cto/.sot/03-PROTOCOLS/CTO-HERMES-REAL-REFRESH-CONTROL-REPLAY-EVIDENCE.md

name	tier	status	owner	source	created	last_reviewed	lifecycle_classification	core_promotion_status	description
cto-hermes-real-refresh-control-replay-evidence	local	validated	jp	.sot/03-PROTOCOLS/CTO-HERMES-REAL-REFRESH-CONTROL-REPLAY-ISSUES.md	2026-06-01	2026-06-01	planning	not-promoted	Child-local evidence that CTO-WORK-057 exposed Stage 6 real-governed refresh evidence through the Hermes CTO Harness control summary.

CTO Hermes Real Refresh Control Replay Evidence

Local planning SOT only. Not a Core Protocol. Not active Core authority.

Result

Status: validated.

Work item: CTO-WORK-057

Hermes CTO commit:

1f53307 Expose real refresh in control summary

Focused summary validator:

python3 harness/runner/validate-webui-summary.py --json

Focused summary JSON:

/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112443Z-run-all-fake-262885/webui-summary.json

Focused Stage 6 real-governed refresh comparison artifact:

/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112448Z-stage6-real-governed-refresh/stage6-real-governed-refresh-comparison.json

Post-merge aggregate Harness command:

./harness/evals/health.sh --json

Post-merge aggregate status:

pass

Post-merge Stage 6 real-governed refresh comparison artifact:

/home/svrnty/.hermes/profiles/cto-planb/harness-runs/20260601T112541Z-stage6-real-governed-refresh/stage6-real-governed-refresh-comparison.json

Evidence Facts

• summary exposes case_stage6_real_governed_refresh
• summary exposes stage6_real_governed_refresh_comparison_path
• summary exposes real Stage 5 pass report replay path
• summary exposes real Stage 5 proof replay path
• summary exposes target repository read-only proof status
• summary exposes candidate-default refresh eligibility separately from runtime_default_activation
• summary exposes Codex blocked-lane rationale from the refresh artifact
• summary exposes Pi blocked-lane rationale from the refresh artifact
• summary exposes next operator action after real-refresh validation
• summary does not expose secrets, endpoints, credential values, or raw Target Repository content
• summary does not mutate Target Repositories, vendor source, external developer repositories, unowned repositories, or Cortex Core
• runtime default activation: false

Decision

CTO-WORK-057 is validated.

Hermes now has a Harness-backed replay summary for Stage 6 real-governed refresh evidence.

Case remains a gated adapter behind the CTO Harness seam.

Runtime default activation remains false.

This evidence does not promote CTO artifacts into Core and does not authorize broader target mutation.