{
  "artifacts": {
    "aggregate_json": "https://darkoza.com/science/reports/operational-autonomy-recovery/audit.json",
    "public_api": "https://darkoza.com/science-api/v1/experiments/operational-autonomy-recovery.json",
    "report_html": "https://darkoza.com/science/reports/operational-autonomy-recovery/report.html",
    "report_markdown": "https://darkoza.com/science/reports/operational-autonomy-recovery/report.md"
  },
  "decision": {
    "model_weights_changed": false,
    "production_code_changed_by_this_audit": false,
    "production_graph_changed": false,
    "production_promotion": "HOLD",
    "reason": "No verified-positive operational examples exist, and the source-sync/worktree path is not operational under the restricted service identity.",
    "service_configuration_changed": false
  },
  "evidence_status": "privacy-minimized operational reliability audit",
  "id": "operational-autonomy-recovery-2026-10-29",
  "limitations": [
    "This is a rule-based audit of structured cycle records, not a model-training result.",
    "The completion rule reuses structured fields emitted by the operational runner, so it is corroborating evidence, not fully independent ground truth.",
    "No verified-positive outcomes were observed; sensitivity and real-world decision improvement are therefore not estimable.",
    "Only aggregate counts are published. Raw traces, file paths, prompts, command output, diffs, request identifiers, and secrets are excluded."
  ],
  "promotion_gate": {
    "current_gate_met": false,
    "independently_adjudicated_negative_examples_minimum": 30,
    "independently_adjudicated_positive_examples_minimum": 30,
    "maximum_context_regression_percentage_points": 1,
    "minimum_absolute_gain_percentage_points": 5,
    "operational_contexts_minimum": 3,
    "zero_unsupported_success_claims": true
  },
  "published_at": "2026-10-29",
  "recommended_recovery": [
    "Restore least-privilege read access to the self-hosted source of truth for the isolated service identity.",
    "Run from a service-owned source clone/cache instead of granting broad write access to a human-owned repository's .git directory.",
    "Verify fetch and temporary worktree create/remove under the exact service identity before enabling unattended cycles.",
    "Move verification cleanup into an unconditional cleanup path, and keep ignored-artifact, content-fingerprint, and rollback gates enforced.",
    "Only evaluate procedural-graph promotion after independently adjudicated positive and negative operational examples exist."
  ],
  "results": {
    "before_after_head_equal": 664,
    "explicit_progress_true": 0,
    "head_evidence_missing": 5,
    "returncode_zero_without_complete_evidence_bundle": 401,
    "temporal_holdout": {
      "cycles": 134,
      "method": "final 20 percent of records in chronological order; no model fitting",
      "outcomes_without_progress_flag": 134,
      "returncode_zero": 102,
      "verified_completions": 0
    },
    "terminal_status_counts": {
      "free_provider_failure": 139,
      "local_model_failure": 124,
      "local_model_unavailable": 5,
      "no_verified_progress": 327,
      "verification_failure": 2,
      "workspace_changed_during_verification": 72
    },
    "verification_lists_missing_or_empty": 595,
    "verification_lists_present": 74,
    "verified_completions": 0,
    "worker_returncode_zero": 401
  },
  "schema_version": "1.0",
  "scope": {
    "credentials_or_private_keys_published": false,
    "cycle_records_inspected": 669,
    "first_cycle_id": 1,
    "last_cycle_id": 669,
    "last_recorded_state_utc": "2026-10-29T05:29:49.988667Z",
    "prompts_or_messages_published": false,
    "raw_operational_traces_published": false,
    "systemd_service_active_at_check": true
  },
  "title": "Operational autonomy: verified-progress and source-isolation audit",
  "latest_cycle_addendum": {"cycle": 670, "recorded_at_utc": "2026-10-29T06:33:14.116724+00:00", "status": "NO_VERIFIED_PROGRESS", "progress": false, "worker_backend": "ollama-local", "worker_ready": true, "worker_returncode": 0, "candidate_paths": [], "verification_checks_run": 0, "consecutive_no_progress_cycles": 670, "before_after_head_equal": true, "working_tree_clean": true, "interpretation": "The model health check passed but the worker abstained without a candidate; this is not a verified completion.", "limitations": ["This cycle does not isolate model capability from prompt/context or task-difficulty effects.", "No production code, graph or model weights were changed."]},
  "verified_blockers": [
    "The automation checkout was on a feature branch although its launcher is configured to require main.",
    "The isolated service identity could read but could not write the shared repository metadata needed for fetch/worktree operations.",
    "Read-only upstream authentication probes did not succeed; no credentials were disclosed or changed.",
    "Historical post-verification mutation blocks correlate with large numbers of ignored build/install artifacts. The runner can stop at the first failed check before its final cleanup command is reached."
  ]
}