cto/sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION-ISSUES.md

title	status	lifecycle_classification	owner	created	last_reviewed	core_promotion_status	route
CTO Case Model Provider Admission Issues	draft	sot	jp	2026-05-31	2026-05-31	not-promoted	cto

CTO Case Model Provider Admission Issues

Local planning SOT only. Not a Core Protocol. Not active Core authority.

CTO-WORK-019 - Case Model Provider Admission PRD

Status: validated.

Extract the existing CTO-WORK-018 harness gate into a first-class model provider admission route. This is the SOT route for deciding which provider/model pair may power real Case Stage 2.

Acceptance:

• Records observed fallback provider anthropic.
• Records observed fallback model claude-sonnet-4-6.
• Requires explicit admitted provider and exact model ID before real Case starts.
• Requires CTO_HARNESS_CASE_MODEL_PROVIDER and CTO_HARNESS_CASE_MODEL to match the admission record.
• Requires backend/provider-model-not-admitted.txt when admission is missing.
• Requires isolated CASE_DATA_DIR/config.json to contain admitted models.default.
• Requires negative gates for missing provider/model and unadmitted provider/model.
• Requires no secrets in task file, argv, report, trace, backend logs, SOT, or commits.
• Keeps Case as candidate execution backend, not CTO authority.

CTO-WORK-020 - Admit Case Model Provider For Real Stage 2

Status: blocked.

Choose and admit the exact provider/model path for real Case Stage 2, then rerun Stage 2 through the Harness Evidence Interface.

Acceptance:

• Admission record names provider, exact model ID, credential source class, allowed network class, approval source, admission timestamp, review trigger, and evidence expectations.
• No provider/model is admitted by default.
• No secret is written to SOT, argv, task file, backend logs, report, trace, or commit.
• CTO_HARNESS_CASE_MODEL_PROVIDER and CTO_HARNESS_CASE_MODEL match the admission record.
• Missing or unadmitted provider/model blocks before case_process_started.
• Report records case_model_provider, case_model, and case_model_admission_status.
• Real Case Stage 2 produces a pass report only if the admitted provider/model was used.
• Same-run fake baseline comparison remains required.
• No Target Repository path is inspected or copied.

Blocked by:

• Human provider approval if an external provider such as Anthropic is selected.
• A Case-compatible local provider route if external providers are not approved.