{ "automatic_promotion": false, "created_at": "2026-11-11T06:22:45.718333+00:00", "execution_authority": false, "existing_profile": { "path": "docs/standards/osaia-safe-reverification/HITL-AUTHORITY-EFFECT-PROFILE.md", "repository": "CSOAI-ORG/councilof-ai", "revision": "bad799cfdc97bce6e021a2d528d0546bbfa2af2c", "sha256": "551c8d50171e591a5fff97ddf56f7f45da171f3d4a03cd9ab3e3bf8e44cd65c3" }, "gate_order": [ { "acceptance": [ "No blanket programme-free claim while charges are unknown", "No GPU or paid job without explicit budget approval", "Document retained run costs and failures, including the separate completed CPU job" ], "depends_on": [], "evidence": [ "compute-boundary.json" ], "id": "G0", "next_action": "Choose research demonstration versus a bounded read-only pilot; approve an explicit task and budget before additional compute.", "owner": "Existing release/spend owner", "priority": 0, "state": "HELD_FOR_OWNER_DECISION", "title": "Scope and spend boundary" }, { "acceptance": [ "Expected source/policy/tenant identity comes from the authenticated host", "Check current access, expiry, revocation and source generation at use", "Unknown or changed runtime/dependency context is held", "Public repository-byte match is not relabelled serving-process identity" ], "depends_on": [ "G0" ], "evidence": [ "source-references.json" ], "id": "G1", "next_action": "Connect the existing source/access adapter to the exact serving process and tenant context; do not let the caller choose expected trust pins.", "owner": "Existing source/access/runtime owners; preserve #4180 receiver", "priority": 1, "state": "PARTIAL_RESEARCH_ONLY", "title": "Trusted source, runtime and access binding" }, { "acceptance": [ "Stable individual subject from a real identity provider/session", "Required identity and role assurance chosen for the proposed task", "Role/tenant grants are narrow, current and revocable", "Human ceremony is completed by the person, not an agent or fixture" ], "depends_on": [ "G0" ], "evidence": [ "human-gate-observation.json", "existing-profile-pin.json" ], "id": "G2", "next_action": "Use the existing provider/session integration for a real person and separately approve their narrowly scoped role; do not substitute a shared API token or caller-entered label.", "owner": "Existing identity and Human Council owners", "priority": 1, "state": "NOT_ESTABLISHED", "title": "Authenticated individual and reviewed role" }, { "acceptance": [ "Preserve proposal, approval, invocation, effect and verification as distinct records", "Executor rejects changed scope, expiry, revocation and replay", "Independent observer checks actual effect rather than API success", "Separate recipient reproduces verification using the disclosed exact artifacts", "Synthetic/test-key evidence remains clearly separate from actual human approval" ], "depends_on": [ "G1", "G2" ], "evidence": [ "existing-profile-pin.json", "human-gate-observation.json" ], "id": "G3", "next_action": "Approve one exact harmless action in the actual runtime; bind the action digest, scope, source/authority epochs and expiry; independently read back its effect.", "owner": "Existing executor, human reviewer, observer and release owners", "priority": 2, "state": "NOT_ESTABLISHED", "title": "One exact harmless approval-to-effect journey" }, { "acceptance": [ "Do not duplicate the other active model/queue work", "No model winner from successful software or arithmetic-contract tests", "Preserve the approximately 75 percentage-point old-bank tail error", "Use an agreed task-specific quality/abstention gate, not an invented universal target", "Evaluation records remain excluded from training" ], "depends_on": [ "G0" ], "evidence": [ "source-references.json", "dataset-split-observation.json" ], "id": "G4", "next_action": "Finish the existing frozen task-contract experiment, count invalid outputs and quota failures, freeze the selected candidate, then test a new task sample.", "owner": "Active task-contract and model/evaluation owners, #4176", "priority": 2, "state": "UNDER_ACTIVE_EVALUATION", "title": "Task capability and tail-failure qualification" }, { "acceptance": [ "EAT discovery or quiz participation does not automatically authorise training", "Separate training, validation, test and future acceptance sets", "Model/data notices survive every redistribution surface", "Storage access, backup, restore, deletion and exposure tests are documented", "No private records published as proof of a passing workflow" ], "depends_on": [ "G0" ], "evidence": [ "source-references.json" ], "id": "G5", "next_action": "Qualify only consented data with documented rights and retention/deletion rules; exercise saved-copy restore and deletion in an authorised test workspace.", "owner": "Existing data/privacy/storage and Academy owners", "priority": 2, "state": "PARTIAL_RESEARCH_ONLY", "title": "Data rights, privacy and storage lifecycle" }, { "acceptance": [ "No protected-branch merge or approval is inferred from this handover", "Existing failed browser/admin-blocked cases stay explicit, not bypassed", "Account quota, storage and service failure have bounded user-visible recovery", "Current source and deployed version agree; rollback test is retained", "Research mirrors are dated or explicitly synchronized by an approved release operation" ], "depends_on": [ "G1", "G4", "G5" ], "evidence": [ "source-references.json" ], "id": "G6", "next_action": "Reconcile owner-held source changes, qualify the exact accepted source/serving revision, test failure recovery and rollback, and retain logs with a named support owner.", "owner": "Existing canonical source and QA/release owners", "priority": 3, "state": "OWNER_ACCEPTANCE_REQUIRED", "title": "Canonical source, operations and rollback" }, { "acceptance": [ "User is not a test identity controlled by the same author", "Protocol and success criteria are stated before acceptance", "Attempted/failed/invalid tasks remain in denominators", "Useful outcome, limitations and support path are confirmed by the recipient" ], "depends_on": [ "G3", "G4", "G5" ], "evidence": [ "source-references.json" ], "id": "G7", "next_action": "Have one consenting external recipient complete the defined end-user journey and independently reproduce an output; record failures and actual value without inventing adoption.", "owner": "Named consenting pilot recipient and existing project owner", "priority": 3, "state": "NOT_EVIDENCED", "title": "Outside recipient and use-case acceptance" }, { "acceptance": [ "No automatic production deployment, signing or GSPC admission", "No claim that all 34 axes or all industries were tested", "Human authority and independent measurement remain separate", "Follow the existing licence, security, release and correction process" ], "depends_on": [ "G3", "G6", "G7" ], "evidence": [ "source-references.json" ], "id": "G8", "next_action": "Review the exact candidate and its residual risk; publish only supported claims and submit applicable measurements through existing admission rules.", "owner": "Existing release owner and independent per-axis admission owners", "priority": 4, "state": "HELD_FOR_OWNER_DECISION", "title": "Release and optional measurement admission" } ], "gspc_admitted": false, "historical_acceptance_paths": [ "cross-platform-20261111/release.json", "cross-platform-20261111/release-binding/release.json", "release-quality/file-roundtrip-evidence/release.json", "integration-specialist-review/presentation-v1/release.json" ], "new_paid_compute_authorised": false, "pilot_status": "HELD_PENDING_OWNER_AND_HUMAN_ACCEPTANCE", "production_status": "NOT_ESTABLISHED", "purpose": "Planning and handover only; not a permission, admission or new authority system.", "research_status": "EXISTING_RESEARCH_EVIDENCE_RECORDED", "scheduled": false, "schema": "csoai.meok.completion-handover/1", "source_revision": "6aba2e0aae0aa1f64e0a7340ecbe664cefc8c666", "state_interpretation": "Recorded tests are evidence of their stated scope, never individual identity, a real human event, independent organisational verification or permission." }