Three scenarios join the contract set, so the fifteen vectors now cover an unproven side effect, an undecidable attribution, and an agent whose state goes unreadable in the window between finalization and notification. All fifteen match their expected decision. The side-effect case needed a decision about layering. Authoritative enforcement belongs in manifest verification, which has the job record and therefore knows what was declared; the policy honours an explicit negative from the collector so the case is expressible as a vector. Absence is not read as proof there, because the manifest check is the layer that fails closed on missing evidence. The operations note records why the agent declares and the reader re-derives, the three gates and why the backend allowlist can only be narrowed, the notification transaction, and the rollback. It also records a deviation from my own plan. §D2 asked for reviewer sign-off before promoting an attempt id into the record, since that changes a contract phase 1 froze. Measurement during implementation showed the change was not needed: the attempt guard already lives in the evidence layer, where attempt identity actually is, so auto-completion passes the engine a status precondition instead. The schema is untouched, the frozen contract holds, and a characterization test fails the moment a record starts carrying an attempt id, which is when to revisit it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UrDNJkHmm18uu7n7JwV5Qd
68 lines
2.0 KiB
JSON
68 lines
2.0 KiB
JSON
{
|
|
"schema_version": "1.0.0",
|
|
"scenario_id": "notification_crash_window",
|
|
"backend": "backend_agnostic",
|
|
"provenance": "simulated",
|
|
"description": "The agent's state became unreadable between finalization and notification. Unknown is not quiescent.",
|
|
"dispatch_context": {
|
|
"job_id": "test-job-notify-crash-01",
|
|
"attempt_id": 1,
|
|
"agent_session_uuid": "7d5700d0-bab1-4f65-9665-6b887396a9a6",
|
|
"pane_process_generation": "w2X:p1:1234:2026-09-06T00:00:00Z",
|
|
"dispatch_ack": true,
|
|
"execution_anchor_observed": true
|
|
},
|
|
"timeline": [
|
|
{
|
|
"collector_clock_id": "CLOCK_MONOTONIC",
|
|
"relative_ms": 0,
|
|
"source_kind": "event",
|
|
"source_provenance": "simulated",
|
|
"payload": {
|
|
"event": "started",
|
|
"job_id": "test-job-notify-crash-01"
|
|
}
|
|
},
|
|
{
|
|
"collector_clock_id": "CLOCK_MONOTONIC",
|
|
"relative_ms": 5000,
|
|
"source_kind": "filesystem",
|
|
"source_provenance": "simulated",
|
|
"payload": {
|
|
"report_manifest": {
|
|
"report_hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
|
"attempt_id": 1,
|
|
"finalized": true
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"collector_clock_id": "CLOCK_MONOTONIC",
|
|
"relative_ms": 6000,
|
|
"source_kind": "herdr",
|
|
"source_provenance": "simulated",
|
|
"payload": {
|
|
"agent_status": "unknown",
|
|
"interactive_ready": false
|
|
},
|
|
"collector_attribution": {
|
|
"job_id": "test-job-notify-crash-01",
|
|
"attempt_id": 1,
|
|
"agent_session_uuid": "7d5700d0-bab1-4f65-9665-6b887396a9a6",
|
|
"pane_process_generation": "w2X:p1:1234:2026-09-06T00:00:00Z"
|
|
}
|
|
}
|
|
],
|
|
"filesystem": {
|
|
"report_path": ".mam/jobs/test-job-finalized-01/report-final.md",
|
|
"exists": true,
|
|
"manifest_committed": true,
|
|
"hash_verified": true
|
|
},
|
|
"expected_policy": {
|
|
"decision": "hold",
|
|
"reason": "agent status is unknown; fail closed",
|
|
"policy_version": "2.0.0"
|
|
}
|
|
}
|