{ "allowed_definition_work": [ "Write and version-lock the manual execution log contract schema.", "Define evidence taxonomy classification rules and storage boundaries.", "Design pre-execution gate conditions as boolean assertions.", "Draft template-only log entries with null/placeholder sentinels.", "Inspect current P2V24 facts to ensure all forbidden counters are zero.", "Validate that now32_handoff.policy flags reflect the correct blocked state.", "Record DeepSeek advisory as advisory-only in non-evidence paths.", "Design control-plane validation scripts that can be run without side effects.", "Document residual risks and escalation procedures.", "Produce contract section definitions, field schemas, and invariant lists.", "Check that readiness_package_ref hash and size match the stated values.", "Ensure chapter_18_status remains 'held_only_no_ready_drafts' in any status output." ], "blocked_actions": [ "Provider job execution (any adapter, any model).", "Media generation (video, audio, images, subtitles).", "Creation of manual execution log entries with real operational evidence.", "Creation of provider or operator evidence.", "Feedback intake, repair execution, or replay execution.", "Accepted overlay writeback or operator overlay writeback.", "Canonical KG writeback or raw KG writeback.", "Outputs index mutation (any index, manifest, or evidence store).", "Production lane acceptance or production readiness claim.", "Activation of Now-33, Now-34, Now-35, or Now-36.", "Runtime branching based on work title, entity name, character name, block title, or sample text.", "Any mutation of execution_state.json.next_entrypoint.", "Changing any policy flag in now32_handoff.policy from false to true.", "Reclassifying advisory content as evidence." ], "confidence": "high", "control_plane_hardening": [ "execution_state.json.next_entrypoint must be treated as immutable; any change triggers a gate failure.", "now32_handoff.policy flags must be read-only in definition phase; a separate explicit contract is required to change them.", "All evidence directories must be write-blocked; template work must happen in a dedicated non-evidence directory.", "Checksums of P2V24 facts summary must be verified before and after any definition work to detect accidental mutations.", "Advisory consultation records must include input fingerprint, model metadata, and parse_status; they must be stored under a 'advisory/' prefix that is excluded from evidence indexing.", "The manual execution log template must carry a 'TEMPLATE_ONLY' watermark in its filename, metadata, and top-level field to prevent accidental ingestion as evidence.", "A control-plane auditor script must be runnable in dry-run mode to assert all blocked actions are still blocked.", "Any attempt to read entity/character/sample text for branching must be caught by a static analysis rule and rejected.", "DeepSeek output parsing must include a 'boundary_compliance_check' field that confirms no forbidden recommendations were made.", "A 'contract_version' field linked to this advisory's hash must be embedded in all generated artefacts for traceability." ], "evidence_taxonomy": [ { "class": "advisory", "rules": [ "Originates from non-execution consultants (e.g., DeepSeek) or internal review without operator signature.", "Must be stored in advisory-only directories never referenced as evidence.", "Metadata must include provider, model, timestamp, raw response hash, and 'advisory_only: true'.", "Forbidden in evidence stores, acceptance gates, or production indexes.", "May inform definition-phase design but may not substitute for manual/provider evidence." ] }, { "class": "template", "rules": [ "Schema definitions or empty instantiations marked with 'template_only: true'.", "All fields that would hold operational data must be null, empty, or contain placeholder sentinels ('PLACEHOLDER_...').", "May be stored in definition or contract directories, never in evidence or production lanes.", "Must pass schema validation but must not produce hashes that could be mistaken for real evidence.", "Creation does not require manual_execution_authorized." ] }, { "class": "manual", "rules": [ "Produced by a human operator following a defined log entry schema.", "Requires manual_execution_authorized == true, operator identity verified, and pre-execution gate passed.", "Must contain operator digital signature, timestamp, reference to a validated readiness package, and chain-of-custody log.", "Once created, its hash must be recorded in an immutable evidence manifest.", "Manual evidence cannot be classed as 'provider' or 'operator' without separate production acceptance." ] }, { "class": "provider", "rules": [ "Generated by external AI/ML providers via dispatched adapter payloads.", "Requires provider_execution_authorized == true and an explicit Now-33+ contract activation.", "Must include provider response raw body, parsed output, request fingerprint, and adapter metadata.", "Cannot be simulated, hand-crafted, or backfilled to look like provider evidence." ] }, { "class": "operator", "rules": [ "Signed evidence of production acceptance by the operator (final lane transition).", "Forbidden until production_lane_accepted == true and Now-36 evidence pack is fully compiled and signed.", "Must reference all upstream evidence (manual/provider) and declare production readiness explicitly.", "Cannot be created before manual/provider evidence rows exist and pass validation." ] }, { "class": "pending", "rules": [ "Placeholder for expected evidence that has been requested but not yet produced.", "May exist only in tracking indices or debt registers, not in evidence stores.", "Must carry a timeout or staleness threshold; after expiry, it must be escalated to debt.", "Pending counts must not be used to satisfy readiness gates." ] } ], "manual_execution_log_contract": { "forbidden_defaults": [ "operator_identity must not default to 'system', 'auto', or 'pipeline'", "execution_timestamp must not default to 'now' or 'current_timestamp' in template or future date in real evidence", "evidence_classification must not default to 'provider' or 'operator'", "digital_signature must not be pre-filled with a dummy signature", "manual_output_evidence must not contain pre-canned example outputs that could be mistaken for real evidence", "template_marker must not be absent or set to 'REAL' in a template" ], "real_evidence_fields": [ "operator_identity (must be non-empty, verified)", "execution_timestamp (must be a valid past timestamp)", "manual_output_evidence (must contain actual operational data)", "digital_signature (must be cryptographically verifiable)", "evidence_body_sha256 (must match actual body)" ], "required_fields": [ "log_entry_uuid", "schema_version", "contract_reference (pointer to this contract's fingerprint)", "readiness_package_sha256", "readiness_package_path", "operator_identity (verified principal)", "operator_authentication_method", "execution_timestamp (ISO8601 with timezone, null in template)", "row_reference (neutral_draft_row_id or prompt_packet_id)", "manual_action_description (free text, null in template)", "manual_output_evidence (structured output, null in template)", "evidence_classification (must be 'manual')", "evidence_body_sha256", "digital_signature (operator, format JWS or equivalent)", "chain_of_custody (array of previous hashes, empty in first entry)", "advisory_attestation (declaration that no advisory was treated as evidence)" ], "template_only_fields": [ "template_marker: must equal 'TEMPLATE_ONLY_DO_NOT_EXECUTE'", "proof_of_nondeterminism: must be null or absent in real evidence", "dry_run_output_example: must be null or absent in real evidence" ] }, "now32_contract_sections": [ { "purpose": "Define that this contract governs prompt readiness handoff and manual execution log structure, not production execution.", "section_id": "scope_and_purpose" }, { "purpose": "Classify all potential evidence types (advisory, template, manual, provider, operator, pending) and define their permissibility and storage boundaries.", "section_id": "evidence_taxonomy_rules" }, { "purpose": "Specify the exact fields, types, and constraints for a valid manual execution log entry when and if manual execution is later authorized.", "section_id": "manual_execution_log_entry_schema" }, { "purpose": "Enforce that template rows contain only schema, never filled operational data, and real evidence rows require explicit authorization.", "section_id": "template_vs_real_evidence_delimitation" }, { "purpose": "List the atomic conditions that must be true before any manual evidence creation or execution can occur, and those that must remain false.", "section_id": "pre_execution_gate_conditions" }, { "purpose": "Enumerate every side-effect action that remains forbidden under Now-32 and the policy flags that enforce them.", "section_id": "blocked_actions_and_policy_bindings" }, { "purpose": "Define operational invariants, validation checks, and immutable configuration points to prevent accidental route advancement or evidence pollution.", "section_id": "control_plane_hardening_rules" }, { "purpose": "Provide deterministic command sequences or assertions that can be run to verify control-plane health without executing provider or media work.", "section_id": "validation_and_integrity_checks" }, { "purpose": "Catalogue risks that remain even if all contract rules are respected, to inform future work and operator vigilance.", "section_id": "residual_risk_register" } ], "overall_verdict": "Now-32 control-plane contract details define strict boundaries, evidence taxonomies, and a hardening framework that keeps execution blocked while preparing traceable manual evidence artefacts for future authorized use. The advisory does not produce evidence, activate later stages, or allow provider work.", "parse_repair": { "advisory_only": true, "not_evidence_or_acceptance": true, "original_parsed_path": "consultation_parsed.json", "raw_response_path": "consultation_response.txt", "repair_type": "remove_duplicate_comma_after_validation_commands_or_checks_item", "source_parse_error": "Expecting value: line 227 column 99 (char 13443)" }, "parse_status": "pass_after_deterministic_punctuation_repair", "pre_execution_gate": { "blocked_if": [ "Now-33, Now-34, Now-35, or Now-36 activation is attempted", "execution_state.json.next_entrypoint is changed from platform_neutral_prompt_readiness_manual_execution_log_contract", "any forbidden side-effect counter increases beyond zero", "held_row_count decreases without an authorized repair contract", "advisory artifact appears in an evidence directory", "runtime branching by work title, entity name, character name, block title, or sample text is detected in control logic" ], "must_pass": [ "readiness_package_validation: all structural checks pass, no corruption detected", "readiness_package_hash_matches: stored hash equals computed hash", "debt_rows_explicit: all held/debt rows documented with unique identifiers", "operator_identity_verified: operator authentication token valid", "manual_execution_authorized flag == true", "contract_reference_valid: this contract's fingerprint matches the active version", "all_required_template_fields_defined: schema is complete and version-locked", "no_real_evidence_rows_present in template store" ], "must_remain_false": [ "provider_execution_authorized", "provider_specific_prompt_allowed", "adapter_payload_allowed", "media_generation_allowed", "production_lane_accepted", "operator_production_acceptance_claimed", "feedback_intake_allowed", "repair_execution_allowed", "replay_execution_allowed", "accepted_overlay_writeback_allowed", "operator_overlay_writeback_allowed", "canonical_kg_writeback_allowed", "raw_kg_writeback_allowed", "outputs_index_mutation_allowed", "any_evidence_classification_except_manual_active", "chapter_18_status != 'held_only_no_ready_drafts'" ] }, "residual_risks": [ "Operator may manually override control plane flags outside the defined contract process.", "Advisory content might be misinterpreted as evidence if storage boundaries are not strictly enforced by file system or access controls.", "DeepSeek advisory could inadvertently recommend actions that violate the generic/structural requirement, requiring human filtering.", "A future contract activation could bypass Now-32 hardening if the operator does not re-run validation checks before advancing.", "Readiness package could be corrupted after checksum verification but before future manual execution, if not re-verified at execution time.", "Human error during manual evidence creation could introduce data that passes schema validation but is factually incorrect.", "Supply-chain risk: if the control plane auditor script itself is compromised, false negatives could hide state mutations.", "Ghost evidence: template artefacts could be copied into evidence directories by accident during manual file operations, appearing as real evidence if naming conventions are not strict.", "Staleness: P2V24 facts may become desynchronized from actual file state if manual edits occur outside the control plane's awareness." ], "validation_commands_or_checks": [ "check_next_entrypoint: verify execution_state.json.next_entrypoint == 'platform_neutral_prompt_readiness_manual_execution_log_contract'.", "check_policy_flags: iterate over now32_handoff.policy and assert all execution-related flags are false.", "check_p2v24_counts: compare P2V24 facts summary with expected zero counts for all forbidden side effects.", "check_readiness_package_integrity: recompute sha256 of readiness_package_ref.path and compare with ref.sha256.", "check_evidence_dirs_empty: ensure no files exist in evidence/* with 'manual', 'provider', or 'operator' markers and non-zero size.", "check_template_watermark: grep for 'TEMPLATE_ONLY_DO_NOT_EXECUTE' in any template artefact.", "check_advisory_boundary: ensure every advisory file has 'advisory_only: true' and is not symlinked into evidence paths.", "check_no_active_now33to36: verify that no configuration sets current_stage beyond Now-32 and no activation contract artefacts exist.", "check_runtime_branching: scan control logic for any conditional on work_title, entity_name, character_name, block_title, or sample_text and fail if found.", "check_chapter_18_status: confirm that chapter_18_status is exactly 'held_only_no_ready_drafts'.", "check_manual_log_template_schema: validate the template against the manual_execution_log_contract schema, ensuring no real-evidence fields are populated.", "check_deepseek_consultation_rounds: confirm that for this strategy, at least two DeepSeek rounds are recorded and their outputs do not cross boundaries." ] }