{
  "schema_version": "personal-agent-runtime-readiness-snapshot/v1",
  "status": "active-redacted-runtime-snapshot",
  "snapshot_id": "personal-agent-runtime-readiness-2026-06-15",
  "profile_identity": "personal-agent",
  "display_name": "Steev",
  "observed_date": "2026-06-15",
  "aggregate_runtime_state": "degraded",
  "runtime_readiness_claimed": false,
  "seed_readiness_claimed": false,
  "seed_local_acceptance_claimed": true,
  "core_promotion_claimed": false,
  "memory_target": "secondbrain-personal",
  "forbidden_memory_targets": [
    "orgbrain"
  ],
  "surface_states": [
    {
      "surface": "imessage.read",
      "capability_package": "bluebubbles",
      "readiness_state": "ready",
      "health_source": "python3 tools/validate_bluebubbles_child.py",
      "redacted_health": {
        "validator_ok": true,
        "read_only_imessage": true,
        "memory_domain": "secondbrain-personal",
        "orgbrain_forbidden": true,
        "secondbrain_intake_contract": "ready",
        "secondbrain_governed_apply_route": "defined-no-live-apply",
        "package_runtime_claims": false
      },
      "remaining_gap": "Profile aggregate runtime readiness remains broader-degraded until Core Profile Exposure, durable apply, provider, productization, and longer standing-runtime gates close."
    },
    {
      "surface": "mail.read",
      "capability_package": "proton-rclone",
      "readiness_state": "degraded",
      "health_source": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-live-redacted-health.json",
      "redacted_health": {
        "mcp_server_enabled": true,
        "proton_bridge_systemd_running": false,
        "proton_bridge_systemd_state": "inactive-disabled",
        "docker_email_gate": "up",
        "child_workspace_candidate_validator_ok": true,
        "core_child_workspace_registered": true,
        "seed_local_acceptance": true,
        "raw_mail_observed": false
      },
      "remaining_gap": "Email gate and Docker Bridge route are repaired child-local; Seed-local acceptance is proven, but Proton Suite provider smokes and canonical runtime readiness remain blocked."
    },
    {
      "surface": "calendar.read",
      "capability_package": "proton-rclone",
      "readiness_state": "degraded",
      "health_source": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-live-redacted-health.json",
      "redacted_health": {
        "mcp_server_enabled": true,
        "calendar_gate_running": true,
        "proton_bridge_systemd_running": false,
        "proton_bridge_systemd_state": "inactive-disabled",
        "child_workspace_candidate_validator_ok": true,
        "core_child_workspace_registered": true,
        "seed_local_acceptance": true,
        "raw_calendar_events_observed": false
      },
      "remaining_gap": "Calendar read has service posture, Core S606 child registration, and Seed-local acceptance; provider-smoke and canonical runtime readiness remain blocked."
    },
    {
      "surface": "contacts.read",
      "capability_package": "proton-rclone",
      "readiness_state": "degraded",
      "health_source": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-live-redacted-health.json",
      "redacted_health": {
        "mcp_server_enabled": true,
        "docker_contacts_gate": "up",
        "child_workspace_candidate_validator_ok": true,
        "core_child_workspace_registered": true,
        "seed_local_acceptance": true,
        "raw_contacts_observed": false
      },
      "remaining_gap": "Contacts gate is repaired child-local; Seed-local acceptance is proven, but provider-smoke and canonical runtime readiness remain blocked."
    },
    {
      "surface": "drive.read",
      "capability_package": "proton-rclone",
      "readiness_state": "degraded",
      "health_source": "../proton-rclone/.sot/08-OUTPUTS/proton-rclone-live-redacted-health.json",
      "redacted_health": {
        "rclone_remote_present": true,
        "rclone_about_probe": "ok-redacted",
        "rclone_rc_unit": "disabled",
        "rclone_proxy_unit": "disabled",
        "child_workspace_candidate_validator_ok": true,
        "core_child_workspace_registered": true,
        "seed_local_acceptance": true,
        "drive_file_names_observed": false,
        "drive_file_contents_observed": false
      },
      "remaining_gap": "Drive read has redacted child proof and Core S606 registration; governed wrapper, provider smokes, and canonical runtime readiness remain required."
    }
  ],
  "supervisor_posture": {
    "mac_mini_bluebubbles": "package-validator-ok-redacted",
    "proton_bridge_service": "inactive-disabled",
    "proton_bridge_proxy_service": "inactive-disabled",
    "rclone_rc_service": "disabled-inactive",
    "rclone_proxy_service": "disabled-inactive"
  },
  "named_runtime_gaps": [
    {
      "id": "proton-runtime-gate-repair-source-lock-refresh",
      "severity": "follow-up",
      "state": "email and contacts gates repaired child-local; Seed and downstream profile snapshots need pickup",
      "impact": "runtime remains degraded until source locks and final acceptance catch up"
    },
    {
      "id": "proton-rclone-service-posture-disabled",
      "severity": "must-fix",
      "state": "rclone-rc.service and rclone-proxy.service are disabled and inactive",
      "impact": "Drive read can use redacted CLI proof, but an always-on runtime API is not claimed"
    },
    {
      "id": "stale-protonmail-bridge-container",
      "severity": "follow-up",
      "state": "stale sdo-protonmail-bridge container exists in Created state",
      "impact": "duplicate service topology must be resolved before final runtime readiness"
    },
    {
      "id": "proton-bridge-native-units-disabled-docker-route-active",
      "severity": "follow-up",
      "state": "stale native Proton Bridge user units are disabled; Docker bridge route is active",
      "impact": "native unit loop is resolved, but canonical runtime deployment is still not claimed"
    },
    {
      "id": "proton-rclone-child-registered-core-s606",
      "severity": "complete",
      "state": "Core S606 registers proton-rclone as child-local capability workspace",
      "impact": "Registration gap is closed; runtime readiness still depends on provider-smoke and canonical runtime gates"
    },
    {
      "id": "seed-local-acceptance-proven",
      "severity": "complete",
      "state": "Seed final full-tool acceptance, boundary decision, and objective audit are green for governed local JP scope",
      "impact": "Steev is accepted as a local Seed deployment, not Core-authorized or product-ready infrastructure"
    },
    {
      "id": "proton-suite-provider-smoke-blocked",
      "severity": "must-fix",
      "state": "Proton Suite provider-smoke gate is blocked pending local Proton Pass Agncy access, Keyvault parity, migration receipt, read-only smokes, rollback, and Conductor disclosure review",
      "impact": "Proton Suite cannot unlock provider execution, Pass access, or product readiness"
    },
    {
      "id": "profile-exposure-route-required",
      "severity": "must-fix",
      "state": "Core Profile Exposure change remains blocked until a governed Core route accepts it",
      "impact": "Broader tool exposure cannot be claimed from Seed-local proof"
    },
    {
      "id": "longer-standing-runtime-proof-beyond-three-poll",
      "severity": "follow-up",
      "state": "Current standing rollback proof is enough for Seed-local acceptance, not a longer always-on posture claim",
      "impact": "Daily-driver and production posture need a separate longer standing-runtime proof"
    },
    {
      "id": "secondbrain-apply-blocked",
      "severity": "must-fix",
      "state": "proposal route and governed apply route exist; live durable apply remains blocked without approval",
      "impact": "personal memory intake can be proposed and checked, but is not live-applied yet"
    },
    {
      "id": "desktop-adapter-exposure-blocked",
      "severity": "follow-up",
      "state": "adapter lane must pick up the contract before desktop display",
      "impact": "desktop app cannot display final personal-agent runtime readiness yet"
    }
  ],
  "optional_reboot_power_loss_proof": {
    "status": "not-run",
    "required_for_final_always_on_claim": true,
    "notes": "Current proof verifies supervisor posture and package validators, not reboot recovery."
  },
  "observed_commands": [
    "python3 tools/validate_bluebubbles_child.py",
    "hermes -p steev mcp list",
    "systemctl --user show proton-bridge.service proton-bridge-proxy.service rclone-rc.service rclone-proxy.service -p Id -p LoadState -p ActiveState -p SubState -p UnitFileState --no-pager",
    "docker ps -a --format '<name status image>' | rg -i 'bluebubbles|proton|calendar|contacts|email|mail|rclone|sdo'",
    "rclone --config /home/svrnty/.config/rclone/rclone.conf about proton: --json"
  ],
  "proof_policy": {
    "mode": "redacted-only",
    "forbidden_fields": [
      "raw_messages",
      "message_text",
      "mail_bodies",
      "mail_subjects",
      "sender_address",
      "recipient_address",
      "contact_details",
      "calendar_event_details",
      "drive_file_names",
      "drive_file_contents",
      "attachment_content",
      "endpoint_payloads",
      "credentials",
      "secret_values"
    ]
  },
  "remaining_gates": {
    "proton_email_gate_repair": "complete-child-local",
    "proton_contacts_gate_repair": "complete-child-local",
    "proton_bridge_systemd_convergence": "complete-child-local-docker-route-active",
    "proton_rclone_child_candidate": "complete-child-local",
    "proton_rclone_child_registration": "complete-core-s606-child-local",
    "seed_local_acceptance": "complete-governed-local-jp-only",
    "proton_suite_provider_smoke": "blocked-follow-up",
    "profile_exposure_route": "blocked-core-route-required",
    "longer_standing_runtime_proof": "follow-up",
    "secondbrain_governed_apply_route": "defined-no-live-apply",
    "secondbrain_durable_apply": "blocked-follow-up",
    "desktop_adapter_exposure": "blocked-follow-up",
    "reboot_power_loss_drill": "optional-follow-up",
    "final_acceptance_packet": "blocked-follow-up"
  }
}