{"format": "ta-amps.seed-pack.nouns.v1", "pack_id": "rule-of-two-and-agent-guardrails", "status": "proposal_only", "records": [
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.pack", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.skill_pack", "pack:rule-of-two-and-agent-guardrails", "role:pack", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.skill_pack", "role": "pack", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "A collection of nouns and verbs for enforcing monotone Rule of Two capability lattices across multi-step tool DAGs, bidirectional typed privacy placeholder vaults and model license-tier routing firewalls", "lets_workers": "Track monotone capability taint across multi-step tool DAGs so unapproved combinations of untrusted_input, sensitive_access and external_mutation_or_egress fail closed with 403 and a minimal witness path, scrub sensitive entities into lossless <ENTITY_TYPE_001> placeholder vaults and route payloads across contributor_training_allowed, standard_zero_retention and local_open_weights license tiers.", "flow": [{"verb": "rule-of-two-and-agent-guardrails.evaluate-rule-of-two-tool-dag", "when": "Propagate monotone capability taint across a proposed multi-step tool DAG and block unapproved three-leg combinations before execution."}, {"verb": "rule-of-two-and-agent-guardrails.scrub-and-route-privacy-license-tier", "when": "Vault outbound sensitive tokens into deterministic <ENTITY_TYPE_NNN> placeholders, route payloads across model license tiers and rehydrate inbound responses."}, {"verb": "rule-of-two-and-agent-guardrails.verify-bidirectional-vault-and-ast-gate", "when": "Independently audit 403 witness minimality, 100% outbound zero-leak recall, exact round-trip rehydration and ZeroHardcodedValuesAstGate conformance."}], "guardrails": [{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.guardrail.monotone-rule-of-two-triad-refusal", "version": 1, "value_sha256": "8dc16fef415acd1246ba802c6d78e4c33576ef318733e213c9292820c464b2d5"}, {"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.guardrail.lossless-placeholder-vault-and-license-tier", "version": 1, "value_sha256": "3ed9f77c7503db4c5d2d9141dd3373e0e1b4c19f888235528de9cddca00fb343"}], "tool": {"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.tool.rule-of-two-guardrails", "version": 1, "value_sha256": "47ce49fb5250fd408393f28ff3b00fd89c4c50477f810eebfaab6f50224f4d4b"}, "worked_example": "Synthetic 2-leg allow DAG, 5-node diamond 3-leg refusal DAG (403 with minimal witness path excluding distractor nodes), steward-approved override (200), bidirectional placeholder vaulting (1.0 zero-leak recall and 1.0 round-trip fidelity) and 3-tier license firewall routing recomputed in test_rule_of_two_guardrails.py.", "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": [{"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.guardrail.monotone-rule-of-two-triad-refusal", "target_category": "noun.skill_pack", "note": ""}, {"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.guardrail.lossless-placeholder-vault-and-license-tier", "target_category": "noun.skill_pack", "note": ""}, {"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.spec.rule-of-two-and-privacy-grid", "target_category": "noun.benchmark_suite", "note": ""}, {"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.rules.triad-witness-and-license-routing", "target_category": "noun.reflex_procedure", "note": ""}, {"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.tool.rule-of-two-guardrails", "target_category": "noun.code_node", "note": ""}, {"relation": "requires_noun", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.template.rule-of-two-guardrails-receipt", "target_category": "noun.scene_recipe", "note": ""}]}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.guardrail.monotone-rule-of-two-triad-refusal", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.skill_pack", "pack:rule-of-two-and-agent-guardrails", "role:guardrail", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.skill_pack", "role": "guardrail", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Guardrail: unapproved transitive combinations of untrusted input, sensitive access and external mutation or egress fail closed with 403", "category_reason": "Prevents prompt-injected exfiltration or unauthorized external state changes across multi-step tool chains.", "rule": "RuleOfTwoCapabilityLattice permits at most two capability legs across any topological tool path unless a human_steward_approval token explicitly authorizes the violating step, returning status 403 and the minimal ancestor witness subgraph otherwise.", "how_it_is_checked": "RuleOfTwoCapabilityLattice.evaluate_dag computes monotone set-union taint across upstream parents and rejects agent-forged or missing steward approvals.", "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.guardrail.lossless-placeholder-vault-and-license-tier", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.skill_pack", "pack:rule-of-two-and-agent-guardrails", "role:guardrail", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.skill_pack", "role": "guardrail", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Guardrail: sensitive entities require reversible typed placeholders and license-compatible retention tiers without inline magic numbers", "category_reason": "Prevents raw PII/credential leakage to training-enabled APIs while keeping operational bounds externalized in default_grid_spec.json.", "rule": "BidirectionalPrivacyPlaceholderGateway replaces sensitive entities with coreference-preserving <ENTITY_TYPE_NNN> placeholders while leaving SHA-256 hex digests intact, ModelLicenseTierFirewall blocks non-public or restricted-license payloads from contributor training tiers and ZeroHardcodedValuesAstGate rejects inline magic literals.", "how_it_is_checked": "test_rule_of_two_guardrails.py verifies 1.0 outbound zero-leak recall, 1.0 inbound round-trip fidelity, strict 3-tier license routing and zero AST magic-literal violations.", "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.spec.rule-of-two-and-privacy-grid", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.benchmark_suite", "pack:rule-of-two-and-agent-guardrails", "role:spec", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.benchmark_suite", "role": "spec", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Specification: Rule of Two capability lattice legs, typed placeholder vault invariants and 3-tier model license firewall", "category_reason": "Defines deterministic monotone taint equations, placeholder formatting and license-tier boundaries.", "structures": ["RuleOfTwoCapabilityLattice", "BidirectionalPrivacyPlaceholderGateway", "ModelLicenseTierFirewall"], "canonical_legs": ["untrusted_input", "sensitive_access", "external_mutation_or_egress"], "max_unapproved_legs": 2, "refusal_status_code": 403, "license_tiers": ["contributor_training_allowed", "standard_zero_retention", "local_open_weights"], "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.rules.triad-witness-and-license-routing", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.reflex_procedure", "pack:rule-of-two-and-agent-guardrails", "role:rules", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.reflex_procedure", "role": "rules", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Deterministic Rule of Two DAG taint join, placeholder coreference and 3-tier license routing rules", "category_reason": "Zero-model procedure evaluating DAG capability combinations, placeholder vaults and model license tiers.", "regime_mapping": {"public_synthetic_permissive": "contributor_training_allowed", "internal_or_vaulted_commercial": "standard_zero_retention", "secret_or_local_restricted": "local_open_weights"}, "taint_propagation": "effective_legs(step) = own_legs(step) union_{parent in depends_on} effective_legs(parent)", "model_calls": 0, "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.tool.rule-of-two-guardrails", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.code_node", "pack:rule-of-two-and-agent-guardrails", "role:tool_card", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.code_node", "role": "tool_card", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Tool card: standard-library RuleOfTwoCapabilityLattice, BidirectionalPrivacyPlaceholderGateway and ModelLicenseTierFirewall", "category_reason": "Tested Python 3.10+ standard-library package pinned by path and SHA-256.", "name": "rule of two and agent guardrails", "code": {"path": "packs/rule-of-two-and-agent-guardrails/code", "files": 13, "sha256": "cb00595873ce5db8d76fe375fc1c932716d4f2b7a583dcfe309e91e085998411"}, "runtime": "Python 3.10 or later, standard library only.", "commands": ["python3 -m rule_of_two_guardrails --bundle BUNDLE.json"], "does": ["Propagates monotone capability taint across multi-step tool DAGs, refusing unapproved 3-leg combinations with status 403 and minimal witness paths.", "Scrubs sensitive outbound tokens into deterministic <ENTITY_TYPE_001> vaults while preserving SHA-256 digests and rehydrating inbound responses losslessly.", "Routes payloads across contributor_training_allowed, standard_zero_retention and local_open_weights tiers under ZeroHardcodedValuesAstGate."], "does_not": ["Perform network I/O, mint steward approval tokens or embed inline magic numbers."], "code_license": "MIT", "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": [{"relation": "verifies", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.spec.rule-of-two-and-privacy-grid", "target_category": "noun.benchmark_suite", "note": ""}]}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.template.rule-of-two-guardrails-receipt", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.scene_recipe", "pack:rule-of-two-and-agent-guardrails", "role:template", "content:authored", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.scene_recipe", "role": "template", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Template: Rule of Two DAG verdict, minimal witness path, bidirectional placeholder fidelity and license-tier receipt", "describes": "a deterministic receipt of multi-step Rule of Two capability lattice verdicts, minimal witness paths, bidirectional privacy placeholder recall/fidelity and 3-tier model license routing", "schema": {"type": "object", "additionalProperties": false, "required": ["safe_dag_status_code", "safe_dag_verdict", "three_leg_dag_status_code", "three_leg_dag_verdict", "three_leg_violating_step", "three_leg_minimal_witness_path", "steward_approved_status_code", "steward_approved_verdict", "sample_scrubbed_prompt", "sample_round_trip_exact", "outbound_zero_leak_recall", "inbound_round_trip_fidelity", "coreference_preserved_rate", "license_tier_routes", "license_tier_decisions"], "properties": {"safe_dag_status_code": {"type": "integer", "minimum": 200, "maximum": 599}, "safe_dag_verdict": {"type": "string", "enum": ["allow", "refuse"]}, "three_leg_dag_status_code": {"type": "integer", "minimum": 200, "maximum": 599}, "three_leg_dag_verdict": {"type": "string", "enum": ["allow", "refuse"]}, "three_leg_violating_step": {"type": "string", "minLength": 1}, "three_leg_minimal_witness_path": {"type": "array", "minItems": 1, "items": {"type": "string"}}, "steward_approved_status_code": {"type": "integer", "minimum": 200, "maximum": 599}, "steward_approved_verdict": {"type": "string", "enum": ["allow", "refuse"]}, "sample_scrubbed_prompt": {"type": "string", "minLength": 1}, "sample_round_trip_exact": {"type": "boolean"}, "outbound_zero_leak_recall": {"type": "number", "minimum": 0.0, "maximum": 1.0}, "inbound_round_trip_fidelity": {"type": "number", "minimum": 0.0, "maximum": 1.0}, "coreference_preserved_rate": {"type": "number", "minimum": 0.0, "maximum": 1.0}, "license_tier_routes": {"type": "object", "additionalProperties": false, "required": ["synthetic_mit_benchmark", "vaulted_internal_trace", "unredacted_secret_bundle"], "properties": {"synthetic_mit_benchmark": {"type": "string"}, "vaulted_internal_trace": {"type": "string"}, "unredacted_secret_bundle": {"type": "string"}}}, "license_tier_decisions": {"type": "object", "additionalProperties": false, "required": ["synthetic_mit_benchmark", "vaulted_internal_trace", "unredacted_secret_bundle"], "properties": {"synthetic_mit_benchmark": {"type": "string"}, "vaulted_internal_trace": {"type": "string"}, "unredacted_secret_bundle": {"type": "string"}}}}}, "example": {"safe_dag_status_code": 200, "safe_dag_verdict": "allow", "three_leg_dag_status_code": 403, "three_leg_dag_verdict": "refuse", "three_leg_violating_step": "emit_external_webhook", "three_leg_minimal_witness_path": ["ingest_external_ticket", "inspect_scoped_ledger", "draft_triage_note", "emit_external_webhook"], "steward_approved_status_code": 200, "steward_approved_verdict": "allow", "sample_scrubbed_prompt": "Verify custodian <EMAIL_ADDR_001> and backup <EMAIL_ADDR_001> on host <IPV4_HOST_001> with key <API_SECRET_001> and sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.", "sample_round_trip_exact": true, "outbound_zero_leak_recall": 1.0, "inbound_round_trip_fidelity": 1.0, "coreference_preserved_rate": 1.0, "license_tier_routes": {"synthetic_mit_benchmark": "contributor_training_allowed", "vaulted_internal_trace": "standard_zero_retention", "unredacted_secret_bundle": "local_open_weights"}, "license_tier_decisions": {"synthetic_mit_benchmark": "allow", "vaulted_internal_trace": "allow", "unredacted_secret_bundle": "refuse"}}, "status": "proposal", "admission": "not_admitted", "content_kind": "authored_guidance", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.example.rule-of-two-guardrails-bundle", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.eval_run", "pack:rule-of-two-and-agent-guardrails", "role:example", "synthetic:true", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.eval_run", "role": "example", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Worked example input: synthetic 2-leg and 3-leg tool DAGs, steward token, privacy corpus and license routing probes", "category_reason": "Synthetic fixture recomputed by test_rule_of_two_guardrails.py.", "safe_two_leg_dag": [{"id": "ingest_external_ticket", "legs": ["untrusted_input"]}, {"id": "inspect_scoped_ledger", "legs": ["sensitive_access"], "depends_on": ["ingest_external_ticket"]}], "unapproved_three_leg_dag": [{"id": "health_heartbeat", "legs": []}, {"id": "ingest_external_ticket", "legs": ["untrusted_input"]}, {"id": "draft_triage_note", "legs": [], "depends_on": ["ingest_external_ticket", "health_heartbeat"]}, {"id": "inspect_scoped_ledger", "legs": ["sensitive_access"]}, {"id": "emit_external_webhook", "legs": ["external_mutation_or_egress"], "depends_on": ["draft_triage_note", "inspect_scoped_ledger"]}], "steward_approval": {"principal_kind": "human_steward", "approver_principal": "steward:reviewer-01", "token": "steward_ack:approved_release_gate_0042", "approved_steps": ["emit_external_webhook"]}, "sample_outbound_prompt": "Verify custodian lead@example.invalid and backup lead@example.invalid on host 10.42.7.9 with key tok_live_TestAlphaBeta123456 and sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.", "privacy_cases": [{"text": "Route receipt to lead@example.invalid and confirm lead@example.invalid using tok_live_AlphaKey998877.", "ground_truth_sensitive": ["lead@example.invalid", "tok_live_AlphaKey998877"], "expect_coreference_symbol": "lead@example.invalid"}, {"text": "Audit node 172.16.9.40 phone +1-555-867-5309 id 123-45-6789 for operator Jordan.", "explicit_entities": {"OPERATOR_NAME": ["Jordan"]}, "ground_truth_sensitive": ["172.16.9.40", "+1-555-867-5309", "123-45-6789", "Jordan"]}], "license_requests": [{"id": "synthetic_mit_benchmark", "sensitivity": "public", "synthetic_provenance": true, "license_tag": "MIT", "requested_tier": "contributor_training_allowed"}, {"id": "vaulted_internal_trace", "sensitivity": "confidential", "placeholder_vaulted": true, "license_tag": "internal-commercial-no-train", "requested_tier": "standard_zero_retention"}, {"id": "unredacted_secret_bundle", "sensitivity": "secret", "contains_unredacted_entities": true, "license_tag": "local-weights-only", "requested_tier": "standard_zero_retention"}], "shows": "Synthetic Rule of Two DAGs, steward approval token, bidirectional privacy vault corpus and 3-tier model license probes.", "source": "Synthetic. Written for this pack.", "status": "proposal", "admission": "not_admitted", "content_kind": "synthetic_example", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": []}},
{"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.example.rule-of-two-guardrails-receipt", "expected_version": 0, "producer_surface": "surface:tessera", "visibility_scope": "surface_only", "allowed_surfaces": [], "target_cohorts": ["all"], "tags": ["category:noun.eval_run", "pack:rule-of-two-and-agent-guardrails", "role:example", "synthetic:true", "spdx:MIT", "status:quarantined"], "value": {"category_id": "noun.eval_run", "role": "example", "pack": "rule-of-two-and-agent-guardrails", "pack_version": "0.1.0", "title": "Worked example output: recomputed Rule of Two 403 witness, lossless placeholder round-trip and 3-tier license routing receipt", "category_reason": "Synthetic receipt verified by test_rule_of_two_guardrails.py.", "conforms_to": {"store": "seedpack.rule-of-two-and-agent-guardrails", "key": "rule-of-two-and-agent-guardrails.v0.1.0.template.rule-of-two-guardrails-receipt", "version": 1, "value_sha256": "bd0c5bfcb0e8065f56ea77aa3d140beb5477d7d0de31760f759904333bb80041"}, "instance": {"safe_dag_status_code": 200, "safe_dag_verdict": "allow", "three_leg_dag_status_code": 403, "three_leg_dag_verdict": "refuse", "three_leg_violating_step": "emit_external_webhook", "three_leg_minimal_witness_path": ["ingest_external_ticket", "inspect_scoped_ledger", "draft_triage_note", "emit_external_webhook"], "steward_approved_status_code": 200, "steward_approved_verdict": "allow", "sample_scrubbed_prompt": "Verify custodian <EMAIL_ADDR_001> and backup <EMAIL_ADDR_001> on host <IPV4_HOST_001> with key <API_SECRET_001> and sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.", "sample_round_trip_exact": true, "outbound_zero_leak_recall": 1.0, "inbound_round_trip_fidelity": 1.0, "coreference_preserved_rate": 1.0, "license_tier_routes": {"synthetic_mit_benchmark": "contributor_training_allowed", "vaulted_internal_trace": "standard_zero_retention", "unredacted_secret_bundle": "local_open_weights"}, "license_tier_decisions": {"synthetic_mit_benchmark": "allow", "vaulted_internal_trace": "allow", "unredacted_secret_bundle": "refuse"}}, "shows": "Recomputes 2-leg allow (200), transitive 3-leg refusal (403) with minimal witness path, steward override (200), 100% zero-leak placeholder vaulting/rehydration and 3-tier license routing.", "source": "Synthetic. Recomputed directly from example.rule-of-two-guardrails-bundle.", "status": "proposal", "admission": "not_admitted", "content_kind": "synthetic_example", "license": "MIT", "provenance": {"source": "original ta-amps authored proposal", "license": "MIT", "generator": "scripts/build_packs.py", "independently_verified": false}, "dimensions": {"determinism": 0.0, "evidence_grounding": 0.0, "token_efficiency": 0.0, "safety_compliance": 0.0, "verification_tier": "unverified"}, "dimension_basis": {"measured": false, "method": "unmeasured_floor", "reason": "Tessera requires these axes, so each is set to its lowest value and the tier is unverified. No quality is claimed. Replace them only with measured values and the evidence that produced them."}, "relations": [{"relation": "derives_from", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.example.rule-of-two-guardrails-bundle", "target_category": "noun.eval_run", "note": ""}, {"relation": "verifies", "target_id": "seedpack.rule-of-two-and-agent-guardrails/rule-of-two-and-agent-guardrails.v0.1.0.template.rule-of-two-guardrails-receipt", "target_category": "noun.scene_recipe", "note": ""}]}}
]}