{
  "schema_version": "personal-agent-proton-rclone-package/v1",
  "status": "registered-child-local-package-degraded",
  "package_id": "proton-rclone",
  "profile_identity": "personal-agent",
  "display_name": "Steev",
  "observed_date": "2026-06-15",
  "child_workspace_registered": true,
  "child_workspace_candidate_created": true,
  "package_runtime_readiness_claimed": false,
  "profile_runtime_readiness_claimed": false,
  "seed_readiness_claimed": false,
  "core_promotion_claimed": false,
  "child_workspace_candidate": {
    "path": "../proton-rclone",
    "commit": "f8403f1e5927933a0a5e283d2020119336e4e5e7",
    "validator_command": "python3 tools/validate_proton_rclone_child.py",
    "validator_result_observed": "ok",
    "core_registration_claimed": true,
    "runtime_readiness_claimed": false,
    "core_registration_candidate_packet": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-core-registration-candidate-packet.json",
    "live_redacted_health_proof": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-live-redacted-health.json",
    "runtime_gate_repair_proof": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-runtime-gate-repair-proof.json",
    "bridge_unit_convergence_proof": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-bridge-unit-convergence-proof.json",
    "current_runtime_state_reconciliation": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-current-runtime-state-reconciliation.json",
    "core_registration_pickup": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-core-registration-pickup.json",
    "core_s606_registration_output": "../core/.sot/08-OUTPUTS/2026-06-14-s606-proton-rclone-child-registration.json",
    "core_s641_governance_pickup": "../core/.sot/08-OUTPUTS/2026-06-15-s641-proton-suite-governance-pickup.json",
    "core_s642_seed_refresh_pickup": "../core/.sot/08-OUTPUTS/2026-06-15-s642-seed-proton-suite-refresh-pickup.json",
    "core_s643_seed_validator_repair_pickup": "../core/.sot/08-OUTPUTS/2026-06-15-s643-seed-personal-agent-validator-repair-pickup.json",
    "seed_final_acceptance_gate": "../seed/outputs/research/2026-06-14-cortex-os-seed-personal-agent-final-full-tool-acceptance-gate.json",
    "seed_boundary_decision": "../seed/outputs/research/2026-06-14-cortex-os-seed-personal-agent-core-promotion-productization-boundary-decision.json",
    "seed_objective_completion_audit": "../seed/outputs/research/2026-06-14-cortex-os-seed-personal-agent-objective-completion-audit.json",
    "source_hashes": {
      "readonly_contract": "d233a763ddb4fa49f5ff0bff02f5ec28595539375a735585902e535452f18686",
      "live_redacted_health": "eebbb75e69c407f6b1a82fc847c30185bfa3b28d95848ea501333141a3c50edf",
      "runtime_gate_repair_proof": "e9ebe2268209b6e9262a2d651d0baf9170c710e425fc591891f8b4ed81f21fbb",
      "current_runtime_state_reconciliation": "4562a62053ef4805833a41e9bba744ecf5ee9698d325f90b4a98191fe7aa579c",
      "bridge_unit_convergence_proof": "8a7c07e331ff3b49ff5462caa9a691fd29f6e4db7fb4c968e8a44a99b152c46b",
      "core_registration_pickup": "d7ebfa239026b4e6d2667f4337ae7acaf763251ee11123f8974581137f34aa46",
      "core_s606_registration_output": "ff7e0f93a705ce9149d48879a4a00f30ad5abf5903d569a738ba7f26ccc60d59",
      "core_s641_governance_pickup": "224b12db17306764208cc16ae6d8dc3df342c77c05c0cba65df11d7ba20b0de6",
      "core_s642_seed_refresh_pickup": "b3604875422663033772ba09a1a96e6152b654bcb020d1acc2dc6ccb9f44541f",
      "core_s643_seed_validator_repair_pickup": "c378f7e25c5cd2668060aada18f3a8a0ebdceb76c30431cae48e109e41610c5c",
      "seed_final_acceptance_gate": "1d56599c5fbc763e95a5734fa4a507767371189c56ec26f0da36b232f12f4869",
      "seed_boundary_decision": "230accd38c9608656935858db576d5b1b19d71184387ef9015d6b7945c0ae136",
      "seed_objective_completion_audit": "5bda7600319daee01348870bbe3c7cb716457f5507cdac974adb614540e08951"
    }
  },
  "authority_boundary": {
    "profile_owns_surface_exposure": true,
    "package_candidate_owns_runtime_inventory": true,
    "legacy_repositories_are_reference_only": true,
    "duplicate_profile_local_connectors_allowed": false,
    "notes": "This contract standardizes the Proton/rclone package shape for personal-agent. Core S606 registers proton-rclone as child-local authority only; runtime readiness, provider smokes, and Profile Exposure remain unclaimed."
  },
  "memory_policy": {
    "target": "secondbrain-personal",
    "forbidden": [
      "orgbrain"
    ],
    "durable_write_policy": "proposal-only-until-governed-secondbrain-curator-apply-route"
  },
  "credential_policy": {
    "mode": "keyvault-reference-names-only",
    "secret_values_in_contract": false,
    "credential_mutation_allowed": false
  },
  "surfaces": [
    {
      "name": "mail.read",
      "runtime_route": "proton-email MCP facade through Proton gate",
      "readiness": "degraded",
      "allowed_effects": [
        "email_folders",
        "email_list",
        "email_search",
        "email_read_metadata_or_body_when_requested"
      ],
      "denied_effects": [
        "send_without_confirmation",
        "delete_mail",
        "archive_mail",
        "mark_read",
        "mark_unread",
        "orgbrain_write"
      ],
      "confirmation": "not-required-for-read"
    },
    {
      "name": "mail.draft",
      "runtime_route": "proton-email MCP facade through Proton gate",
      "readiness": "pending",
      "allowed_effects": [
        "draft_reply",
        "draft_new_mail"
      ],
      "denied_effects": [
        "send_without_confirmation",
        "delete_mail",
        "orgbrain_write"
      ],
      "confirmation": "draft-only"
    },
    {
      "name": "mail.send_with_confirmation",
      "runtime_route": "proton-email MCP facade through Proton gate",
      "readiness": "disabled",
      "allowed_effects": [
        "send_after_explicit_jp_confirmation"
      ],
      "denied_effects": [
        "silent_send",
        "send_without_confirmation",
        "delete_mail",
        "orgbrain_write"
      ],
      "confirmation": "explicit-jp-confirmation-required"
    },
    {
      "name": "calendar.read",
      "runtime_route": "proton-calendar MCP facade through calendar gate",
      "readiness": "degraded",
      "allowed_effects": [
        "calendar_list",
        "calendar_events",
        "calendar_upcoming",
        "calendar_search",
        "calendar_event_get"
      ],
      "denied_effects": [
        "calendar_write_without_confirmation",
        "calendar_delete",
        "orgbrain_write"
      ],
      "confirmation": "not-required-for-read"
    },
    {
      "name": "calendar.propose_event",
      "runtime_route": "proton-calendar MCP facade through calendar gate",
      "readiness": "pending",
      "allowed_effects": [
        "propose_calendar_create",
        "propose_calendar_update"
      ],
      "denied_effects": [
        "calendar_write_without_confirmation",
        "calendar_delete",
        "orgbrain_write"
      ],
      "confirmation": "proposal-only"
    },
    {
      "name": "calendar.write_with_confirmation",
      "runtime_route": "proton-calendar MCP facade through calendar gate",
      "readiness": "disabled",
      "allowed_effects": [
        "calendar_create_after_explicit_jp_confirmation",
        "calendar_update_after_explicit_jp_confirmation"
      ],
      "denied_effects": [
        "silent_calendar_write",
        "calendar_delete",
        "orgbrain_write"
      ],
      "confirmation": "explicit-jp-confirmation-required"
    },
    {
      "name": "contacts.read",
      "runtime_route": "proton-contacts MCP facade through contacts gate",
      "readiness": "degraded",
      "allowed_effects": [
        "contacts_list",
        "contacts_search",
        "contacts_get"
      ],
      "denied_effects": [
        "contact_mutation_without_confirmation",
        "contacts_delete",
        "orgbrain_write"
      ],
      "confirmation": "not-required-for-read"
    },
    {
      "name": "contacts.write_with_confirmation",
      "runtime_route": "proton-contacts MCP facade through contacts gate",
      "readiness": "disabled",
      "allowed_effects": [
        "contacts_create_after_explicit_jp_confirmation",
        "contacts_update_after_explicit_jp_confirmation"
      ],
      "denied_effects": [
        "silent_contact_write",
        "contacts_delete",
        "orgbrain_write"
      ],
      "confirmation": "explicit-jp-confirmation-required"
    },
    {
      "name": "drive.read",
      "runtime_route": "rclone with explicit Proton config path",
      "readiness": "degraded",
      "allowed_effects": [
        "rclone_about_redacted",
        "rclone_list_only_when_requested"
      ],
      "denied_effects": [
        "drive_file_name_proof",
        "drive_file_content_download",
        "drive_write_without_confirmation",
        "drive_delete",
        "orgbrain_write"
      ],
      "confirmation": "not-required-for-redacted-about"
    },
    {
      "name": "drive.write_with_confirmation",
      "runtime_route": "rclone with explicit Proton config path",
      "readiness": "disabled",
      "allowed_effects": [
        "drive_write_after_explicit_jp_confirmation"
      ],
      "denied_effects": [
        "silent_drive_write",
        "drive_delete",
        "drive_purge",
        "drive_share",
        "orgbrain_write"
      ],
      "confirmation": "explicit-jp-confirmation-required"
    }
  ],
  "runtime_inventory": {
    "overall_state": "degraded",
    "chosen_runtime_path": "MCP facades for Mail, Calendar, Contacts; explicit rclone config for Drive",
    "pending_runtime_convergence": [
      "Promote the repaired email and contacts gate bind-mount shape into a canonical runtime deployment route.",
      "Keep stale native Proton Bridge user units disabled while the Docker bridge route is canonical.",
      "Keep rclone RC/proxy units disabled unless a governed wrapper admits them.",
      "Keep Core S606 registration child-local only; complete Proton Suite provider-smoke and canonical runtime routes before runtime readiness is claimed."
    ],
    "mcp_servers": [
      {
        "name": "proton-calendar",
        "observed_status": "enabled"
      },
      {
        "name": "proton-email",
        "observed_status": "enabled"
      },
      {
        "name": "proton-contacts",
        "observed_status": "enabled"
      }
    ],
    "docker_routes": [
      {
        "name": "protonmail-bridge-active-container",
        "observed_state": "up"
      },
      {
        "name": "sdo-calendar-gate",
        "observed_state": "up"
      },
      {
        "name": "sdo-email-gate",
        "observed_state": "up"
      },
      {
        "name": "sdo-contacts-gate",
        "observed_state": "up"
      },
      {
        "name": "stale-sdo-protonmail-bridge-container",
        "observed_state": "created"
      }
    ],
    "systemd_user_units": [
      {
        "name": "proton-bridge.service",
        "observed_state": "inactive-dead",
        "unit_file_state": "disabled"
      },
      {
        "name": "proton-bridge-proxy.service",
        "observed_state": "inactive-dead",
        "unit_file_state": "disabled"
      },
      {
        "name": "rclone-rc.service",
        "observed_state": "inactive-dead",
        "unit_file_state": "disabled"
      },
      {
        "name": "rclone-proxy.service",
        "observed_state": "inactive-dead",
        "unit_file_state": "disabled"
      }
    ],
    "rclone": {
      "config_path": "/home/svrnty/.config/rclone/rclone.conf",
      "remote": "proton:",
      "listremotes_observed": true,
      "about_probe": "ok-redacted",
      "file_names_observed": false,
      "file_contents_observed": false
    }
  },
  "legacy_sources": [
    {
      "path": "/home/svrnty/workspaces/cortex/L4-svrnty.api-proton",
      "state": "legacy-reference",
      "reason": "Mail, Calendar, Contacts source material, not Cortex OS child authority."
    },
    {
      "path": "/home/svrnty/workspaces/cortex/L4-svrnty.tool-storage",
      "state": "legacy-reference",
      "reason": "Storage/rclone source material, not the canonical personal-agent package."
    },
    {
      "path": "/home/svrnty/workspaces/cortex/L5-vendor.lib-proton-bridge",
      "state": "legacy-reference",
      "reason": "Vendor bridge code, not profile authority."
    },
    {
      "path": "/home/svrnty/workspaces/cortex/L6-vendor.lib-proton-api",
      "state": "legacy-reference",
      "reason": "Vendor Proton API code, not profile authority."
    },
    {
      "path": "/home/svrnty/workspaces/cortex/L6-vendor.lib-rclone",
      "state": "legacy-reference",
      "reason": "Vendor rclone code, not profile authority."
    }
  ],
  "duplicate_skill_policy": [
    {
      "id": "skills/proton-tools",
      "state": "superseded-pending-package-install",
      "reason": "Keep as tool reference until the package child exists; governance now lives in this contract."
    },
    {
      "id": "proton-access",
      "state": "superseded-pending-consolidation",
      "reason": "Must not become separate Proton authority."
    },
    {
      "id": "proton-mail-operations",
      "state": "superseded-pending-consolidation",
      "reason": "Must fold into the canonical Proton/rclone package."
    },
    {
      "id": "proton-services",
      "state": "superseded-pending-consolidation",
      "reason": "Must fold into the canonical Proton/rclone package."
    }
  ],
  "proof_policy": {
    "mode": "redacted-only",
    "forbidden_fields": [
      "raw_messages",
      "mail_bodies",
      "mail_subjects",
      "sender_address",
      "recipient_address",
      "contact_details",
      "calendar_event_details",
      "drive_file_names",
      "drive_file_contents",
      "endpoint_payloads",
      "credentials",
      "secret_values"
    ]
  },
  "observed_commands": [
    "hermes -p steev mcp list",
    "systemctl --user list-unit-files --no-pager | rg -i 'proton|rclone|calendar|contacts|email'",
    "systemctl --user show proton-bridge.service rclone-rc.service rclone-proxy.service -p Id -p LoadState -p ActiveState -p SubState -p UnitFileState -p FragmentPath --no-pager",
    "systemctl --user show proton-bridge-proxy.service -p Id -p LoadState -p ActiveState -p SubState -p UnitFileState -p FragmentPath --no-pager",
    "docker ps -a --format '<name status image>' | rg -i 'proton|calendar|contacts|email|mail|rclone|sdo'",
    "rclone --config /home/svrnty/.config/rclone/rclone.conf listremotes",
    "rclone --config /home/svrnty/.config/rclone/rclone.conf about proton: --json"
  ],
  "remaining_gates": {
    "child_workspace_candidate": "complete-child-local",
    "registered_child_workspace": "complete-core-s606-child-local",
    "email_gate_repair": "complete-child-local",
    "contacts_gate_repair": "complete-child-local",
    "systemd_bridge_convergence": "complete-child-local-docker-route-active",
    "seed_personal_agent_local_acceptance": "complete-governed-local-jp-only",
    "proton_suite_provider_smoke": "blocked-follow-up",
    "proton_suite_seed_package_pickup": "blocked-provider-smoke",
    "secondbrain_durable_apply": "blocked-follow-up",
    "seed_package_pickup": "complete-governed-local-personal-agent"
  }
}