Record real refresh control summary evidence

2026-06-01 07:26:37 -04:00
parent 6d3e10ace1
commit be65b20cff
3 changed files with 122 additions and 2 deletions
@@ -0,0 +1,91 @@
+---
+name: cto-hermes-real-refresh-control-replay-evidence
+tier: local
+status: validated
+owner: jp
+source: .sot/03-PROTOCOLS/CTO-HERMES-REAL-REFRESH-CONTROL-REPLAY-ISSUES.md
+created: 2026-06-01
+last_reviewed: 2026-06-01
+lifecycle_classification: planning
+core_promotion_status: not-promoted
+description: Child-local evidence that CTO-WORK-057 exposed Stage 6 real-governed refresh evidence through the Hermes CTO Harness control summary.
+---
+
+# CTO Hermes Real Refresh Control Replay Evidence
+
+Local planning SOT only. Not a Core Protocol. Not active Core authority.
+
+## Result
+
+Status: validated.
+
+Work item: `CTO-WORK-057`
+
+Hermes CTO commit:
+
+```text
+1f53307 Expose real refresh in control summary
+```
+
+Focused summary validator:
+
+```text
+python3 harness/runner/validate-webui-summary.py --json
+```
+
+Focused summary JSON:
+
+```text
+/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112443Z-run-all-fake-262885/webui-summary.json
+```
+
+Focused Stage 6 real-governed refresh comparison artifact:
+
+```text
+/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112448Z-stage6-real-governed-refresh/stage6-real-governed-refresh-comparison.json
+```
+
+Post-merge aggregate Harness command:
+
+```text
+./harness/evals/health.sh --json
+```
+
+Post-merge aggregate status:
+
+```text
+pass
+```
+
+Post-merge Stage 6 real-governed refresh comparison artifact:
+
+```text
+/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112541Z-stage6-real-governed-refresh/stage6-real-governed-refresh-comparison.json
+```
+
+## Evidence Facts
+
+- summary exposes `case_stage6_real_governed_refresh`
+- summary exposes `stage6_real_governed_refresh_comparison_path`
+- summary exposes real Stage 5 pass report replay path
+- summary exposes real Stage 5 proof replay path
+- summary exposes target repository read-only proof status
+- summary exposes candidate-default refresh eligibility separately from `runtime_default_activation`
+- summary exposes Codex blocked-lane rationale from the refresh artifact
+- summary exposes Pi blocked-lane rationale from the refresh artifact
+- summary exposes next operator action after real-refresh validation
+- summary does not expose secrets, endpoints, credential values, or raw Target Repository content
+- summary does not mutate Target Repositories, vendor source, external developer repositories, unowned repositories, or Cortex Core
+- runtime default activation: false
+
+## Decision
+
+`CTO-WORK-057` is validated.
+
+Hermes now has a Harness-backed replay summary for Stage 6 real-governed refresh evidence.
+
+Case remains a gated adapter behind the CTO Harness seam.
+
+Runtime default activation remains false.
+
+This evidence does not promote CTO artifacts into Core and does not authorize broader target mutation.