Ship the safe path first.Where we are, what ships next, and what this public site refuses—then the R0–R20 + M5 gates with proof you can open.
Where we are
R12–R20 local foundation implemented
Framework boundaries, A2A/ACP transport, Model Atlas telemetry, private projections, guided onboarding, Jira, trusted devices, mobile approvals, and multi-authority queues now have tested local contract boundaries.
What's next
Production bindings are next
The next gates bind real custody, external peers and tenants, native devices, authenticated sinks, independent review, and production backup/recovery. Local execution remains the safe default; the local R12–R20 contract foundations are already implemented and tested.
What we refuse
Public-safe limits stay firm
No secret-holding Pages. No model self-approval dressed as independent review. No unpublished ITSM science, credentials, or confidential transcripts on this site.
Protocol kernel, evidence gates, local MCP, and public-boundary checks.
complete
GitHub contract, Knowledge Hub projections, and read-only discovery CLI.
shipped
Normalize transcripts, compare model intakes, dispatch bounded round-table questions, and queue human decisions.
shipped
Freeze post-H4 envelopes, run golden fixtures, and report provider limitations explicitly.
complete
Notion, Slack, archive lifecycle, MCP apply/rollback, and provider-neutral adapter contracts.
implementedThe harness is a provider-neutral execution layer over local CLIs and adapters. It records receipts, redacts outputs, checkpoints durable runs, and bridges guarded MCP/A2A envelopes; it queues the result for a human and never turns model consensus into approval.
Run Grok CLI, Claude Code, Gemini/Antigravity, and ChatGPT/Codex through isolated adapters with receipts and budgets.
implemented (core)Normalize responses, support the desktop round-table chat, detect agreement and conflict, bind evidence, and produce an advisory Overseer packet.
implemented (core)Add checkpoints, resume, cancellation, idempotent retries, failure isolation, and cost-aware escalation.
implemented (core)Formalize provider receipts, capability discovery, optional LiteLLM routing, and guarded MCP/A2A bridge envelopes.
implemented (core)
R11Controlled live routing, budgets, receipts, retries, and local fallback.
planned · approval-gated
R12Restricted framework boundaries, worker traces, permissions, and conformance fixtures.
implemented · SDK/network isolation pending
R13A2A/ACP transport with Ed25519 trust, runtime custody, deadlines, replay, and cancellation.
implemented · remote production peer pending
R14Model Atlas observations, communication profiles, scan catalogs, and digest-only telemetry.
implemented · independent measurement pending
R15Approval-gated private projections, durable replay, reconciliation, rollback, and encrypted state.
implemented · production custody/backup pending
R16Guided onboarding, scoped workspaces, digestible-item catalogs, and consent-gated source extraction.
implemented · broader provider semantics pending
R17Jira request plans, runtime custody, durable replay, conflicts, and rollback/rebuild.
implemented · live tenant pending
R18Trusted-device lifecycle, enrollment/step-up proofs, delegation, and recovery drills.
implemented · native custody/attestation pending
R19Offline-safe mobile votes and RP-bound authenticator assertion boundaries.
implemented · native mobile UX pending
R20Durable any/all/quorum queues, scheduler, delivery, retention, and mobile drill.
implemented · authenticated sinks/review pending
R21Deferred institutional evidence workflows for government, insurance, education, and regulated sectors.
deferred · custom build
M5Hosted tenancy, billing, deletion, migration, support, and abuse controls.
future · separate product gate
Humans author the rules; Overseer may execute clean matches at scale. Questionable or failed matches notify and enter the human queue. Silence is never acceptance. See ADR-003.
Standing policy
Human-authored rules with risk ceiling, scope, and hashed snapshot at apply time.
Comparison packet
Multi-model intakes with provenance—input to evaluate, never silent authority.
Notify + queue
Grey-zone and hard fails interrupt a human. Delivery channels are projections only.
Canonical records, policy gates, local MCP, public-boundary checks.
CompleteGitHub contract, Knowledge Hub projections, and read-only discovery CLI.
CompleteTranscript normalization, comparison packets, assignment, provenance, redaction, and human approval queue.
ShippedOpt-in Notion projection, then Slack channels, threads, notifications, and signed commands.
Implemented (guarded)Low-RAM local bookshelf, bounded archive watcher, relevance filtering, retention/export, recoverable delete/restore/purge, MCP discovery, dry-run configuration plans, backup and rollback.
Implemented (core)Provider-neutral receipts, readiness-aware model capability registry, comparison routing, and local-model fallback boundary.
Implemented (guarded)Local fan-out, comparison, durable runs, bounded budgets, receipts, and optional protocol bridges across the supported model families.
Implemented (guarded)