{
 "measured_at": "2026-10-05",
 "method": "live probes only; every row carries a receipt",
 "rows": [
  {
   "current": "agent-readable secrets on this box: EON_AUTH_TOKEN hardcoded at worker.js:3626, CF_TOKEN+BEARER+GH_TOKEN in EON_COMPLETE_MEMORY_20261001_FINAL_v3.md:75-79",
   "id": "G1",
   "plane": "governance",
   "receipt": "grep -c f8805b63 worker.js live-worker.js => 1; used successfully this session",
   "status": "VIOLATED",
   "target": "agents hold NO credentials (T3 enforced by keys)"
  },
  {
   "current": "no budget plane; CF free plan is the only cap",
   "id": "G2",
   "plane": "governance",
   "receipt": "no controls/ dir anywhere in home",
   "status": "ABSENT",
   "target": "budget.yaml hard cap in a plane agents cannot edit"
  },
  {
   "current": "no killswitch reachable without MCP_ADMIN_TOKEN",
   "id": "G3",
   "plane": "governance",
   "receipt": "MCP tools return unauthorized: valid auth required",
   "status": "ABSENT",
   "target": "killswitch failing closed"
  },
  {
   "current": "agi-arc3-epb-evaluator worker EXISTS, /health ok, but TASK_STORE/RECEIPT_STORE KV bindings never applied",
   "id": "G4",
   "plane": "evaluator",
   "receipt": "receipts ns 1149f07f.. keys=0; tasks ns has only my cap-probe",
   "status": "PARTIAL",
   "target": "external EPB evaluator, ground truth outside agent tree"
  },
  {
   "current": "no tasks_heldout, no keys/ with Ed25519, signing.md not implemented",
   "id": "G5",
   "plane": "evaluator",
   "receipt": "no agi-arc-3-epb dirs on box",
   "status": "ABSENT",
   "target": "hidden rotating tasks_heldout + signing keys"
  },
  {
   "current": "watchdog-ish only: keeper 15-min Actions + CF cron ~20min; no task loop, no learning loop, no self-build pipeline",
   "id": "G6",
   "plane": "system",
   "receipt": "keeper lastTick live, loop:14; no loops/ dir",
   "status": "PARTIAL",
   "target": "4 bounded loops (task/learning/self_build/watchdog)"
  },
  {
   "current": "ABSENT entirely",
   "id": "G7",
   "plane": "system",
   "receipt": "no evolution/ or proposals/ anywhere",
   "status": "ABSENT",
   "target": "self-build: sandbox -> redteam -> canary -> rollback -> lineage"
  },
  {
   "current": "AGI gates 13/13 is a SCORECARD, not an enforcement gate",
   "id": "G8",
   "plane": "system",
   "receipt": "EON_COMPLETE_MEMORY v3 section 7",
   "status": "MISMATCH",
   "target": "gate tiers T0-T3 as enforcement"
  },
  {
   "current": "BOTH recorded GH tokens dead",
   "id": "G9",
   "plane": "runtime",
   "receipt": "2x Bad credentials (ghp_Si0Y.. and .eon-keys/GITHUB_TOKEN)",
   "status": "BROKEN",
   "target": "0-local: GitHub Actions = gate runner, phone off"
  },
  {
   "current": "hard-stopped at 100/100 free cap",
   "id": "G10",
   "plane": "runtime",
   "receipt": "CF PUT => error 10037 this session",
   "status": "BLOCKED",
   "target": "new workers/services provisioned by the system"
  },
  {
   "current": "e2b/ubuntu-alternative report configured: [] - zero backend keys",
   "id": "G11",
   "plane": "runtime",
   "receipt": "GET /backends + /health configured:[]",
   "status": "BLOCKED",
   "target": "cloud code execution for build"
  },
  {
   "current": "keeper scheduled() runs ungated heal() every ~20min - unsupervised platform-mutating deployer with no gate",
   "id": "G12",
   "plane": "system",
   "receipt": "twin-memory keeper analysis (gated /heal, ungated scheduled)",
   "status": "UNSAFE",
   "target": "untrusted-input handling on self-build loop"
  }
 ],
 "schema": "agi-arch-gap/0.1",
 "summary": {
  "absent": 6,
  "blocked": 2,
  "broken": 1,
  "mismatch": 1,
  "partial": 2,
  "unsafe": 1,
  "violated": 1
 }
}