TRUST / PROOF

Proof stays evidence-first.

This local cockpit records anti-gaming assessment, evidence hash checks, self-review blocks, Human Gate requirements, and high-impact proof boundaries.

Assessments
0
Open
0
Approved
0
Blocked
0
Critical
0
High
0
Human Gate
0
Audit
0
Local proof store
.next/cache/wcn-agent-os/trust-proof-layer.json
No production effects
proof=false · settlement=false · chain=false
Production proof controls
8
Local ready
8
Production bound
0
External required
8
Proof production ready
false
Ready receipts
0
Blocked readiness
8
Human Gate
8
Outbox required
8
Evidence items
8
External evidence
true
Submission steps
8
Submission ready
true
Proof production ready
false
Handoff items
1
Closure handoff
true
Missing production evidence
8
Blocked readiness
8
Proof production ready
false
False production boundary

Production proof controls are local-only. No Prisma proof queue, production scoring, settlement eligibility, reputation write, public proof publication, chain request, fund movement, or production risk write has happened here.

prisma=false · scoring=false · settlement=false · reputation=false · public=false · funds=false · chain=false
externalBindings=false · submission=false · readyClaim=false · outbox=false · sideEffect=false
closureHandoff=true · productionProofOutputsReady=false · closureEvidenceStored=false · productionCompletionReady=false

Production proof closure handoff package

This local package fuses proof controls, reliability readiness, external binding evidence, Human Gate submission, and the global closure matrix row into one takeover handoff. It cannot close the production proof gate without real external evidence and Human Gate authority.

Closure handoff API
production-proof-outputs · draft_not_submitted

Production proof outputs require external authority

Fuses local proof output evidence, reliability blockers, Human Gate submission, and closure matrix state into one takeover package.

close=false
Reliability refs
  • wcn-module-completion-closure-matrix-3-trust_proof_layer-production-proof-outputs
  • wcn-module-completion-execution-packet-3-trust-proof-layer-production-proof-outputs
  • wcn-module-completion-work-order-3-trust_proof_layer-production-proof-outputs
  • /api/agent-os/production-readiness/closure-review/production-proof-outputs/human-gate-draft
Upstream refs
  • wcn-prod-proof-verified-evidence-source
  • wcn-prod-proof-pob-review-queue
  • trust-proof-reliability-wcn-prod-proof-verified-evidence-source
  • trust-proof-reliability-wcn-prod-proof-pob-review-queue
  • wcn-proof-external-binding-verified-evidence-source-binding
  • wcn-proof-external-binding-pob-review-queue-binding
Blocking reasons
  • 8 required evidence candidates are missing for production-proof-outputs.
  • 8 closure criteria remain unsatisfied for production-proof-outputs.
  • closureEvidenceStored=false and acceptedForHumanGateClosureReview=false.
  • closureReviewStatus=awaiting_dry_run_accepted_closure_evidence_bundle; closureEvidenceAcceptedLocal=false.
  • closureHumanGateDecisionStatus=draft_not_submitted; decisionSubmitted=false.
  • Production execution records, post-execution verification, rollback readiness, and ready-claim approval are still external Human Gate dependencies.
Next action
  • Submit redacted candidate metadata for all 8 evidence requests in production-proof-outputs.
  • Dry-run a complete closure evidence bundle with POST /api/agent-os/production-readiness/closure-evidence.
  • Submit a closure review draft with POST /api/agent-os/production-readiness/closure-review/production-proof-outputs/human-gate-draft only after the closure evidence dry-run is accepted.
  • Record independent Human Gate review decisions without self-approval.
  • Attach real production execution records and post-execution verification outside local-only mode before any production-ready claim.
  • Submit all eight production proof external binding evidence groups through the Human Gate package.
Validation
  • npm run check:mvp-local
  • npm run check:agent-os-proof
  • npm run check:agent-os-reliability
  • npm run check:agent-os-completion-roadmap
  • npm run check:agent-os-implementation
  • curl -s http://localhost:3000/api/agent-os/modules/completion-roadmap
Missing production evidence
  • requiredEvidenceCandidates=8
  • missingCandidates=8
  • closureCriteria=8
  • unsatisfiedCriteria=8
No production effects
  • productionProofOutputsReady=false
  • humanGateProductionSubmissionReady=false
  • productionCompletionReady=false
  • productionReadyClaimAllowed=false
  • closureEvidenceStored=false
False production boundary
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • chainWriteExecuted=false
  • productionSideEffectExecuted=false
source=lib/agent-os/production-proof-closure-handoff.ts · localOnly=true · readOnly=true · productionBound=false · productionProofOutputsReady=false · closureEvidenceStored=false · productionCompletionReady=false · productionReadyClaimAllowed=false · publicProofPublished=false · realFundsTouched=false · chainAnchorRequested=false · productionSideEffectExecuted=false

Production proof Human Gate submission package

This local package orders the proof output evidence that must be submitted for Human Gate review. It prepares takeover and review without binding production queues, publishing public proof, touching funds, requesting chain anchors, or writing production risk decisions.

Human Gate submission API
01 · verified_evidence_source_submission · db_write

Verified evidence source submission

Submit Human Gate evidence for Evidence Packet -> PoB Draft: Bind proof creation to durable production evidence storage, verifier identity, evidence hash, timestamp, and source-system provenance.

bound=false
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • lib/agent-os/trust-proof-layer.ts
  • app/api/agent-os/trust-proof-layer/route.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Production evidence store reference and retention policy
  • Evidence owner, verifier identity, hash, source system, and timestamp
  • Proof that unverified evidence cannot create a production PoB draft
Missing production evidence
  • Durable production evidence storage
  • Authenticated verifier identity
  • Evidence source-system provenance export
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-verified-evidence-source
  • wcn-proof-external-binding-verified-evidence-source-binding
  • trust-proof-reliability-wcn-prod-proof-verified-evidence-source
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
02 · pob_review_queue_submission · db_write

PoB review queue submission

Submit Human Gate evidence for PoB Draft -> Review Decision: Bind PoB review items to authenticated reviewer assignment, conflict checks, deadlines, and self-review blocking.

bound=false
Upstream refs
  • lib/agent-os/trust-proof-layer-store.ts
  • app/api/agent-os/trust-proof-layer/assessments/[assessmentId]/review/route.ts
  • lib/agent-os/reviewer-identity.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Production PoB queue URL or queue id
  • Reviewer identity, deadline, evidence scope, and conflict checks
  • Self-approval block evidence for runtime agents and claimants
Missing production evidence
  • Authenticated production PoB review queue
  • Reviewer assignment and deadline records
  • Conflict-of-interest enforcement evidence
Validation
  • npm run check:agent-os-proof
  • POST /api/agent-os/trust-proof-layer/assessments/:assessmentId/review
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-pob-review-queue
  • wcn-proof-external-binding-pob-review-queue-binding
  • trust-proof-reliability-wcn-prod-proof-pob-review-queue
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
03 · scoring_policy_submission · db_write

Production scoring policy submission

Submit Human Gate evidence for Evidence -> Risk / Value Score: Bind anti-gaming thresholds, score weights, model/rule provenance, and versioned scoring policy to governance review.

bound=false
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • lib/modules/risk/anti-gaming.ts
  • lib/agent-os/evolution-ledger.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Scoring policy version and policy owner
  • Anti-gaming threshold review and rollback plan
  • Model, rule, reviewer, and Evolution Ledger provenance
Missing production evidence
  • Versioned production scoring policy
  • Approved anti-gaming threshold change record
  • Score provenance and rollback evidence
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-evolution
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-scoring-policy
  • wcn-proof-external-binding-scoring-policy-binding
  • trust-proof-reliability-wcn-prod-proof-scoring-policy
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
04 · dispute_resolution_ops_submission · db_write

Dispute resolution operations submission

Submit Human Gate evidence for PoB Record -> Dispute / Freeze / Release: Bind dispute intake, freeze, supplement, resolution, and appeal paths to authenticated operators before proof effects can continue.

bound=false
Upstream refs
  • lib/agent-os/trust-proof-layer.ts
  • lib/agent-os/decision-ledger.ts
  • app/api/agent-os/decision-ledger/route.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Dispute intake channel and dispute owner
  • Freeze, release, supplement, and appeal procedure
  • Evidence that settlement, reputation, and chain effects pause during disputes
Missing production evidence
  • Production dispute intake and freeze authority
  • Appeal and supplement workflow
  • Downstream effect pause enforcement proof
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-governance
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-dispute-resolution
  • wcn-proof-external-binding-dispute-resolution-ops-binding
  • trust-proof-reliability-wcn-prod-proof-dispute-resolution
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
05 · settlement_eligibility_submission · funds

Settlement eligibility submission

Submit Human Gate evidence for Verified PoB -> Settlement Eligibility: Bind verified PoB, Human Gate approval, no-open-dispute checks, and treasury authority without moving funds inside the proof layer.

bound=false
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/settlement/preview/route.ts
  • lib/agent-os/production-readiness.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Settlement eligibility owner and treasury authority boundary
  • Verified PoB, approved Human Gate, and no-open-dispute evidence
  • Evidence export format for downstream settlement review
Missing production evidence
  • Production settlement eligibility gate
  • Treasury authority boundary record
  • No-open-dispute eligibility proof
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-production-readiness
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-settlement-eligibility
  • wcn-proof-external-binding-settlement-eligibility-binding
  • trust-proof-reliability-wcn-prod-proof-settlement-eligibility
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
06 · reputation_signal_submission · db_write

Reputation signal submission

Submit Human Gate evidence for Verified PoB -> Reputation Signal: Bind reputation writes to approved proof records, attribution shares, rollback path, and disputed-signal correction evidence.

bound=false
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/reputation/route.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
Human Gate inputs
  • Reputation writer identity and reputation schema version
  • Approved proof record and attribution-share evidence
  • Rollback and correction path for disputed reputation signals
Missing production evidence
  • Production reputation writer
  • Approved proof-to-reputation mapping
  • Disputed signal correction procedure
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer/production-proof-controls
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-reputation-signal
  • wcn-proof-external-binding-reputation-signal-binding
  • trust-proof-reliability-wcn-prod-proof-reputation-signal
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
07 · chain_anchor_request_submission · chain_write

Chain anchor request submission

Submit Human Gate evidence for Verified PoB -> Chain Anchor Request: Bind hash-only proof anchor requests to Human Gate approval and the Blockchain Anchoring Module without exposing raw evidence.

bound=false
Upstream refs
  • lib/agent-os/trust-proof-reliability-readiness.ts
  • lib/agent-os/blockchain-anchoring.ts
  • app/api/agent-os/blockchain-anchoring/route.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
Human Gate inputs
  • Hash-only proof payload and off-chain evidence pointer
  • Human Gate approval for chain anchor request handoff
  • Raw-sensitive-evidence-off-chain verification
Missing production evidence
  • Production chain anchor request handoff
  • Approved chain anchor Human Gate decision
  • Off-chain evidence pointer verification
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-chain
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-chain-anchor-request
  • wcn-proof-external-binding-chain-anchor-request-binding
  • trust-proof-reliability-wcn-prod-proof-chain-anchor-request
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
08 · public_proof_claim_submission · external_api

Public proof claim submission

Submit Human Gate evidence for Verified PoB -> Public Proof Claim: Bind public proof publication to approved claim language, privacy review, legal boundary, and reviewer identity.

bound=false
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/proof-publication/[pobId]/receipt-draft/route.ts
  • lib/agent-os/decision-ledger.ts
  • lib/agent-os/production-proof-external-binding-evidence.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Approved public claim language and reviewer identity
  • Privacy, legal, and evidence boundary review
  • Record of what can be public and what remains private
Missing production evidence
  • Public proof publication approval
  • Claim-language and privacy review evidence
  • Public/private evidence boundary record
Validation
  • npm run check:agent-os-proof
  • npm run check:public-claims
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
  • GET /api/agent-os/trust-proof-layer/production-proof-human-gate-submission
Reliability refs
  • wcn-prod-proof-public-claim-review
  • wcn-proof-external-binding-public-proof-claim-binding
  • trust-proof-reliability-wcn-prod-proof-public-claim-review
No production effects
  • humanGateProductionSubmissionReady=false
  • productionReadyClaimAllowed=false
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • productionSideEffectExecuted=false
source=lib/agent-os/production-proof-human-gate-submission.ts · localOnly=true · readOnly=true · productionBound=false · humanGateProductionSubmissionReady=false · productionReadyClaimAllowed=false · publicProofPublished=false · realFundsTouched=false · chainAnchorRequested=false · productionSideEffectExecuted=false

Production proof external binding evidence

This local matrix joins proof controls and reliability readiness into the production evidence Human Gate must see before evidence storage, review queues, scoring, settlement, reputation, chain requests, or public claims can be bound.

External binding evidence API
verified_evidence_source_binding · db_write

Verified evidence source external binding

Bind proof creation to durable production evidence storage, verifier identity, evidence hash, timestamp, and source-system provenance.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • lib/agent-os/trust-proof-layer.ts
  • app/api/agent-os/trust-proof-layer/route.ts
Human Gate inputs
  • Production evidence store reference and retention policy
  • Evidence owner, verifier identity, hash, source system, and timestamp
  • Proof that unverified evidence cannot create a production PoB draft
Missing production evidence
  • Durable production evidence storage
  • Authenticated verifier identity
  • Evidence source-system provenance export
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.evidenceHash
  • assessment.evidenceVerified
  • riskFlags.missing_verified_evidence
Required production binding
  • Bind evidence packets to durable production evidence storage.
  • Record evidence owner, verifier, hash, timestamp, and source system.
  • Reject PoB draft creation when the production evidence source is missing or unverified.
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-verified-evidence-source
  • trust-proof-reliability-wcn-prod-proof-verified-evidence-source
  • Evidence Packet -> PoB Draft
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
pob_review_queue_binding · db_write

PoB review queue external binding

Bind PoB review items to authenticated reviewer assignment, conflict checks, deadlines, and self-review blocking.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/trust-proof-layer-store.ts
  • app/api/agent-os/trust-proof-layer/assessments/[assessmentId]/review/route.ts
  • lib/agent-os/reviewer-identity.ts
Human Gate inputs
  • Production PoB queue URL or queue id
  • Reviewer identity, deadline, evidence scope, and conflict checks
  • Self-approval block evidence for runtime agents and claimants
Missing production evidence
  • Authenticated production PoB review queue
  • Reviewer assignment and deadline records
  • Conflict-of-interest enforcement evidence
Validation
  • npm run check:agent-os-proof
  • POST /api/agent-os/trust-proof-layer/assessments/:assessmentId/review
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.status
  • assessment.reviews
  • assessment.requiresHumanGate
Required production binding
  • Persist PoB review items in an authenticated production queue.
  • Assign reviewer identity, deadline, evidence scope, and conflict checks.
  • Block runtime agents from approving their own PoB drafts.
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-pob-review-queue
  • trust-proof-reliability-wcn-prod-proof-pob-review-queue
  • PoB Draft -> Review Decision
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
scoring_policy_binding · db_write

Production scoring policy external binding

Bind anti-gaming thresholds, score weights, model/rule provenance, and versioned scoring policy to governance review.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • lib/modules/risk/anti-gaming.ts
  • lib/agent-os/evolution-ledger.ts
Human Gate inputs
  • Scoring policy version and policy owner
  • Anti-gaming threshold review and rollback plan
  • Model, rule, reviewer, and Evolution Ledger provenance
Missing production evidence
  • Versioned production scoring policy
  • Approved anti-gaming threshold change record
  • Score provenance and rollback evidence
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-evolution
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • riskScore
  • riskLevel
  • riskFlags
  • valueScoreDraft
Required production binding
  • Version production scoring rules and anti-gaming thresholds.
  • Bind scoring changes to Evolution Ledger and Human Gate where high impact.
  • Record model, rule, and reviewer provenance for every production score.
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-scoring-policy
  • trust-proof-reliability-wcn-prod-proof-scoring-policy
  • Evidence -> Risk / Value Score
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
dispute_resolution_ops_binding · db_write

Dispute resolution operations external binding

Bind dispute intake, freeze, supplement, resolution, and appeal paths to authenticated operators before proof effects can continue.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/trust-proof-layer.ts
  • lib/agent-os/decision-ledger.ts
  • app/api/agent-os/decision-ledger/route.ts
Human Gate inputs
  • Dispute intake channel and dispute owner
  • Freeze, release, supplement, and appeal procedure
  • Evidence that settlement, reputation, and chain effects pause during disputes
Missing production evidence
  • Production dispute intake and freeze authority
  • Appeal and supplement workflow
  • Downstream effect pause enforcement proof
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-governance
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.status=frozen
  • review.outcome=freeze
  • assessment_review_blocked
Required production binding
  • Bind dispute intake, evidence supplement, freeze, and resolution actions to authenticated operators.
  • Record dispute reason, affected PoB ids, reviewers, and appeal path.
  • Prevent settlement, reputation, and chain effects while a dispute is open.
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-dispute-resolution
  • trust-proof-reliability-wcn-prod-proof-dispute-resolution
  • PoB Record -> Dispute / Freeze / Release
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
settlement_eligibility_binding · funds

Settlement eligibility external binding

Bind verified PoB, Human Gate approval, no-open-dispute checks, and treasury authority without moving funds inside the proof layer.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/settlement/preview/route.ts
  • lib/agent-os/production-readiness.ts
Human Gate inputs
  • Settlement eligibility owner and treasury authority boundary
  • Verified PoB, approved Human Gate, and no-open-dispute evidence
  • Evidence export format for downstream settlement review
Missing production evidence
  • Production settlement eligibility gate
  • Treasury authority boundary record
  • No-open-dispute eligibility proof
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-production-readiness
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.settlementRequested
  • assessment.humanGateVerified
  • source.realFundsTouched=false
Required production binding
  • Require verified PoB, approved Human Gate, and no open dispute before settlement eligibility.
  • Bind eligibility to treasury authority without touching funds in the proof layer.
  • Export eligibility evidence for downstream settlement review.
Blocking reasons
  • funds requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-settlement-eligibility
  • trust-proof-reliability-wcn-prod-proof-settlement-eligibility
  • Verified PoB -> Settlement Eligibility
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
reputation_signal_binding · db_write

Reputation signal external binding

Bind reputation writes to approved proof records, attribution shares, rollback path, and disputed-signal correction evidence.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/reputation/route.ts
  • lib/agent-os/trust-proof-reliability-readiness.ts
Human Gate inputs
  • Reputation writer identity and reputation schema version
  • Approved proof record and attribution-share evidence
  • Rollback and correction path for disputed reputation signals
Missing production evidence
  • Production reputation writer
  • Approved proof-to-reputation mapping
  • Disputed signal correction procedure
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer/production-proof-controls
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.status=approved
  • riskLevel
  • attribution.shareBps
Required production binding
  • Bind reputation updates to approved proof records and attribution shares.
  • Prevent reputation writes from unverified, disputed, or self-reviewed proofs.
  • Record rollback and correction path for disputed reputation signals.
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-reputation-signal
  • trust-proof-reliability-wcn-prod-proof-reputation-signal
  • Verified PoB -> Reputation Signal
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
chain_anchor_request_binding · chain_write

Chain anchor request external binding

Bind hash-only proof anchor requests to Human Gate approval and the Blockchain Anchoring Module without exposing raw evidence.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/trust-proof-reliability-readiness.ts
  • lib/agent-os/blockchain-anchoring.ts
  • app/api/agent-os/blockchain-anchoring/route.ts
Human Gate inputs
  • Hash-only proof payload and off-chain evidence pointer
  • Human Gate approval for chain anchor request handoff
  • Raw-sensitive-evidence-off-chain verification
Missing production evidence
  • Production chain anchor request handoff
  • Approved chain anchor Human Gate decision
  • Off-chain evidence pointer verification
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-chain
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.chainAnchorRequested
  • source.chainAnchored=false
  • humanGateDecisionId
Required production binding
  • Generate only hash-based chain anchor requests after verified proof review.
  • Require Human Gate approval before sending requests to the chain anchoring module.
  • Keep raw sensitive evidence off-chain and preserve the off-chain evidence pointer.
Blocking reasons
  • chain_write requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-chain-anchor-request
  • trust-proof-reliability-wcn-prod-proof-chain-anchor-request
  • Verified PoB -> Chain Anchor Request
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
public_proof_claim_binding · external_api

Public proof claim external binding

Bind public proof publication to approved claim language, privacy review, legal boundary, and reviewer identity.

blocked_missing_human_gate
Upstream refs
  • lib/agent-os/production-proof-controls.ts
  • app/api/proof-publication/[pobId]/receipt-draft/route.ts
  • lib/agent-os/decision-ledger.ts
Human Gate inputs
  • Approved public claim language and reviewer identity
  • Privacy, legal, and evidence boundary review
  • Record of what can be public and what remains private
Missing production evidence
  • Public proof publication approval
  • Claim-language and privacy review evidence
  • Public/private evidence boundary record
Validation
  • npm run check:agent-os-proof
  • npm run check:public-claims
  • GET /api/agent-os/trust-proof-layer/production-external-binding-evidence
Local signals
  • assessment.publicProofRequested
  • source.publicProofPublished=false
  • riskFlags.high_impact_without_human_gate
Required production binding
  • Bind public proof publication to approved claim language and reviewer identity.
  • Record what can be public, what remains private, and the proof hash boundary.
  • Block public claims when legal, privacy, evidence, or Human Gate evidence is missing.
Blocking reasons
  • external_api requires an approved Human Gate decision id.
Reliability refs
  • wcn-prod-proof-public-claim-review
  • trust-proof-reliability-wcn-prod-proof-public-claim-review
  • Verified PoB -> Public Proof Claim
False production boundary
prismaProofQueueBound=false
productionScoringBound=false
settlementEligibilityBound=false
reputationWriteEnabled=false
publicProofPublished=false
realFundsTouched=false
chainAnchorRequested=false
eventOutboxProductionWrite=false
productionSideEffectExecuted=false
source=lib/agent-os/production-proof-external-binding-evidence.ts · localOnly=true · readOnly=true · productionBound=false · productionProofExternalBindingsReady=false · publicProofPublished=false · realFundsTouched=false · chainAnchorRequested=false · productionSideEffectExecuted=false

Proof reliability readiness

Each governed proof output is checked by the Platform Reliability Kernel before it can become a production side effect.

verified_evidence_source · db_write

Evidence Packet -> PoB Draft

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-verified-evidence-source
  • policyBound=true
  • outboxTopic=proof.evidence_source.bind
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
pob_review_queue · db_write

PoB Draft -> Review Decision

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-pob-review-queue
  • policyBound=true
  • outboxTopic=proof.review_queue.enqueue
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
scoring_policy · db_write

Evidence -> Risk / Value Score

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-scoring-policy
  • policyBound=true
  • outboxTopic=proof.scoring_policy.version
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
dispute_resolution_ops · db_write

PoB Record -> Dispute / Freeze / Release

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-dispute-resolution
  • policyBound=true
  • outboxTopic=proof.dispute.freeze
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
settlement_eligibility_gate · funds

Verified PoB -> Settlement Eligibility

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=funds
Blocking reasons
  • funds requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-settlement-eligibility
  • policyBound=true
  • outboxTopic=proof.settlement_eligibility.release
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
reputation_signal_output · db_write

Verified PoB -> Reputation Signal

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • db_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-reputation-signal
  • policyBound=true
  • outboxTopic=proof.reputation.signal.write
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
chain_anchor_request_gate · chain_write

Verified PoB -> Chain Anchor Request

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=chain_anchor
Blocking reasons
  • chain_write requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-chain-anchor-request
  • policyBound=true
  • outboxTopic=proof.chain_anchor.request
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
public_proof_claim_review · external_api

Verified PoB -> Public Proof Claim

Route the request to Human Gate and attach the approved decision id before local receipt creation.

blocked_missing_human_gate
Readiness status
  • receipt=blocked_by_policy
  • policy=blocked
  • requiredDecision=external_write
Blocking reasons
  • external_api requires an approved Human Gate decision id.
Satisfied controls
  • auditSink=TrustProofReliabilityReadiness.audit
  • idempotencyKey=proof-readiness-wcn-prod-proof-public-claim-review
  • policyBound=true
  • outboxTopic=proof.public_claim.publish
  • rollbackPlan provided
No production effects
  • publicProofPublished=false
  • realFundsTouched=false
  • chainAnchorRequested=false
  • eventOutboxProductionWrite=false
  • productionSideEffectExecuted=false
source=lib/agent-os/trust-proof-reliability-readiness.ts · localOnly=true · productionBound=false

Production proof controls

wcn-agent-os-production-proof-controls-local-v1 · Governed outputs: 8
verified_evidence_source

Verified evidence source binding

Evidence Packet -> PoB Draft

bound=false
Local signals
  • assessment.evidenceHash
  • assessment.evidenceVerified
  • riskFlags.missing_verified_evidence
Required production binding
  • Bind evidence packets to durable production evidence storage.
  • Record evidence owner, verifier, hash, timestamp, and source system.
  • Reject PoB draft creation when the production evidence source is missing or unverified.
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer
pob_review_queue

PoB review queue

PoB Draft -> Review Decision

bound=false
Local signals
  • assessment.status
  • assessment.reviews
  • assessment.requiresHumanGate
Required production binding
  • Persist PoB review items in an authenticated production queue.
  • Assign reviewer identity, deadline, evidence scope, and conflict checks.
  • Block runtime agents from approving their own PoB drafts.
Validation
  • npm run check:agent-os-proof
  • POST /api/agent-os/trust-proof-layer/assessments/:assessmentId/review
scoring_policy

Production scoring policy

Evidence -> Risk / Value Score

bound=false
Local signals
  • riskScore
  • riskLevel
  • riskFlags
  • valueScoreDraft
Required production binding
  • Version production scoring rules and anti-gaming thresholds.
  • Bind scoring changes to Evolution Ledger and Human Gate where high impact.
  • Record model, rule, and reviewer provenance for every production score.
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-evolution
dispute_resolution_ops

Dispute resolution operations

PoB Record -> Dispute / Freeze / Release

bound=false
Local signals
  • assessment.status=frozen
  • review.outcome=freeze
  • assessment_review_blocked
Required production binding
  • Bind dispute intake, evidence supplement, freeze, and resolution actions to authenticated operators.
  • Record dispute reason, affected PoB ids, reviewers, and appeal path.
  • Prevent settlement, reputation, and chain effects while a dispute is open.
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-governance
settlement_eligibility_gate

Settlement eligibility gate

Verified PoB -> Settlement Eligibility

bound=false
Local signals
  • assessment.settlementRequested
  • assessment.humanGateVerified
  • source.realFundsTouched=false
Required production binding
  • Require verified PoB, approved Human Gate, and no open dispute before settlement eligibility.
  • Bind eligibility to treasury authority without touching funds in the proof layer.
  • Export eligibility evidence for downstream settlement review.
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-production-readiness
reputation_signal_output

Reputation signal output

Verified PoB -> Reputation Signal

bound=false
Local signals
  • assessment.status=approved
  • riskLevel
  • attribution.shareBps
Required production binding
  • Bind reputation updates to approved proof records and attribution shares.
  • Prevent reputation writes from unverified, disputed, or self-reviewed proofs.
  • Record rollback and correction path for disputed reputation signals.
Validation
  • npm run check:agent-os-proof
  • GET /api/agent-os/trust-proof-layer/production-proof-controls
chain_anchor_request_gate

Chain anchor request gate

Verified PoB -> Chain Anchor Request

bound=false
Local signals
  • assessment.chainAnchorRequested
  • source.chainAnchored=false
  • humanGateDecisionId
Required production binding
  • Generate only hash-based chain anchor requests after verified proof review.
  • Require Human Gate approval before sending requests to the chain anchoring module.
  • Keep raw sensitive evidence off-chain and preserve the off-chain evidence pointer.
Validation
  • npm run check:agent-os-proof
  • npm run check:agent-os-chain
public_proof_claim_review

Public proof claim review

Verified PoB -> Public Proof Claim

bound=false
Local signals
  • assessment.publicProofRequested
  • source.publicProofPublished=false
  • riskFlags.high_impact_without_human_gate
Required production binding
  • Bind public proof publication to approved claim language and reviewer identity.
  • Record what can be public, what remains private, and the proof hash boundary.
  • Block public claims when legal, privacy, evidence, or Human Gate evidence is missing.
Validation
  • npm run check:agent-os-proof
  • npm run check:public-claims

Recent assessments

wcn-agent-os-trust-proof-local-v1
No trust proof assessments recorded yet.