Visitor · read-only — Signed-out view: timelines and snapshots load from this deployment's database only. Demo rows may be empty until a workspace is seeded.·Sign in·Get access·Home

Trust survival

← Template preview

Recovery simulation (HITL): Inbox Reflex Triage

simulation_onlyrecovery_designobserve_only

inbox_reflex_v1

Principle #04: A trustworthy workflow is not one that never fails. It is one that fails visibly, recoverably, and within bounded authority. This simulation carries no execution authority.

Dry run (simulation) →

HITL recovery state

simulation_onlyrecovery_design

Current: approved

Session: hitl-recovery-inbox_reflex_v1-1779932916817

  • awaiting_review → modified_by_human (edit)
  • modified_by_human → approved (approve)

Operator burden score (OBS)

simulation_onlyrecovery_designobserve_only

Lower OBS indicates higher workflow trust — operator intervention load is a trust signal.

35ELEVATED
Intervention frequency
80.0%
Retry density
0.0%
Escalation rate
0.0%
Correction load
50.0%
Friction proxy
25.3%

Recovery GhostLog trace

simulation_onlyrecovery_designobserve_only

Preview-only recovery events — not persisted to production GhostLog.

  1. workflow.hitl.review_requested2026-05-28T01:48:36.817Z
    {
  "seedScenario": "drift_at_turn_2",
  "driftTurn": 2,
  "reason": "simulated_drift_requires_human_review"
}
  2. workflow.hitl.modified2026-05-28T01:48:36.817Z
    {
  "action": "edit",
  "from": "awaiting_review",
  "to": "modified_by_human"
}
  3. workflow.recovery.stabilized2026-05-28T01:48:36.817Z
    {
  "finalState": "approved",
  "transitionCount": 2
}

TrustGraph recovery posture

simulation_onlyrecovery_designobserve_only

Overlay states: recovery_simulation

stabilizedrecoveryhealthy

Nodes

  • [stabilized] workflow_template · Inbox Reflex Triage
  • [recovery] operator · HITL reviewer (simulated)
  • [healthy] tool · email_read
  • [healthy] tool · thread_summarize
  • [recovery] hitl_checkpoint · trust_drop
  • [recovery] hitl_checkpoint · trust_drop

Edges

  • template:inbox_reflex_v1 → operator:hitl_reviewer [recovery_simulation]
  • template:inbox_reflex_v1 → tool:email_read [recovery_simulation]
  • template:inbox_reflex_v1 → tool:thread_summarize [recovery_simulation]
  • template:inbox_reflex_v1 → hitl:trust_drop:turn4 [recovery_simulation]
  • template:inbox_reflex_v1 → hitl:trust_drop:turn5 [recovery_simulation]

Recovery timeline

simulation_onlyrecovery_designobserve_only
  1. #0dry_runturn 0

    Dry-run simulation seeded recovery scenario

  2. #1drift_detectedturn 4state: awaiting_review

    Simulated drift at turn 4 (trust_drop)

  3. #2hitl_interventionstate: modified_by_human

    Operator edit: awaiting_review → modified_by_human

  4. #3hitl_interventionstate: approved

    Operator approve: modified_by_human → approved

  5. #4stabilizedstate: approved

    Recovery stabilized — workflow would resume under bounded authority