Trust survival
Starter Runtime Mission 3
Operational Survivability Intelligence
- Trust band: OBSERVE_ONLY
- Authority: Bounded
- Recovery: Enabled
- Replay: Available
- Autonomy expansion: Disabled
- Governance tier: Tier A
Provisioned via starter onboarding — preview governance records and trust evidence only. Does not unlock gmail.send, Tier B execution, or Phase 5 authority expansion.
Ops Reflex Monitor
observe_onlyops_reflex_v1
Trust contract preview for declared authority boundaries. ReflexFlow may describe workflow authority before it is allowed to enforce it.
Dry run (simulation) →Recovery simulation (HITL) →Controlled execution (Tier A) →Trust expansion governance →Longitudinal trust intelligence →
Trust contract preview
observe_onlyAuthority boundaries and recovery posture as declared — preview only, not enforced.
- Risk tier
- A (autonomous)
- Max turns
- 3 (tier default 3)
- Trust threshold
- 0.65
- Preview warnings
- 2
Allowed tools
- metrics_read
- alert_query
Allowed actions
- summarize
- correlate
Forbidden actions
—
Human checkpoint rules
- require_before_execute: false
- require_on_trust_drop: true
- require_on_forbidden_action: true
Escalation & recovery
- failure_escalation: incident_record
- rollback_strategy: none
- retry_policy: max_retries=0, backoff_seconds=0
TrustGraph preview
observe_onlyRead-only observe_only graph: template → tools → HITL checkpoints. Not a live TrustGraph runtime surface.
Nodes
- workflow_template · Ops Reflex Monitor
- tool · metrics_read
- tool · alert_query
- hitl_checkpoint · trust_drop
- hitl_checkpoint · forbidden_action
Edges
- template:ops_reflex_v1 → tool:metrics_read [allowed_tool]
- template:ops_reflex_v1 → tool:alert_query [allowed_tool]
- template:ops_reflex_v1 → hitl:trust_drop [human_checkpoint]
- template:ops_reflex_v1 → hitl:forbidden_action [human_checkpoint]
Contract validator
observe_onlyops_reflex_v1Read-only preview validation via parseWorkflowTemplateV0. No mutations or enforcement.
Preview GhostLog
observe_onlyPreview events only — not enforcement. These events are not persisted to production GhostLog tables.
- workflow_contract.loaded2026-05-28T00:48:31.605Z
{ "sourceFile": "packages/sdk/schemas/examples/ops_reflex_v1.yaml" } - workflow_contract.validated2026-05-28T00:48:31.606Z
{ "valid": true, "errorCount": 0, "warningCount": 2 } - workflow_contract.risk_previewed2026-05-28T00:48:31.606Z
{ "riskLevel": "A", "riskPosture": "autonomous", "maxTurns": 3, "tierDefaultMaxTurns": 3 }