diff --git a/docs/implementation-checkpoints.md b/docs/implementation-checkpoints.md index 87bed8a..7e1ff98 100644 --- a/docs/implementation-checkpoints.md +++ b/docs/implementation-checkpoints.md @@ -2,7 +2,7 @@ ## 108 Guarded Agent Research Completion -Status: implementation complete; full verification and Mission Control release are pending. +Status: complete in the local pilot and merged. Added an optional `agent_review` mode for the Local Codex/OpenCodex bridge. When all bounded static-analysis jobs finish, Core accepts pipeline-scoped proposals, records an evidence-linked verdict, and reruns publication safety without requiring card-by-card operator acceptance. Verdict output is schema constrained and then independently guarded by Core: low-confidence work remains inconclusive, a credible verdict requires advisory-backed or sandbox evidence, unresolved contradictions and unsupported claims reduce certainty, and absence from a local repository can never establish package benignness or make ecosystem intelligence non-actionable. @@ -20,6 +20,10 @@ Follow-up: bridge service installation now persists the selected OpenCodex provi Live acceptance exposed a retracted-package recovery gap: an exact NuGet version previously collected and hashed had disappeared from the registry. Investigation pipelines now prefer a fresh official-registry collection but may reuse an exact prior quarantine artifact after independently verifying ecosystem, package, version, byte size, SHA-256, regular-file state, and configured size limit. Missing or altered cache entries still fail closed. The recorded step makes registry unavailability and quarantine reuse explicit, and no package code is executed. +Live acceptance: pipeline `RPL-37985992E2512C07` recovered `nuget:Braintree.Net@3.35.7` after the registry returned HTTP 404, reused the exact hash-verified quarantine artifact, freshly collected the legitimate reference package, and completed all three structured analyses through `google-antigravity/gemini-3.6-flash`. Guarded agent review accepted 18 revision-scoped proposals and recorded a `likely` verdict at 85% confidence. Publication preflight remained `needs_approval`; sandbox submission, disclosure delivery, and publication all remained false. The earlier Kimi/Grok provider-credit failures remain in the job audit history. + +Release acceptance: Core PRs #92, #93, and #94 and Mission Control PRs #32 and #33 passed their Python-version matrix, MCP, security, dependency, Cloudflare, dashboard, and browser checks before merge. The local launchd bridge is running in `agent_review` mode with Gemini 3.6 persisted in its fixed command and no provider credentials in the service definition. + ## 107 Hermes Agent v1.0.0 Integration Status: complete in production. diff --git a/docs/research-automation.md b/docs/research-automation.md index cc51168..10d156b 100644 --- a/docs/research-automation.md +++ b/docs/research-automation.md @@ -31,7 +31,7 @@ Install or update the background bridge in agent-review mode: ```bash secopsai intelligence bridge service install \ --autonomy-mode agent_review \ - --model kimi/kimi-k2.7-code-highspeed + --model google-antigravity/gemini-3.6-flash ``` Complete an already-waiting pipeline from the CLI: