{
 "manifest.json": {
  "built_at": "2026-10-05T00:00:00Z",
  "built_by": "EON ONE (cloud lanes only)",
  "gate_tiers": {
   "T0_auto": [
    "memory",
    "docs",
    "adapters-within-bounds"
   ],
   "T1_tests_and_critic": [
    "prompts",
    "skills",
    "new-tools"
   ],
   "T2_external_eval_redteam_canary_cooldown": [
    "router",
    "world-model",
    "pipeline-code"
   ],
   "T3_immutable_to_agent": [
    "invariants",
    "verifier",
    "budget",
    "killswitch",
    "evaluator",
    "keys"
   ]
  },
  "loops": {
   "learning": "nightly: replay memory -> train adapters+router -> held-out evals -> promote only if no regression",
   "self_build": "propose -> implement on branch -> sandbox tests -> redteam -> external eval -> gate -> canary -> promote; regression => auto-rollback",
   "task": "event->understand->plan->act->critic->verify, bounded by iteration/time/cost, ends with a result",
   "watchdog": "heartbeats, health, budget enforcement, dead-man's switch; watchdog silent => system pauses itself"
  },
  "planes": {
   "agi-arc-3-epb": {
    "dirs": [
     "tasks/",
     "tasks_heldout/",
     "harness/",
     "schemas/",
     "epb01/{environment,ground_truth,runs}/",
     "receipts/"
    ],
    "role": "external evaluator; ground truth never enters agent tree"
   },
   "agi-governance": {
    "agent_access": "NONE (credential-enforced, not instruction-enforced)",
    "dirs": [
     "invariants/",
     "gates/",
     "budget.yaml",
     "killswitch/",
     "verifier/",
     "keys/",
     "audit/"
    ],
    "role": "human holds keys; agents hold NO credentials"
   },
   "agi-system": {
    "dirs": [
     "loops/",
     "evolution/",
     "agents/",
     "self/",
     "interfaces/external/",
     "models/",
     "memory/",
     "harness/",
     "services/",
     "p2p/",
     "data/",
     "servers/",
     "streaming/",
     "tools/",
     "mcp/",
     "skills/",
     "runtime/",
     "workers/cloudflare/",
     "status/",
     "security/",
     "artifacts/",
     "integrations/",
     "clients/",
     "tests/",
     "deploy/",
     "docs/"
    ],
    "role": "self-modifying; free to change itself only through gates"
   }
  },
  "principle": "zero human in DAILY operation, nonzero human in CONTROL",
  "schema": "agi-arch-manifest/0.1",
  "zero_local_substrate": "CF cron triggers + queues + Render + Postgres/R2/DO + GitHub Actions as gate-runner; devices are terminals only"
 },
 "gates.json": {
  "authored_at": "2026-10-05",
  "authored_by": "eon-p2p-cloud delegate orchestrator (task delegate-1791204379948-pmc03o)",
  "critical_gate_files": [
   {
    "path": "agi-governance/config/policy.immutable.toml",
    "plane": "agi-governance",
    "tier": "T3"
   },
   {
    "path": "agi-governance/keys/agent.zero-priv.blob",
    "plane": "agi-governance",
    "tier": "T3"
   },
   {
    "path": "agi-governance/gates/killswitch.trigger.sh",
    "plane": "agi-governance",
    "tier": "T3"
   },
   {
    "path": "agi-arc-3-epb/core/invariants.sha512",
    "plane": "agi-arc-3-epb",
    "tier": "T3"
   },
   {
    "path": "agi-arc-3-epb/eval/external.arbiter.bin",
    "plane": "agi-arc-3-epb",
    "tier": "T3"
   },
   {
    "path": "agi-arc-3-epb/redteam/attack.surface.yaml",
    "plane": "agi-arc-3-epb",
    "tier": "T2"
   },
   {
    "path": "agi-arc-3-epb/telemetry/canary.metrics.json",
    "plane": "agi-arc-3-epb",
    "tier": "T2"
   },
   {
    "path": "agi-system/mutation/sandbox.fence.def",
    "plane": "agi-system",
    "tier": "T2"
   },
   {
    "path": "agi-system/resource/budget.hard.limit",
    "plane": "agi-system",
    "tier": "T3"
   },
   {
    "path": "agi-system/state/checkpoint.pre.gate",
    "plane": "agi-system",
    "tier": "T1"
   }
  ],
  "schema": "agi-arch-gates/0.1",
  "tier_policy": {
   "T0": "auto-apply, no gate",
   "T1": "auto only after tests pass + critic sign-off",
   "T2": "auto only after external eval + redteam + canary + cooling period",
   "T3": "immutable to the agent; changed ONLY by human credential, never by instruction"
  }
 },
 "gap.json": {
  "measured_at": "2026-10-05",
  "method": "live probes only; every row carries a receipt",
  "rows": [
   {
    "current": "agent-readable secrets on this box: EON_AUTH_TOKEN hardcoded at worker.js:3626, CF_TOKEN+BEARER+GH_TOKEN in EON_COMPLETE_MEMORY_20261001_FINAL_v3.md:75-79",
    "id": "G1",
    "plane": "governance",
    "receipt": "grep -c f8805b63 worker.js live-worker.js => 1; used successfully this session",
    "status": "VIOLATED",
    "target": "agents hold NO credentials (T3 enforced by keys)"
   },
   {
    "current": "no budget plane; CF free plan is the only cap",
    "id": "G2",
    "plane": "governance",
    "receipt": "no controls/ dir anywhere in home",
    "status": "ABSENT",
    "target": "budget.yaml hard cap in a plane agents cannot edit"
   },
   {
    "current": "no killswitch reachable without MCP_ADMIN_TOKEN",
    "id": "G3",
    "plane": "governance",
    "receipt": "MCP tools return unauthorized: valid auth required",
    "status": "ABSENT",
    "target": "killswitch failing closed"
   },
   {
    "current": "agi-arc3-epb-evaluator worker EXISTS, /health ok, but TASK_STORE/RECEIPT_STORE KV bindings never applied",
    "id": "G4",
    "plane": "evaluator",
    "receipt": "receipts ns 1149f07f.. keys=0; tasks ns has only my cap-probe",
    "status": "PARTIAL",
    "target": "external EPB evaluator, ground truth outside agent tree"
   },
   {
    "current": "no tasks_heldout, no keys/ with Ed25519, signing.md not implemented",
    "id": "G5",
    "plane": "evaluator",
    "receipt": "no agi-arc-3-epb dirs on box",
    "status": "ABSENT",
    "target": "hidden rotating tasks_heldout + signing keys"
   },
   {
    "current": "watchdog-ish only: keeper 15-min Actions + CF cron ~20min; no task loop, no learning loop, no self-build pipeline",
    "id": "G6",
    "plane": "system",
    "receipt": "keeper lastTick live, loop:14; no loops/ dir",
    "status": "PARTIAL",
    "target": "4 bounded loops (task/learning/self_build/watchdog)"
   },
   {
    "current": "ABSENT entirely",
    "id": "G7",
    "plane": "system",
    "receipt": "no evolution/ or proposals/ anywhere",
    "status": "ABSENT",
    "target": "self-build: sandbox -> redteam -> canary -> rollback -> lineage"
   },
   {
    "current": "AGI gates 13/13 is a SCORECARD, not an enforcement gate",
    "id": "G8",
    "plane": "system",
    "receipt": "EON_COMPLETE_MEMORY v3 section 7",
    "status": "MISMATCH",
    "target": "gate tiers T0-T3 as enforcement"
   },
   {
    "current": "BOTH recorded GH tokens dead",
    "id": "G9",
    "plane": "runtime",
    "receipt": "2x Bad credentials (ghp_Si0Y.. and .eon-keys/GITHUB_TOKEN)",
    "status": "BROKEN",
    "target": "0-local: GitHub Actions = gate runner, phone off"
   },
   {
    "current": "hard-stopped at 100/100 free cap",
    "id": "G10",
    "plane": "runtime",
    "receipt": "CF PUT => error 10037 this session",
    "status": "BLOCKED",
    "target": "new workers/services provisioned by the system"
   },
   {
    "current": "e2b/ubuntu-alternative report configured: [] - zero backend keys",
    "id": "G11",
    "plane": "runtime",
    "receipt": "GET /backends + /health configured:[]",
    "status": "BLOCKED",
    "target": "cloud code execution for build"
   },
   {
    "current": "keeper scheduled() runs ungated heal() every ~20min - unsupervised platform-mutating deployer with no gate",
    "id": "G12",
    "plane": "system",
    "receipt": "twin-memory keeper analysis (gated /heal, ungated scheduled)",
    "status": "UNSAFE",
    "target": "untrusted-input handling on self-build loop"
   }
  ],
  "schema": "agi-arch-gap/0.1",
  "summary": {
   "absent": 6,
   "blocked": 2,
   "broken": 1,
   "mismatch": 1,
   "partial": 2,
   "unsafe": 1,
   "violated": 1
  }
 },
 "lanes.json": {
  "lanes": [
   {
    "alive": false,
    "lane": "MCP admin tools (workers_deploy/team_run/delegate_swarm/ghost_remember)",
    "receipt": "unauthorized: valid auth required; MCP_ADMIN_TOKEN is a write-only CF secret (unreadable by design)"
   },
   {
    "alive": false,
    "lane": "GitHub Actions (prior 0-local backbone)",
    "receipt": "2x Bad credentials"
   },
   {
    "alive": false,
    "lane": "Cloudflare Workers CREATE",
    "receipt": "error 10037 free cap 100/100 (live PUT)"
   },
   {
    "alive": false,
    "lane": "cloud code executors (e2b/ubuntu-alternative)",
    "receipt": "configured: []"
   },
   {
    "alive": true,
    "capability": "text/JSON authoring only, NO SHELL",
    "lane": "delegate/to-cloud LLM orchestrator",
    "receipt": "ok:true task delegate-1791204379948-pmc03o; code_executor returned NO-SHELL"
   },
   {
    "alive": true,
    "capability": "durable 0-local storage, read+write",
    "lane": "Cloudflare KV (this namespace)",
    "receipt": "PUT 200 + readback; bulk endpoint 405 => one key at a time"
   }
  ],
  "probed_at": "2026-10-05",
  "question": "can EON build+run the target arch with 0 local and 0 human?",
  "schema": "agi-arch-lanes/0.1",
  "single_unblock": "one valid GitHub token with repo+actions scope (or MCP_ADMIN_TOKEN, or a paid CF plan) turns the whole chain 0-local 0-human",
  "verdict": "NO - not end to end. 4 of 6 build lanes are dead; 1 is text-only; 1 (this KV) works for storage only."
 }
}