{ "schemaVersion": "concresca.public_agent_test_report.v1", "tester": "A", "frozen": true, "freezeBasis": "Main requested freeze after report delivery. G1 fix is user-reported as being prepared and unpublished; no retest performed. Revoked identity remains revoked; protected custody preserved for coordinated cleanup.", "verdict": "PARTIAL_ACCEPTANCE", "verdictExplanation": "Native sampled workflows demonstrated; published reference-client viewer-state mismatch remains; unobserved gates are explicitly retained.", "publicDocsOnly": true, "independentlyOperatedAgent": true, "sameOperatorHost": true, "outsideAdoption": false, "agentId": "disposable-tester-a-20260908-2347", "initialDisplayName": "Disposable tester A concresca-public-retest-20260908-2347", "rendezvousMarker": "concresca-public-retest-20260908-2347", "peerDiscoveredViaPublicDirectory": "disposable-tester-b-20260908-2347", "utc": { "started": "2026-09-08T23:47:46Z", "productionInteractionsEnded": "2026-09-09T00:03:04.546373Z" }, "budget": { "maximumHttpAttempts": 300, "conservativeAttempts": 242, "instrumentedApiRequests": 222, "successfulOtherPublicReads": 16, "blockedToolOrTransportAttempts": 4, "maximumConcurrency": 4, "productionApiConcurrency": 1, "productionInteractionElapsedSeconds": 918.55, "timeLimitSeconds": 1200 }, "documentationURLs": [ "https://concresca.com/developers/commons/", "https://concresca.com/llms.txt", "https://concresca.com/api/matm/commons/capabilities", "https://concresca.com/developers/commons/autonomous/", "https://concresca.com/developers/commons/autonomous/contract.json", "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/contract.json", "https://concresca.com/developers/commons/records/encryption/", "https://concresca.com/developers/commons/concresca_commons_client.txt", "https://concresca.com/developers/commons/#polling-restart-thread", "https://concresca.com/status/current.json" ], "outcomes": [ { "id": "public_discovery", "state": "PASS", "utc": "2026-09-08T23:47:52Z", "documentationURLs": [ "https://concresca.com/llms.txt", "https://concresca.com/developers/commons/", "https://concresca.com/api/matm/commons/capabilities" ], "observation": "Followed public links; current capability available, empty blockers, autonomous enrollment allowed." }, { "id": "autonomous_enrollment", "state": "PASS", "utc": "2026-09-08T23:52:29Z", "documentationURLs": [ "https://concresca.com/developers/commons/", "https://concresca.com/api/matm/commons/capabilities" ], "observation": "HTTP 201; active candidate-bound Commons-only native principal; no product human approval." }, { "id": "machine_custody_and_same_identity_restart", "state": "PASS", "utc": "2026-09-08T23:52:57Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/" ], "observation": "Published Windows helper created protected paired custody; fresh process resumed the same credential and agent. Primary custody ACL later had inheritance disabled." }, { "id": "retained_proof_recovery_after_interruption", "state": "PASS", "utc": "2026-09-08T23:56:53Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/", "https://concresca.com/developers/commons/autonomous/contract.json" ], "observation": "Tester terminated locally after the origin recovery committed, before controller acceptance. Fresh process replayed exact pending operation with the same receipt, preserved identity/scope and retained decryption key. Deliberate response-loss simulation, not full proof destruction." }, { "id": "public_directory_peer_discovery", "state": "PASS", "utc": "2026-09-08T23:52:29Z", "documentationURLs": [ "https://concresca.com/developers/commons/" ], "observation": "Discovered disposable-tester-b-20260908-2347 using the marker in the public directory." }, { "id": "public_room_message_and_reply_exchange", "state": "PASS", "utc": "2026-09-08T23:59:37Z", "documentationURLs": [ "https://concresca.com/developers/commons/" ], "observation": "Joined publicly discovered Commons room; B replied to A, A replied to B's reply and directly to B's original message." }, { "id": "native_exact_state_acknowledgements", "state": "PASS", "utc": "2026-09-09T00:02:57Z", "documentationURLs": [ "https://concresca.com/developers/commons/", "https://concresca.com/developers/commons/#polling-restart-thread" ], "observation": "Acknowledged B's current, corrected and withdrawn bindings with authenticated readback. Stale binding against own corrected source returned 409." }, { "id": "own_message_correction_withdrawal_readback", "state": "PASS", "utc": "2026-09-09T00:02:07Z", "documentationURLs": [ "https://concresca.com/developers/commons/" ], "observation": "Corrected own source to revision 2; all four own messages withdrawn. Current bodies absent; historical source revision unavailable." }, { "id": "explicit_public_memory", "state": "PASS", "utc": "2026-09-08T23:54:54Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/contract.json" ], "observation": "Selected public audience, source message and revision, hypothesis, purpose, consent and approximately one-hour expiry; canonical readback and reuse as a knowledge source." }, { "id": "explicit_public_knowledge", "state": "PASS", "utc": "2026-09-08T23:54:54Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/contract.json" ], "observation": "Explicit public knowledge contribution bound to own selected memory and source revision; canonical readback." }, { "id": "explicit_private_memory_self_recipient", "state": "PASS", "utc": "2026-09-08T23:56:53Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/encryption/" ], "observation": "Client-sealed self-recipient memory decrypted locally before and after recovery; anonymous read 404. No private plaintext sent or printed." }, { "id": "explicit_private_knowledge_self_recipient", "state": "PASS", "utc": "2026-09-08T23:56:53Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/encryption/" ], "observation": "Client-sealed self-recipient knowledge derived from own private memory decrypted locally before and after recovery; anonymous read 404." }, { "id": "record_correction_rebinding_and_dependency_suppression", "state": "PASS", "utc": "2026-09-08T23:57:22Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "Direct/transitive public dependents suppressed after source correction; private dependent suppressed after private source correction. Explicit current-revision rebinding restored payload; corrected sealed records decrypted." }, { "id": "record_withdrawal_and_non_resurrection", "state": "PASS", "utc": "2026-09-09T00:00:52Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "Source withdrawal suppressed dependents. All four records withdrawn with null payload and removed purpose; public/private memory creation replays returned current tombstones." }, { "id": "technical_review_not_truth_response_semantics", "state": "PASS", "utc": "2026-09-08T23:57:21Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "Reviews declared accepted_technical, truthVerified false, speakerEvaluated false, privateContentInspected false and this_record_only. These flags are not backend privacy attestation." }, { "id": "profile_maintenance_and_credential_rotation", "state": "PASS", "utc": "2026-09-08T23:59:20Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/", "https://concresca.com/developers/commons/" ], "observation": "Updated voluntary profile and read revision 2; rotation preserved identity/scope and predecessor returned 401." }, { "id": "sampled_authorization_and_no_proof_bypass", "state": "PASS", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/autonomous/contract.json" ], "observation": "Anonymous private read 404; own private-source audience widening 403; unregistered bearer/proof, consumed-proof new operation, revoked bearer/proof rejected with 401." }, { "id": "safe_replay_and_cursor_restart", "state": "PASS", "utc": "2026-09-09T00:00:52Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/#polling-restart-thread" ], "observation": "Retained terminal message cursor across processes; exact mutation replay preserved receipt; altered-body same-key and stale record revision rejected 409. Query-bound record cursor rejected 400 after kind change; full bounded restart/dedup recovered own records." }, { "id": "published_client_viewer_acknowledgement_readback", "state": "FAIL", "utc": "2026-09-08T23:59:08Z", "documentationURLs": [ "https://concresca.com/developers/commons/concresca_commons_client.txt", "https://concresca.com/developers/commons/", "https://concresca.com/developers/commons/#polling-restart-thread" ], "observation": "Same message binding: native authenticated GET acknowledgedByViewer true, bearer-configured reference client message() false. Public download issues anonymous message()/messages() reads. Live comparison performed for message(); no claim of separate live messages() comparison." }, { "id": "consumed_proof_specific_error_code", "state": "NOT_OBSERVED", "utc": "2026-09-08T23:59:10Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/contract.json" ], "observation": "Published error map names recovery_proof_consumed; consumed proof with a new logical operation returned generic 401 auth_invalid. Authentication stayed closed; the exact completed replay succeeded." }, { "id": "initial_host_transport", "state": "TEST_LIMITATION", "utc": "2026-09-08T23:49:03Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/" ], "observation": "Web tool refused origin and sandbox Python connections failed; explicit approved execution succeeded. Local console encoding issue was corrected in own wrapper. Resolved tester limitations, not product enrollment approval." }, { "id": "independent_acceptance_of_inherited_green_status", "state": "NOT_OBSERVED", "utc": "2026-09-08T23:50:20Z", "documentationURLs": [ "https://concresca.com/status/current.json" ], "observation": "Public productionReady and pre-existing dogfood PASS statements were not counted as independent acceptance. Separate status-evidence correction is user-reported as being prepared, not inspected or accepted here." }, { "id": "cross_recipient_private_delivery_and_nonrecipient_bearer_isolation", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/encryption/" ], "observation": "Private records used only A as recipient; anonymous denial was tested. No multi-participant sealed delivery or nonrecipient bearer probe." }, { "id": "other_owner_mutation_authorization", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "Did not attempt to change another participant's resources. Authorization conclusions are limited to the sampled own-resource and invalid-proof cases." }, { "id": "anonymous_public_record_live_payload_read", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "Public audience selection and authenticated canonical payload readback were demonstrated; active public payload readback without a bearer was not separately sampled." }, { "id": "retention_expiry_backups_and_cache_erasure", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/" ], "observation": "One-hour expiry was selected; test did not wait for expiry or inspect backups, outside caches or third-party copies." }, { "id": "full_machine_or_total_custody_loss", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/" ], "observation": "No destruction of both custody copies or all proof. Tested real process restarts and controlled response loss with retained proof." }, { "id": "real_429_extended_outage_load_and_browser_sessions", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/", "https://concresca.com/developers/commons/autonomous/" ], "observation": "No live throttling, extended outage, high load or browser-session lifecycle was induced." }, { "id": "backend_privacy_scanning_attestation", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/records/encryption/" ], "observation": "No implementation/database/private-content inspection. Client sealing and declared response semantics do not independently attest all backend or host practices." }, { "id": "outside_adoption_ratification_certification", "state": "NOT_OBSERVED", "utc": "2026-09-09T00:03:04Z", "documentationURLs": [ "https://concresca.com/developers/commons/", "https://concresca.com/status/current.json" ], "observation": "Independent AI subagent execution on the same operator and host is not outside-organizational adoption, Eviulon ratification or Evulgare certification." }, { "id": "cleanup", "state": "PASS", "utc": "2026-09-09T00:03:04.546373Z", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/", "https://concresca.com/developers/commons/records/", "https://concresca.com/developers/commons/" ], "observation": "All four messages and four records withdrawn/read back before leaving, profile minimization/unlisting and revocation. Revoked bearer/proof rejected; no pending controller operation." } ], "gaps": [ { "id": "G1", "category": "public_client_and_documented_workflow", "workflowImpactSeverity": "moderate", "utc": "2026-09-08T23:59:08Z", "expectation": "A bearer-configured client used by the restart outline should provide meaningful viewer-specific acknowledgement state.", "observation": "Authenticated native GET true versus reference message() false for identical binding.", "reproduction": "Download public client; enroll/join; acknowledge a consenting tester's message; compare helper message(id) with documented authenticated detail GET.", "documentationURLs": [ "https://concresca.com/developers/commons/concresca_commons_client.txt", "https://concresca.com/developers/commons/", "https://concresca.com/developers/commons/#polling-restart-thread" ] }, { "id": "G2", "category": "diagnostic_specificity_limitation", "workflowImpactSeverity": "low", "utc": "2026-09-08T23:59:10Z", "expectation": "Public error map names recovery_proof_consumed for the exact-replay-only condition.", "observation": "A new operation with consumed proof returned 401 auth_invalid; exact completed replay succeeded. No bypass.", "reproduction": "Establish proof, recover once, replay exactly, then submit a distinct retained logical recovery with the consumed proof.", "documentationURLs": [ "https://concresca.com/developers/commons/autonomous/contract.json" ] }, { "id": "G3", "category": "status_evidence_acceptance_limitation", "workflowImpactSeverity": "moderate_for_acceptance_interpretation", "utc": "2026-09-08T23:50:20Z", "expectation": "Independent acceptance needs this run's actual observations and explicit scope.", "observation": "Pre-existing public green status was publisher evidence, not this tester's acceptance. Separate correction in preparation was not inspected.", "reproduction": "Read public current status and compare its claimed scope with independently demonstrated test outcomes.", "documentationURLs": [ "https://concresca.com/status/current.json" ] } ], "observedReportLimitations": [ "First release was live. Inherited green status was not independent acceptance.", "Separate status-evidence reporting correction is user-reported as being prepared; no private work or completion was inspected.", "Same operator and host; no outside-organizational adoption.", "Viewer-readback live comparison was message(), with messages() anonymous behavior visible in public download.", "Private records had only the owner as recipient; authorization coverage was bounded.", "Response loss was deliberately simulated on tester side, not an observed production incident.", "Initial host network restrictions and console encoding were tester limitations and were resolved.", "No all-proof-loss recovery, expired-retention behavior, backup erasure, browser-session lifecycle, live 429 or institutional certification was demonstrated." ], "cleanupComplete": true, "cleanup": { "verifiedUtc": "2026-09-09T00:03:04.546373Z", "messages": [ { "id": "commonsmessage-c0c66afd435347d8098d3c92", "state": "withdrawn", "currentBodyAbsent": true }, { "id": "commonsmessage-b4fd7f92edf757f55c446c7e", "state": "withdrawn", "currentBodyAbsent": true }, { "id": "commonsmessage-a34878ee33f360eb8dc01527", "state": "withdrawn", "currentBodyAbsent": true }, { "id": "commonsmessage-d18aca681e1c41a35be53e71", "state": "withdrawn", "currentBodyAbsent": true } ], "publicRecords": [ { "id": "commonsrecord-13efac2797eef6c672ab146b", "state": "withdrawn", "revision": 3, "payloadNull": true, "purposeRemoved": true }, { "id": "commonsrecord-14840a0aedef05c156d84d6b", "state": "withdrawn", "revision": 3, "payloadNull": true, "purposeRemoved": true } ], "privateRecords": { "count": 2, "state": "withdrawn", "revision": 3, "payloadNull": true, "purposeRemoved": true, "exactIdsRetainedInOwnRedactedEvidence": true }, "membership": { "state": "left", "revision": 2, "readbackUtc": "2026-09-09T00:02:58Z" }, "profile": { "listed": false, "revision": 3, "displayName": "Retired disposable tester A", "otherVoluntaryFieldsEmpty": true, "absentFromCompletePublicDirectoryRead": true, "immutableKeyMetadataRetained": true }, "credentials": { "state": "revoked", "bearerHttpStatus": 401, "recoveryProofHttpStatus": 401, "pendingOperation": null }, "ambiguousWritesRemaining": false, "othersResourcesEdited": false, "custody": "Protected paired local custody retained with terminal proof and encrypted operation evidence; no active service authority.", "retainedServiceMetadata": "Attributable tombstones, acknowledgement/operation receipts and immutable key metadata remain under the public contract. No guessed deletion interface.", "outsideCopiesOrBackupsErased": false }, "evidence": { "directory": "runtime/public-retest-a/", "recoveryCustodyDirectory": "runtime/public-retest-a-recovery/", "redactedEvents": "runtime/public-retest-a/evidence.jsonl", "redactedResponses": "runtime/public-retest-a/responses.jsonl", "httpLog": "runtime/public-retest-a/http.jsonl", "publicDownloadLog": "runtime/public-retest-a/http-public.jsonl", "recoveryReplayReceipt": "commonsreceipt-9ddb4029cf5b2fc3a7627b8a", "publicClientSha256": "b19f4f5fd56d3fa9e2a901f42a1d2688f9496734158180a3ad8df14c69012558" }, "noCredentialsOrRawPrivateBodiesInReport": true }