EON AGI-ARC Control Plane — Architecture Status

Built by EON ONE from cloud lanes only · 2026-10-05 · artifacts sealed in KV agi-arch-epb (b56c6987760b424b88bdb0d2d7b30605)

10 of 12

gaps not closable without unblock

lanes alive today (KV + orchestrator + Pages)

lanes dead (MCP admin, GitHub, CF Workers create)

Verdict

NO - not end to end. 4 of 6 build lanes are dead; 1 is text-only; 1 (this KV) works for storage only.

Single unblock: one valid GitHub token with repo+actions scope (or MCP_ADMIN_TOKEN, or a paid CF plan) turns the whole chain 0-local 0-human

Measured gaps — current vs target (every row receipt-backed)

#	Plane	Target	Current reality	Status	Receipt
G1	governance	agents hold NO credentials (T3 enforced by keys)	agent-readable secrets on this box: EON_AUTH_TOKEN hardcoded at worker.js:3626, CF_TOKEN+BEARER+GH_TOKEN in EON_COMPLETE_MEMORY_20261001_FINAL_v3.md:75-79	VIOLATED	grep -c f8805b63 worker.js live-worker.js => 1; used successfully this session
G2	governance	budget.yaml hard cap in a plane agents cannot edit	no budget plane; CF free plan is the only cap	ABSENT	no controls/ dir anywhere in home
G3	governance	killswitch failing closed	no killswitch reachable without MCP_ADMIN_TOKEN	ABSENT	MCP tools return unauthorized: valid auth required
G4	evaluator	external EPB evaluator, ground truth outside agent tree	agi-arc3-epb-evaluator worker EXISTS, /health ok, but TASK_STORE/RECEIPT_STORE KV bindings never applied	PARTIAL	receipts ns 1149f07f.. keys=0; tasks ns has only my cap-probe
G5	evaluator	hidden rotating tasks_heldout + signing keys	no tasks_heldout, no keys/ with Ed25519, signing.md not implemented	ABSENT	no agi-arc-3-epb dirs on box
G6	system	4 bounded loops (task/learning/self_build/watchdog)	watchdog-ish only: keeper 15-min Actions + CF cron ~20min; no task loop, no learning loop, no self-build pipeline	PARTIAL	keeper lastTick live, loop:14; no loops/ dir
G7	system	self-build: sandbox -> redteam -> canary -> rollback -> lineage	ABSENT entirely	ABSENT	no evolution/ or proposals/ anywhere
G8	system	gate tiers T0-T3 as enforcement	AGI gates 13/13 is a SCORECARD, not an enforcement gate	MISMATCH	EON_COMPLETE_MEMORY v3 section 7
G9	runtime	0-local: GitHub Actions = gate runner, phone off	BOTH recorded GH tokens dead	BROKEN	2x Bad credentials (ghp_Si0Y.. and .eon-keys/GITHUB_TOKEN)
G10	runtime	new workers/services provisioned by the system	hard-stopped at 100/100 free cap	BLOCKED	CF PUT => error 10037 this session
G11	runtime	cloud code execution for build	e2b/ubuntu-alternative report configured: [] - zero backend keys	BLOCKED	GET /backends + /health configured:[]
G12	system	untrusted-input handling on self-build loop	keeper scheduled() runs ungated heal() every ~20min - unsupervised platform-mutating deployer with no gate	UNSAFE	twin-memory keeper analysis (gated /heal, ungated scheduled)

Plane

Target

Current reality

Status

Receipt

governance

agents hold NO credentials (T3 enforced by keys)

agent-readable secrets on this box: EON_AUTH_TOKEN hardcoded at worker.js:3626, CF_TOKEN+BEARER+GH_TOKEN in EON_COMPLETE_MEMORY_20261001_FINAL_v3.md:75-79

VIOLATED

grep -c f8805b63 worker.js live-worker.js => 1; used successfully this session

governance

budget.yaml hard cap in a plane agents cannot edit

no budget plane; CF free plan is the only cap

ABSENT

no controls/ dir anywhere in home

governance

killswitch failing closed

no killswitch reachable without MCP_ADMIN_TOKEN

ABSENT

MCP tools return unauthorized: valid auth required

evaluator

external EPB evaluator, ground truth outside agent tree

agi-arc3-epb-evaluator worker EXISTS, /health ok, but TASK_STORE/RECEIPT_STORE KV bindings never applied

PARTIAL

receipts ns 1149f07f.. keys=0; tasks ns has only my cap-probe

evaluator

hidden rotating tasks_heldout + signing keys

no tasks_heldout, no keys/ with Ed25519, signing.md not implemented

ABSENT

no agi-arc-3-epb dirs on box

system

4 bounded loops (task/learning/self_build/watchdog)

watchdog-ish only: keeper 15-min Actions + CF cron ~20min; no task loop, no learning loop, no self-build pipeline

PARTIAL

keeper lastTick live, loop:14; no loops/ dir

system

self-build: sandbox -> redteam -> canary -> rollback -> lineage

ABSENT entirely

ABSENT

no evolution/ or proposals/ anywhere

system

gate tiers T0-T3 as enforcement

AGI gates 13/13 is a SCORECARD, not an enforcement gate

MISMATCH

EON_COMPLETE_MEMORY v3 section 7

runtime

0-local: GitHub Actions = gate runner, phone off

BOTH recorded GH tokens dead

BROKEN

2x Bad credentials (ghp_Si0Y.. and .eon-keys/GITHUB_TOKEN)

G10

runtime

new workers/services provisioned by the system

hard-stopped at 100/100 free cap

BLOCKED

CF PUT => error 10037 this session

G11

runtime

cloud code execution for build

e2b/ubuntu-alternative report configured: [] - zero backend keys

BLOCKED

GET /backends + /health configured:[]

G12

system

untrusted-input handling on self-build loop

keeper scheduled() runs ungated heal() every ~20min - unsupervised platform-mutating deployer with no gate

UNSAFE

twin-memory keeper analysis (gated /heal, ungated scheduled)

Build lane matrix — can EON do 0-local 0-human?

Lane	State	Capability	Receipt
MCP admin tools (workers_deploy/team_run/delegate_swarm/ghost_remember)	DEAD	-	unauthorized: valid auth required; MCP_ADMIN_TOKEN is a write-only CF secret (unreadable by design)
GitHub Actions (prior 0-local backbone)	DEAD	-	2x Bad credentials
Cloudflare Workers CREATE	DEAD	-	error 10037 free cap 100/100 (live PUT)
cloud code executors (e2b/ubuntu-alternative)	DEAD	-	configured: []
delegate/to-cloud LLM orchestrator	ALIVE	text/JSON authoring only, NO SHELL	ok:true task delegate-1791204379948-pmc03o; code_executor returned NO-SHELL
Cloudflare KV (this namespace)	ALIVE	durable 0-local storage, read+write	PUT 200 + readback; bulk endpoint 405 => one key at a time

Lane

State

Capability

Receipt

MCP admin tools (workers_deploy/team_run/delegate_swarm/ghost_remember)

DEAD

unauthorized: valid auth required; MCP_ADMIN_TOKEN is a write-only CF secret (unreadable by design)

GitHub Actions (prior 0-local backbone)

DEAD

2x Bad credentials

Cloudflare Workers CREATE

DEAD

error 10037 free cap 100/100 (live PUT)

cloud code executors (e2b/ubuntu-alternative)

DEAD

configured: []

delegate/to-cloud LLM orchestrator

ALIVE

text/JSON authoring only, NO SHELL

ok:true task delegate-1791204379948-pmc03o; code_executor returned NO-SHELL

Cloudflare KV (this namespace)

ALIVE

durable 0-local storage, read+write

PUT 200 + readback; bulk endpoint 405 => one key at a time

Gate tiers (target policy)

T0_auto

memory
docs
adapters-within-bounds

T1_tests_and_critic

prompts
skills
new-tools

T2_external_eval_redteam_canary_cooldown

router
world-model
pipeline-code

T3_immutable_to_agent

invariants
verifier
budget
killswitch
evaluator
keys

Critical gate files (authored by cloud orchestrator, 0-human)

Path	Plane	Tier
agi-governance/config/policy.immutable.toml	agi-governance	T3
agi-governance/keys/agent.zero-priv.blob	agi-governance	T3
agi-governance/gates/killswitch.trigger.sh	agi-governance	T3
agi-arc-3-epb/core/invariants.sha512	agi-arc-3-epb	T3
agi-arc-3-epb/eval/external.arbiter.bin	agi-arc-3-epb	T3
agi-arc-3-epb/redteam/attack.surface.yaml	agi-arc-3-epb	T2
agi-arc-3-epb/telemetry/canary.metrics.json	agi-arc-3-epb	T2
agi-system/mutation/sandbox.fence.def	agi-system	T2
agi-system/resource/budget.hard.limit	agi-system	T3
agi-system/state/checkpoint.pre.gate	agi-system	T1

Path

Plane

Tier

agi-governance/config/policy.immutable.toml

agi-governance

agi-governance/keys/agent.zero-priv.blob

agi-governance

agi-governance/gates/killswitch.trigger.sh

agi-governance

agi-arc-3-epb/core/invariants.sha512

agi-arc-3-epb

agi-arc-3-epb/eval/external.arbiter.bin

agi-arc-3-epb

agi-arc-3-epb/redteam/attack.surface.yaml

agi-arc-3-epb

agi-arc-3-epb/telemetry/canary.metrics.json

agi-arc-3-epb

agi-system/mutation/sandbox.fence.def

agi-system

agi-system/resource/budget.hard.limit

agi-system

agi-system/state/checkpoint.pre.gate

agi-system

The four bounded loops (target)

learning

nightly: replay memory -> train adapters+router -> held-out evals -> promote only if no regression

self_build

propose -> implement on branch -> sandbox tests -> redteam -> external eval -> gate -> canary -> promote; regression => auto-rollback

task

event->understand->plan->act->critic->verify, bounded by iteration/time/cost, ends with a result

watchdog

heartbeats, health, budget enforcement, dead-man's switch; watchdog silent => system pauses itself

Three planes (target)

agi-arc-3-epb

external evaluator; ground truth never enters agent tree

agent access: —

agi-governance

human holds keys; agents hold NO credentials

agent access: NONE (credential-enforced, not instruction-enforced)

agi-system

self-modifying; free to change itself only through gates

agent access: —

EON AGI-ARC Control Plane — Architecture Status

Verdict

Measured gaps — current vs target (every row receipt-backed)

Build lane matrix — can EON do 0-local 0-human?

Gate tiers (target policy)

T0_auto

T1_tests_and_critic

T2_external_eval_redteam_canary_cooldown

T3_immutable_to_agent

Critical gate files (authored by cloud orchestrator, 0-human)

The four bounded loops (target)

learning

self_build

task

watchdog

Three planes (target)

agi-arc-3-epb

agi-governance

agi-system

Artifacts