route acceptance, deployment target, post-deploy smoke, rollback/emergency pause, API access and customer secret custody, evidence export, and production-ready claim approval while keeping humanGateProductionSubmissionReady=false, productionReleaseExecutable=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local public release closure handoff package exists
lib/agent-os/product-release-closure-handoff.ts, app/api/agent-os/product-system/release-closure-handoff, app/[locale]/agent-os/product-system, and lib/agent-os/__tests__/product-release-closure-handoff.test.ts fuse release gate, release evidence, execution plan, cutover command center, production binding evidence, Human Gate submission, API access gate, and public-release closure matrix row while keeping missingCandidates=5, unsatisfiedCriteria=8, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionDeployExecuted=false, productionSecretsLoaded=false, productionDomainTouched=false, productionSmokeExecuted=false, productionRollbackExecuted=false, productionApiKeyIssued=false, customerSecretStored=false, customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, and productionSideEffectExecuted=false.
Local user API access gate exists
lib/agent-os/product-api-access-gate.ts, app/api/agent-os/product-system/api-access-gate, app/[locale]/agent-os/product-system and lib/agent-os/__tests__/product-api-access-gate.test.ts bind registration, WCN API key custody, scoped /api/v1 routes, user-owned provider API boundaries, agent tool consent, budget, audit, rate limit, and revocation while keeping customerSecretStored=false, customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, and unreviewedAgentToolUseAllowed=false.
Production release gate
Local release gate package, release evidence export, release execution plan, user API access gate, release cutover command center, production binding evidence matrix, Human Gate submission package, and closure handoff package exist; real approved release decision, closure evidence bundle, Human Gate closure decision, deployment target, production deploy, post-deploy smoke, rollback execution, production API key issuance, encrypted customer-owned provider secret storage, production evidence export, and production-ready claim approval remain unbound.
Boundary
Public pages must stay source-backed; runtime data and release artifacts must not become source truth.
Verification commands
npm run check:mvp-local
npm run check:agent-os-product
npm run build
npm run check:agent-os-implementation
Next milestone：Bind the release gate package, user API access gate, cutover command center, and production binding evidence matrix to approved Human Gate decisions, production deploy target, post-deploy smoke record, rollback owner, encrypted customer-owned provider secret storage, consent/budget controls, production evidence export, and production-ready claim approval outside local-only mode.
03 · runtime_business_agent_network
Runtime Business Agent Network
Local MVP
Run product agents as read, draft, recommend, and monitor actors with attributable AgentRun records and review gates.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Proof, ledger, governance and release gates require reviewer action.
Freeze and revoke control loop is locally governed
lib/agent-os/runtime-agent-network.ts, app/api/agent-os/runtime-agent-network and app/[locale]/agent-os/runtime.
Production runtime control map
lib/agent-os/production-runtime-controls.ts, app/api/agent-os/runtime-agent-network/production-runtime-controls, app/[locale]/agent-os/runtime, and lib/agent-os/__tests__/production-runtime-controls.test.ts define production agent identity, run persistence, scoped tool permission, memory boundary, reviewer assignment, Human Gate adoption, freeze/revoke operator, and audit export controls without claiming production binding.
Runtime agent API authorization is gated by product access controls
lib/agent-os/runtime-agent-api-authorization.ts, app/api/agent-os/runtime-agent-network/api-authorization-gate, app/[locale]/agent-os/runtime and lib/agent-os/__tests__/runtime-agent-api-authorization.test.ts bind runtime agent identity, allowed run kind, Product API Access Gate readiness, user consent, budget, Human Gate, audit, rate limit, and revocation checks while keeping customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, productionActionExecuted=false, and unreviewedAgentToolUseAllowed=false.
Production runtime closure handoff package
lib/agent-os/production-runtime-closure-handoff.ts, app/api/agent-os/runtime-agent-network/production-runtime-closure-handoff, app/[locale]/agent-os/runtime, and lib/agent-os/__tests__/production-runtime-closure-handoff.test.ts fuse production runtime controls, runtime API authorization decisions, and runtime state into a local-only takeover package while keeping productionRuntimeReady=false, productionAuthorizationReady=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionToolPermissionGranted=false, customerSecretLoaded=false, paidModelSpendExecuted=false, productionActionExecuted=false, productionAuthBound=false, and productionSideEffectExecuted=false.
Boundary
Runtime agents cannot inherit Meta Agent OS authority and cannot self-approve high-impact output.
Verification commands
npm run test -- lib/mvp/__tests__/wcn-mvp-agent-run-bridge.test.ts
npm run check:agent-os-runtime
npm run check:agent-os-implementation
Next milestone：Bind the production runtime controls registry and runtime API authorization gate to real runtime agent identity, AgentRun storage, scoped tool permissions, encrypted customer provider secret broker, durable memory rules, reviewer assignment, Human Gate adoption, freeze/revoke operators, budget enforcement, rate limits, and audit export outside local-only mode.
04 · agent_interoperability_gateway
Agent Interoperability Gateway
Local MVP
Let external agents, customer agents, partner systems, and node tooling enter WCN through scoped credentials and review-bound writes.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Evidence anchors
API key routeapp/api/apikeys/route.ts
API key modulelib/modules/apikeys/service.ts
Public v1 ingestapp/api/v1/ingest/route.ts
Local gateway modulelib/agent-os/interoperability-gateway.ts
Gateway state storelib/agent-os/interoperability-gateway-store.ts
Gates
Credential boundary exists
ApiKey routes and module anchors exist.
Sandbox external-agent registration exists
app/api/agent-os/interoperability-gateway
External writes land in quarantine first
app/api/agent-os/interoperability-gateway/quarantine and lib/agent-os/interoperability-gateway.ts
Quarantine promotion requires approved Human Gate decision
app/api/agent-os/interoperability-gateway/quarantine/[recordId]/review and lib/agent-os/interoperability-gateway-store.ts
MVP records external API scope intent
MVP application usesOwnApi enters Human Gate.
OAuth, webhook and SDK contract
lib/agent-os/interoperability-gateway.ts, app/api/agent-os/interoperability-gateway/contracts, app/api/agent-os/interoperability-gateway/webhook-dry-run, and app/[locale]/agent-os/gateway define local OAuth boundaries, webhook signing dry-runs, SDK manifests, and no-production-access safeguards.
Production interoperability control map
lib/agent-os/production-interoperability-controls.ts, app/api/agent-os/interoperability-gateway/production-interoperability-controls, app/[locale]/agent-os/gateway, and lib/agent-os/__tests__/production-interoperability-controls.test.ts define OAuth provider, API key custody, signed webhook delivery, SDK distribution, customer API key boundary, rate limit/abuse control, external write review, and connector audit export controls without claiming production binding.
Gateway requests are bridged through runtime API authorization
lib/agent-os/gateway-runtime-authorization-bridge.ts, app/api/agent-os/interoperability-gateway/runtime-authorization-bridge, app/[locale]/agent-os/gateway, and lib/agent-os/__tests__/gateway-runtime-authorization-bridge.test.ts bind external agent identity, Gateway sandbox scope, connector contract, Product API Access Gate, Runtime API Authorization Gate, user consent, budget, Human Gate, runtime freeze state, and false boundaries while keeping productionAccessGranted=false, productionOAuthEnabled=false, productionApiKeyIssued=false, customerSecretLoaded=false, runtimeAgentCanReadRawSecret=false, externalProviderCallExecuted=false, paidModelSpendExecuted=false, realNetworkDelivery=false, externalSideEffectExecuted=false, and productionActionExecuted=false.
Production interoperability closure handoff exists
lib/agent-os/production-interoperability-closure-handoff.ts, app/api/agent-os/interoperability-gateway/production-interoperability-closure-handoff, app/[locale]/agent-os/gateway, and lib/agent-os/__tests__/production-interoperability-closure-handoff.test.ts combine the eight production interoperability controls, Gateway runtime bridge decisions, connector state, missing external binding groups, and false boundaries while keeping completionMatrixBound=false, productionConnectorReady=false, productionAccessGranted=false, productionOauthBound=false, productionApiKeyIssued=false, customerSecretLoaded=false, realNetworkDelivery=false, productionCompletionReady=false, and productionReadyClaimAllowed=false.
Boundary
No broad external write, production key, or customer-agent access without scope, rate limit, audit, sandbox, and Human Gate.
Verification commands
npm run check:agent-os-implementation
npm run check:agent-os-gateway
Next milestone：Use the production interoperability closure handoff to decide whether 04 Gateway becomes a formal production completion gate, then bind real OAuth providers, API key custody, signed webhook delivery, SDK publishing, customer-owned API secrets, runtime tool brokers, abuse/rate-limit operations, reviewer identity, and audit export outside local-only mode.
05 · platform_reliability_kernel
Platform Reliability Kernel
Local MVP
Provide policy evaluation, audit writes, evidence storage, outbox, idempotency, retry, DLQ, and observability.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Evidence anchors
Policy enginelib/modules/policy/engine.ts
Outboxlib/core/outbox.ts
DLQ admin routeapp/api/admin/outbox/dlq/route.ts
Local reliability kernellib/agent-os/reliability-kernel.ts
Reliability state storelib/agent-os/reliability-kernel-store.ts
Gates
Policy engine anchor exists
lib/modules/policy/engine.ts
Outbox and DLQ anchors exist
lib/core/outbox.ts and app/api/admin/outbox/dlq
Local reliability receipts exist
lib/agent-os/reliability-kernel.ts
Retry, DLQ, and trace are locally testable
lib/agent-os/__tests__/reliability-kernel.test.ts
High-impact side effects verify approved Human Gate decisions
lib/agent-os/reliability-kernel-store.ts and lib/agent-os/__tests__/reliability-kernel.test.ts
Local operator observability cockpit
app/api/agent-os/reliability-kernel/observability and app/[locale]/agent-os/reliability expose health status, alerts, runbooks, trace events, operator actions, and no-production-side-effect boundaries.
Production observability binding map
lib/agent-os/production-observability.ts, app/api/agent-os/reliability-kernel/production-observability, and app/[locale]/agent-os/reliability define metric stream, external alert destination, authenticated operator, runbook acknowledgement, incident timeline, and release smoke probe requirements without claiming production binding.
Local operations evidence export
lib/agent-os/reliability-operations-evidence.ts, app/api/agent-os/reliability-kernel/operations-evidence, app/[locale]/agent-os/reliability and lib/agent-os/__tests__/reliability-operations-evidence.test.ts export metric dashboard, alert delivery, operator identity, runbook acknowledgement, incident timeline, post-release smoke, rollback/replay, and DLQ/retry audit evidence without claiming production operations.
Local production operator console workflows
lib/agent-os/production-observability-operator-console.ts, app/api/agent-os/reliability-kernel/production-operator-console, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/production-observability-operator-console.test.ts organize smoke monitoring, alert triage, incident escalation, rollback readiness, replay reconciliation, audit export, and release observability handoff while keeping externalAlertDelivery=false, productionMetricsStream=false, authenticatedOperator=false, productionSmokeExecuted=false, productionRollbackExecuted=false, productionReplayExecuted=false, productionIncidentOpened=false, and productionSideEffectExecuted=false.
Local production observability cutover evidence matrix
lib/agent-os/production-observability-cutover-evidence.ts, app/api/agent-os/reliability-kernel/production-observability-cutover-evidence, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/production-observability-cutover-evidence.test.ts bind release window intake, smoke route evidence, metrics/alert binding, operator identity/runbook, incident timeline, rollback/replay readiness, DLQ/retry audit, and release observability handoff while keeping externalAlertDelivery=false, productionMetricsStream=false, authenticatedOperator=false, productionSmokeExecuted=false, productionRollbackExecuted=false, productionReplayExecuted=false, productionIncidentOpened=false, productionIncidentClosed=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Production observability external binding evidence matrix
lib/agent-os/production-observability-external-binding-evidence.ts, app/api/agent-os/reliability-kernel/production-observability-external-binding-evidence, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/production-observability-external-binding-evidence.test.ts separate metrics backend, alert delivery channel, on-call roster, operator identity/MFA, incident management system, production smoke executor, rollback/replay authority, and observability audit export into one Human Gate handoff while keeping productionObservabilityExternalBindingsReady=false, externalAlertDelivery=false, productionMetricsStream=false, authenticatedOperator=false, productionSmokeExecuted=false, productionRollbackExecuted=false, productionReplayExecuted=false, productionIncidentOpened=false, productionIncidentClosed=false, productionAuditExported=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local production observability Human Gate submission package
lib/agent-os/production-observability-human-gate-submission.ts, app/api/agent-os/reliability-kernel/production-observability-human-gate-submission, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/production-observability-human-gate-submission.test.ts organize metrics backend, alert delivery, on-call roster, operator identity/MFA, incident runbook, post-release smoke, rollback/replay authority, and audit export/ready-claim review into one Human Gate submission package while keeping humanGateProductionSubmissionReady=false, productionObservabilityReady=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Production observability closure handoff package
lib/agent-os/production-observability-closure-handoff.ts, app/api/agent-os/reliability-kernel/production-observability-closure-handoff, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/production-observability-closure-handoff.test.ts fuse operator console workflows, cutover evidence, external binding evidence, Human Gate submission, and the production-observability closure matrix row into one takeover package while keeping missingCandidates=5, unsatisfiedCriteria=8, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, and productionSideEffectExecuted=false.
Cross-module side effects declare reliability readiness
lib/agent-os/reliability-side-effect-readiness.ts, app/api/agent-os/reliability-kernel/side-effect-readiness, app/[locale]/agent-os/reliability, and lib/agent-os/__tests__/reliability-side-effect-readiness.test.ts bind policy, audit, idempotency, outbox topic, rollback/replay plan, Human Gate verification, and local receipt simulation for 02/03/04/07/08 side effects while keeping eventOutboxProductionWrite=false, externalApiCalled=false, chainWriteExecuted=false, realFundsTouched=false, and productionSideEffectExecuted=false.
Production observability and operator UI
Local kernel, binding registry, operations evidence, operator console workflows, side-effect readiness, production observability cutover evidence matrix, external binding evidence matrix, Human Gate submission package, and closure handoff package exist; real production dashboard, external alert delivery, authenticated operator identity, production smoke, rollback, replay, incident operations, audit export, closure evidence, and production-ready claim approval remain backlog.
Boundary
No side effect should occur without policy decision, auditability, idempotency, and rollback path.
Verification commands
npm run check:agent-os-implementation
npm run check:agent-os-reliability
Next milestone：Bind the side-effect readiness gate, production observability registry, cutover evidence matrix, and external binding evidence matrix to durable outbox topics, real metrics backend, alert delivery, on-call roster, authenticated operator identity, incident system, rollback/replay owners, audit export, and post-release smoke evidence.
06 · trust_proof_layer
Trust / Proof Layer
Local MVP
Turn verified evidence into PoB drafts, review decisions, reputation signals, settlement eligibility, and chain-anchor requests.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Trust proof state storelib/agent-os/trust-proof-layer-store.ts
Production proof controls registrylib/agent-os/production-proof-controls.ts
Gates
Evidence before proof
MVP seed creates task evidence before proof draft.
Proof before ledger
MVP ledger requires approved proof draft.
Anti-gaming assessment loop is locally governed
lib/agent-os/trust-proof-layer.ts, app/api/agent-os/trust-proof-layer, and app/[locale]/agent-os/proof enforce local risk flags, self-review blocks, idempotency, and Human Gate override.
Production proof control map
lib/agent-os/production-proof-controls.ts, app/api/agent-os/trust-proof-layer/production-proof-controls, app/[locale]/agent-os/proof, and lib/agent-os/__tests__/production-proof-controls.test.ts define verified evidence source, PoB review queue, scoring policy, dispute ops, settlement eligibility, reputation output, chain anchor requests, and public proof claim review without claiming production binding.
Proof outputs pass through reliability readiness before side effects
lib/agent-os/trust-proof-reliability-readiness.ts, app/api/agent-os/trust-proof-layer/reliability-readiness, app/[locale]/agent-os/proof, and lib/agent-os/__tests__/trust-proof-reliability-readiness.test.ts map all eight production proof controls into Platform Reliability Kernel side-effect readiness decisions while keeping publicProofPublished=false, settlementEligibilityBound=false, reputationWriteEnabled=false, chainAnchorRequested=false, realFundsTouched=false, eventOutboxProductionWrite=false, and productionSideEffectExecuted=false.
Production proof external binding evidence matrix
lib/agent-os/production-proof-external-binding-evidence.ts, app/api/agent-os/trust-proof-layer/production-external-binding-evidence, app/[locale]/agent-os/proof, and lib/agent-os/__tests__/production-proof-external-binding-evidence.test.ts join production proof controls and reliability readiness into 8 external evidence items while keeping productionProofExternalBindingsReady=false, publicProofPublished=false, settlementEligibilityBound=false, reputationWriteEnabled=false, chainAnchorRequested=false, realFundsTouched=false, eventOutboxProductionWrite=false, chainWriteExecuted=false, and productionSideEffectExecuted=false.
Production proof Human Gate submission package
lib/agent-os/production-proof-human-gate-submission.ts, app/api/agent-os/trust-proof-layer/production-proof-human-gate-submission, app/[locale]/agent-os/proof, and lib/agent-os/__tests__/production-proof-human-gate-submission.test.ts organize verified evidence source, PoB review queue, scoring policy, dispute ops, settlement eligibility, reputation signal, chain anchor request, and public proof claim review into an ordered Human Gate submission package while keeping humanGateProductionSubmissionReady=false, productionReadyClaimAllowed=false, publicProofPublished=false, realFundsTouched=false, chainAnchorRequested=false, eventOutboxProductionWrite=false, chainWriteExecuted=false, and productionSideEffectExecuted=false.
Production proof closure handoff package
lib/agent-os/production-proof-closure-handoff.ts, app/api/agent-os/trust-proof-layer/production-proof-closure-handoff, app/[locale]/agent-os/proof, and lib/agent-os/__tests__/production-proof-closure-handoff.test.ts fuse proof controls, reliability readiness, external binding evidence, Human Gate submission, and the production-proof-outputs closure matrix row into one takeover package while keeping missingCandidates=8, unsatisfiedCriteria=8, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, publicProofPublished=false, settlementEligibilityBound=false, reputationWriteEnabled=false, chainAnchorRequested=false, realFundsTouched=false, eventOutboxProductionWrite=false, chainWriteExecuted=false, and productionSideEffectExecuted=false.
Production proof outputs require external authority
Local proof controls, reliability readiness, external binding evidence, Human Gate submission package, and closure handoff package exist; real evidence storage, authenticated PoB review queue, versioned scoring policy, dispute operations, settlement eligibility, reputation writer, chain request handoff, public proof claim approval, closure evidence, and production-ready claim approval remain backlog.
Boundary
No proof, settlement eligibility, or public proof claim without verified evidence and review trail.
Verification commands
npm run check:mvp-local
npm run check:agent-os-proof
npm run check:agent-os-reliability
npm run check:agent-os-completion-roadmap
Next milestone：Bind the production proof closure handoff package to real evidence storage, authenticated PoB review queues, durable outbox topics, versioned scoring, dispute operations, settlement eligibility, reputation writes, chain requests, public-claim review, closure evidence, and production-ready claim approval outside local-only mode.
07 · blockchain_anchoring_module
Blockchain Anchoring Module
Local MVP
Anchor verified hashes, credentials, receipts, or governance decisions while keeping raw sensitive evidence off-chain.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
Evidence anchors
Deep moduledocs/agent-os/modules/07-blockchain-anchoring-module.deep.md
Local chain anchoring modulelib/agent-os/blockchain-anchoring.ts
Gates
Raw evidence stays off-chain
Module contract and MVP boundaries block public proof/chain anchoring by default.
Payload hash and Merkle root are recomputable
lib/agent-os/blockchain-anchoring.ts
No-funds local chain receipt exists
app/api/agent-os/blockchain-anchoring and /verify
Approved Human Gate required before adapter output
lib/agent-os/blockchain-anchoring-store.ts and lib/agent-os/__tests__/blockchain-anchoring.test.ts
Local signer, adapter registry, and public verifier
lib/agent-os/blockchain-anchoring.ts, app/api/agent-os/blockchain-anchoring/adapters, app/api/agent-os/blockchain-anchoring/public-verifier, and app/[locale]/agent-os/chain define local signer manifests, adapter switching, disabled production adapter boundaries, and public verifier records.
Production chain adapter binding map
lib/agent-os/production-chain-adapter.ts, app/api/agent-os/blockchain-anchoring/production-chain-adapter, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-adapter.test.ts define signer custody, wallet policy, adapter secrets, network provider, broadcast authorization, gas limits, retry reconciliation, and public explorer verification without claiming production chain access.
Production chain handoff evidence export
lib/agent-os/production-chain-evidence.ts, app/api/agent-os/blockchain-anchoring/production-evidence, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-evidence.test.ts export signer custody, wallet policy, adapter secret, network provider, broadcast authorization, gas treasury, retry reconciliation, and public explorer evidence without claiming production broadcast.
Local production broadcast readiness workflows
lib/agent-os/production-chain-broadcast-readiness.ts, app/api/agent-os/blockchain-anchoring/production-broadcast-readiness, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-broadcast-readiness.test.ts organize signer custody activation, wallet policy review, adapter secret preflight, network provider preflight, broadcast authorization, gas treasury guardrails, retry reconciliation, and public explorer verification while keeping productionSignerCustodyBound=false, walletAccessProvisioned=false, realChainAdapterSecretLoaded=false, realChainBroadcastExecuted=false, realFundsTouched=false, privateKeyTouched=false, and rawSensitiveEvidenceOnChain=false.
Production chain external binding evidence matrix
lib/agent-os/production-chain-external-binding-evidence.ts, app/api/agent-os/blockchain-anchoring/production-external-binding-evidence, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-external-binding-evidence.test.ts join signer custody, wallet policy, adapter secret, network provider, broadcast authorization, gas treasury, retry reconciliation, and public explorer smoke into one Human Gate handoff while keeping productionChainExternalBindingsReady=false, realChainBroadcastExecuted=false, realFundsTouched=false, privateKeyTouched=false, rawSensitiveEvidenceOnChain=false, and productionSideEffectExecuted=false.
Local production chain Human Gate submission package
lib/agent-os/production-chain-human-gate-submission.ts, app/api/agent-os/blockchain-anchoring/production-chain-human-gate-submission, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-human-gate-submission.test.ts organize signer custody, wallet policy, adapter secrets, network provider, broadcast authorization, gas treasury, retry reconciliation, and public explorer/ready-claim review into one Human Gate submission package while keeping humanGateProductionSubmissionReady=false, productionChainAdapterReady=false, realChainBroadcastExecuted=false, realFundsTouched=false, privateKeyTouched=false, rawSensitiveEvidenceOnChain=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Production chain closure handoff package
lib/agent-os/production-chain-closure-handoff.ts, app/api/agent-os/blockchain-anchoring/production-chain-closure-handoff, app/[locale]/agent-os/chain, and lib/agent-os/__tests__/production-chain-closure-handoff.test.ts fuse production chain adapter bindings, chain evidence, broadcast readiness workflows, external binding evidence, Human Gate submission, and the production-chain-adapter closure matrix row into one takeover package while keeping missingCandidates=7, unsatisfiedCriteria=8, closureEvidenceStored=false, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionSignerCustodyBound=false, walletAccessProvisioned=false, realChainAdapterSecretLoaded=false, realChainBroadcastExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, privateKeyTouched=false, rawSensitiveEvidenceOnChain=false, and productionSideEffectExecuted=false.
Production signer and chain adapter
Local governed adapter registry, verifier UI, production binding map, handoff evidence, broadcast readiness workflows, external binding evidence matrix, Human Gate submission package, and closure handoff package exist; closure evidence bundle, Human Gate closure decision, real signer custody, wallet access, real chain broadcast, adapter secrets, real funds, production retry reconciliation, explorer production smoke, and production-ready claim approval remain unbound.
Boundary
No raw sensitive evidence on-chain; no chain write without verified payload, Human Gate where required, and retryable receipt handling.
Verification commands
npm run check:agent-os-implementation
npm run check:agent-os-chain
Next milestone：Bind the production chain adapter registry to real signer custody, wallet policy, network provider, adapter secrets, broadcast authority, gas limits, retry reconciliation, and public explorer verification outside local-only mode.
08 · human_gate_governance
Human Gate / Governance
Local MVP
Govern irreversible, external, legal, financial, proof, chain, scope expansion, autonomy, and release decisions.
Evolution adoption
Production claim: false
Adoption ready
0
Adoption waiting
0
Adoption blocked
0
No verified cross-module evolution records are waiting on this module.
Gate update draft
Human Gate: required
Draft status
no_adoption_needed
Applied
false
Proposed gate
Verified evolution records are adopted by this module
Proposed status: partial
Draft evidence：No verified cross-module evolution changes are ready for this module.
MVP proof, ledger, and release gates require reviewer decisions.
Release boundary is explicit
Governance acceptance packet blocks push, deploy, funds, chain, source deletion, and public claims.
Persistent decision ledger
lib/agent-os/decision-ledger.ts and app/api/agent-os/decision-ledger
High-impact modules validate approved Human Gate decisions
04 gateway, 05 reliability and 07 chain anchoring call verifyApprovedHumanGateDecision before high-impact outputs.
Local reviewer identity binding
lib/agent-os/reviewer-identity.ts, app/api/agent-os/decision-ledger/reviewer-identities, app/api/agent-os/decision-ledger/[decisionId]/review, app/[locale]/agent-os/governance, and app/[locale]/agent-os/_components/human-gate-local-review-actions.tsx bind reviewerId to allowed role, decision kind, module, affected systems, self-review blocking, duplicate-review blocking, and no-production-auth boundary.
Production governance binding map
lib/agent-os/production-governance.ts, app/api/agent-os/decision-ledger/production-governance, and app/[locale]/agent-os/governance define production auth provider, MFA, reviewer proof, role matrix, segregation of duties, emergency pause roster, decision audit export, and authority evidence requirements without claiming production binding.
Production governance handoff evidence export
lib/agent-os/production-governance-evidence.ts, app/api/agent-os/decision-ledger/production-evidence, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-evidence.test.ts export auth provider, MFA, reviewer identity, role matrix, segregation of duties, emergency pause roster, audit export, authority evidence packets, and 06 proof-output readiness review signals without claiming production authority.
Proof output readiness routes into Human Gate review
lib/agent-os/production-governance-evidence.ts, app/api/agent-os/decision-ledger/production-evidence, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-evidence.test.ts convert 01/06 cross-module readiness into governance readiness review signals with blocked proof-output decisions, required Human Gate inputs, missing production evidence, and false boundaries for public proof, funds, chain requests, outbox production writes, and production side effects.
Proof output readiness review has a local Human Gate queue
lib/agent-os/production-governance-readiness-review-queue.ts, app/api/agent-os/decision-ledger/readiness-review-signals/human-gate-queue, app/api/agent-os/decision-ledger/readiness-review-signals/[signalId]/human-gate-draft, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/readiness-review-queue-panel.tsx, app/[locale]/agent-os/_components/readiness-review-draft-button.tsx, and lib/agent-os/__tests__/production-governance-evidence.test.ts convert readiness review signals into pending_review local public_claim decisions while keeping proof output, public claims, settlement, reputation, chain requests, production deploys, production auth, real funds, and production side effects blocked.
Module gate updates require Human Gate queue review
lib/agent-os/module-gate-human-gate-queue.ts, app/api/agent-os/modules/human-gate-queue, app/api/agent-os/modules/[moduleId]/human-gate-draft, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/module-gate-queue-panel.tsx, and lib/agent-os/__tests__/module-gate-human-gate-queue.test.ts convert ready module gate drafts into pending_review local Human Gate decisions while keeping the module registry unapplied and production effects blocked.
Approved module gate decisions remain reviewable before registry mutation
lib/agent-os/module-gate-registry-apply-plan.ts, app/api/agent-os/modules/registry-apply-plan, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/module-gate-apply-plan-panel.tsx, and lib/agent-os/__tests__/module-gate-registry-apply-plan.test.ts expose approved_local_only module gate decisions as hashed read-only registry apply plans with verification commands while keeping registryMutationApplied=false and all production-side-effect boundaries false.
Module gate local overlay apply remains Human Gate-bound
lib/agent-os/module-gate-registry-apply-ledger.ts, lib/agent-os/module-gate-registry-apply-ledger-store.ts, app/api/agent-os/modules/registry-apply-plan/[moduleId]/apply, app/api/agent-os/modules/registry-apply-plan, app/[locale]/agent-os/governance, app/[locale]/agent-os/_components/module-gate-apply-plan-panel.tsx, and lib/agent-os/__tests__/module-gate-registry-apply-ledger.test.ts require the approved Human Gate decision id, exact plan hash, idempotency key, and APPLY_LOCAL_MODULE_GATE_OVERLAY confirmation before recording local overlays while keeping moduleRegistrySourceMutated=false, registryMutationApplied=false, gitPushExecuted=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, productionAuthBound=false, and uncontrolledSelfModification=false.
Local production governance ops command center
lib/agent-os/production-governance-ops-command-center.ts, app/api/agent-os/decision-ledger/production-governance-ops, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-ops-command-center.test.ts organize production authority intake, authenticated reviewer sessions, MFA and role matrix preflight, readiness review triage, proof-output authorization, release/deploy/chain/funds guardrails, emergency pause rehearsal, and decision audit export handoff while keeping productionAuthProviderBound=false, productionMfaEnforced=false, productionReviewerIdentityProofBound=false, productionRoleMatrixBound=false, productionEmergencyPauseRosterBound=false, productionDecisionAuditExportBound=false, legalAuthorityBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, productionProofOutputAllowed=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Production governance external authority evidence matrix
lib/agent-os/production-governance-external-authority-evidence.ts, app/api/agent-os/decision-ledger/production-external-authority-evidence, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-external-authority-evidence.test.ts join production auth provider, MFA, reviewer proof, role matrix, segregation of duties, emergency pause roster, decision audit export, and legal authority into one Human Gate handoff while keeping productionExternalAuthorityReady=false, productionAuthProviderBound=false, productionMfaEnforced=false, productionReviewerIdentityProofBound=false, legalAuthorityBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionProofOutputAllowed=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local production governance Human Gate submission package
lib/agent-os/production-governance-human-gate-submission.ts, app/api/agent-os/decision-ledger/production-governance-human-gate-submission, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-human-gate-submission.test.ts organize auth provider, MFA policy, reviewer identity proof, role reviewer matrix, segregation of duties, emergency pause roster, decision audit export, and legal authority/ready-claim review into one Human Gate submission package while keeping humanGateProductionSubmissionReady=false, productionGovernanceOpsReady=false, productionAuthProviderBound=false, productionMfaEnforced=false, legalAuthorityBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionProofOutputAllowed=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Local production governance closure handoff package
lib/agent-os/production-governance-closure-handoff.ts, app/api/agent-os/decision-ledger/production-governance-closure-handoff, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/production-governance-closure-handoff.test.ts fuse governance ops workflows, external authority evidence, Human Gate submission steps, and the production-governance-ops closure matrix row into a local takeover package while keeping missingCandidates=7, unsatisfiedCriteria=8, partialGateCanClose=false, productionCompletionReady=false, productionReadyClaimAllowed=false, productionAuthProviderBound=false, productionDeployExecuted=false, productionChainWriteExecuted=false, realFundsTouched=false, productionSecretsLoaded=false, and productionSideEffectExecuted=false.
Production governance completion work order execution packet
lib/agent-os/module-completion-execution-packets.ts, app/api/agent-os/modules/completion-work-orders/execution-packets, app/[locale]/agent-os/governance, and lib/agent-os/__tests__/module-completion-execution-packets.test.ts bind work order 1 to governance ops workflows, external authority evidence, Human Gate submission steps, fixed-agent milestones, acceptance commands, and Human Gate inputs while keeping workOrderExecutesProduction=false, productionAuthProviderBound=false, productionMfaEnforced=false, legalAuthorityBound=false, productionReadyClaimAllowed=false, and productionSideEffectExecuted=false.
Authenticated production governance operations
Local console, decision ledger, reviewer identity registry, production governance binding map, evidence export, Human Gate queues, module gate apply ledger, governance ops command center, external authority evidence matrix, Human Gate submission package, and closure handoff package exist; real production auth provider claims, MFA, reviewer proof, legal authority evidence, immutable audit export, production emergency pause roster, production operator roster, production deploy, chain write, funds movement, secrets, proof-output permission, and production-ready claim approval remain unbound.
Boundary
Agents cannot approve their own output; release, deploy, funds, public claims, and scope expansion require human authority.
Verification commands
npm run check:mvp-local
npm run check:agent-os-governance
npm run check:agent-os-completion-roadmap
npm run check:agent-os-implementation
Next milestone：Bind the production governance registry to real auth provider claims, MFA, reviewer proof, emergency pause roster, and legal authority evidence.
