Visitor · read-only — Signed-out view: timelines and snapshots load from this deployment's database only. Demo rows may be empty until a workspace is seeded.·Sign in·Get access·Home

Trust survival

← Template preview

Recovery simulation (HITL): Ops Reflex Monitor

simulation_onlyrecovery_designobserve_only

ops_reflex_v1

Principle #04: A trustworthy workflow is not one that never fails. It is one that fails visibly, recoverably, and within bounded authority. This simulation carries no execution authority.

Dry run (simulation) →

HITL recovery state

simulation_onlyrecovery_design

Current: approved

Session: hitl-recovery-ops_reflex_v1-1779932890430

  • awaiting_review → modified_by_human (edit)
  • modified_by_human → approved (approve)

Operator burden score (OBS)

simulation_onlyrecovery_designobserve_only

Lower OBS indicates higher workflow trust — operator intervention load is a trust signal.

44ELEVATED
Intervention frequency
100.0%
Retry density
0.0%
Escalation rate
0.0%
Correction load
50.0%
Friction proxy
41.0%

Recovery GhostLog trace

simulation_onlyrecovery_designobserve_only

Preview-only recovery events — not persisted to production GhostLog.

  1. workflow.hitl.review_requested2026-05-28T01:48:10.430Z
    {
  "seedScenario": "drift_at_turn_2",
  "driftTurn": 2,
  "reason": "simulated_drift_requires_human_review"
}
  2. workflow.hitl.modified2026-05-28T01:48:10.430Z
    {
  "action": "edit",
  "from": "awaiting_review",
  "to": "modified_by_human"
}
  3. workflow.recovery.stabilized2026-05-28T01:48:10.430Z
    {
  "finalState": "approved",
  "transitionCount": 2
}

TrustGraph recovery posture

simulation_onlyrecovery_designobserve_only

Overlay states: recovery_simulation

stabilizedrecoveryhealthy

Nodes

  • [stabilized] workflow_template · Ops Reflex Monitor
  • [recovery] operator · HITL reviewer (simulated)
  • [healthy] tool · metrics_read
  • [healthy] tool · alert_query
  • [recovery] hitl_checkpoint · trust_drop
  • [recovery] hitl_checkpoint · trust_drop

Edges

  • template:ops_reflex_v1 → operator:hitl_reviewer [recovery_simulation]
  • template:ops_reflex_v1 → tool:metrics_read [recovery_simulation]
  • template:ops_reflex_v1 → tool:alert_query [recovery_simulation]
  • template:ops_reflex_v1 → hitl:trust_drop:turn2 [recovery_simulation]
  • template:ops_reflex_v1 → hitl:trust_drop:turn3 [recovery_simulation]

Recovery timeline

simulation_onlyrecovery_designobserve_only
  1. #0dry_runturn 0

    Dry-run simulation seeded recovery scenario

  2. #1drift_detectedturn 2state: awaiting_review

    Simulated drift at turn 2 (trust_drop)

  3. #2hitl_interventionstate: modified_by_human

    Operator edit: awaiting_review → modified_by_human

  4. #3hitl_interventionstate: approved

    Operator approve: modified_by_human → approved

  5. #4stabilizedstate: approved

    Recovery stabilized — workflow would resume under bounded authority