World-Class Evidence Preflight
This operator view shows which external and human evidence is still blocked, which commands prepare editable submission drafts, and why preflight never counts as accepted evidence.
Submission Kit
Generate drafts only after real provider, human-review, native-permission, or native-client work exists. Drafts remain non-evidence until valid aggregate artifact refs and SHA-256 digests are supplied. Artifact prefill is convenience data only.
- submissions directory:
evidence/world_class/submissions - drafts count as evidence:
false - artifact prefill counts as evidence:
false - preflight accepts evidence:
false
submission-ref
7/7 readyRows marked submission-ref are the aggregate paths expected in artifact_refs.
copy to artifact_refs:true
supporting-evidence
31/31 readySupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
copy to artifact_refs:false
submission-ref rows are the paths expected in artifact_refs; supporting-evidence rows stay available for audit context.
Phase Queue
Repair rows are grouped into execution phases so operators can clear the first blocker before moving to later source collection. Phase queue rows remain procedural and never count as accepted evidence.
Unblock access
- Phase
unblock-access- Rows
- 4 / 4 blocked
- Owners
- Browser/Chrome/IDE/provider client integrator, human reviewer, operator with provider credentials, target client or installer integrator
- Evidence
- human-adjudication, native-client-telemetry, native-permission-enforcement, provider-holdout
- Next
- Assign a real reviewer identity before claiming human adjudication.
- Verify
python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Counts
- does not count as completion
Collect source
- Phase
collect-source- Rows
- 7 / 7 blocked
- Owners
- Browser/Chrome/IDE/provider client integrator, human reviewer, target client or installer integrator
- Evidence
- human-adjudication, native-client-telemetry, native-permission-enforcement
- Next
- Set reviewer_attestation only after choices are completed before opening the answer key.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Counts
- does not count as completion
Evidence Queue
Provider Holdout
Artifact Roles
submission-ref
1/1 readyRows marked submission-ref are the aggregate paths expected in artifact_refs.
copy to artifact_refs:true
supporting-evidence
6/6 readySupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
copy to artifact_refs:false
Prechecks
- Current
present- Status
- pass
- Action
- Keep output holdout cases available before provider execution.
- Current
present- Status
- pass
- Action
- Use the provider runner instead of the local command runner for model-backed evidence.
- Current
not-set- Status
- missing
- Action
- Set one provider API key in the operator shell, such as OPENAI_API_KEY or DEEPSEEK_API_KEY; never commit or print the value.
- Current
not-set- Status
- optional
- Action
- Optionally set YAO_OUTPUT_EVAL_MODEL, or pass --provider-model for the selected provider.
Source Checks
- Current
10- Expected
>0- Status
- pass
- Action
- Run provider-backed output-exec with real credentials.
- Current
10- Expected
>0- Status
- pass
- Action
- Provider execution should record timing metadata.
- Current
10- Expected
>0- Status
- pass
- Action
- Provider execution should return non-estimated token usage.
Repair Rows
- Priority
- 20
- Phase
- unblock-access
- Owner
- operator with provider credentials
- Status
- blocked
- Reason
- Required env_any precheck is missing.
- Action
- Set one provider API key in the operator shell, such as OPENAI_API_KEY or DEEPSEEK_API_KEY; never commit or print the value.
- Verify
python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
Runbook
- Set one provider API key in the operator shell, such as OPENAI_API_KEY or DEEPSEEK_API_KEY; never commit or print the value.
- For OpenAI Responses: python3 scripts/yao.py output-exec --provider-runner openai --provider-model ${YAO_OUTPUT_EVAL_MODEL:-gpt-4.1-mini} --timeout-seconds 60
- For DeepSeek Chat Completions: python3 scripts/yao.py output-exec --provider-runner deepseek --provider-model deepseek-v4-flash --provider-api-format chat-completions --provider-thinking disabled --api-key-env DEEPSEEK_API_KEY --timeout-seconds 120
- python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>
- Copy evidence/world_class/templates/provider-holdout.intake.json to evidence/world_class/submissions/provider-holdout.json and fill only real evidence fields.
- python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions
Human Adjudication
Artifact Roles
submission-ref
2/2 readyRows marked submission-ref are the aggregate paths expected in artifact_refs.
copy to artifact_refs:true
supporting-evidence
8/8 readySupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
copy to artifact_refs:false
Prechecks
- Current
present- Status
- pass
- Action
- Open the blind review kit and record real reviewer choices with required rationale.
- Current
present- Status
- pass
- Action
- Import real A/B decisions with reviewer, reviewed_at, winner_variant, confidence, reason, and truthful blind-review attestation via `python3 scripts/yao.py output-review-import --input <reviewer-decisions.json> --blind-review-attested --run-adjudication`.
- Current
present- Status
- pass
- Action
- Use the importer to reject raw content fields and normalize reviewer decisions before adjudication.
- Current
external-human-action- Status
- human-required
- Action
- Assign a real reviewer identity before claiming human adjudication.
Source Checks
- Current
5- Expected
>0- Status
- pass
- Action
- Generate the blind A/B review pack.
- Current
5- Expected
==0- Status
- blocked
- Action
- Record a reviewer choice and reason for every pair.
- Current
0- Expected
==pair_count- Status
- blocked
- Action
- Every pair needs one valid human judgment.
- Current
0- Expected
==0- Status
- pass
- Action
- Fix malformed winner/confidence entries.
- Current
False- Expected
true- Status
- blocked
- Action
- Record reviewer and reviewed_at before adjudication can count.
- Current
True- Expected
true- Status
- pass
- Action
- Keep reason mandatory for every imported or direct reviewer decision.
- Current
False- Expected
true- Status
- blocked
- Action
- Set reviewer_attestation only after choices are completed before opening the answer key.
- Current
True- Expected
true- Status
- pass
- Action
- Attest that reviewer decisions exclude raw prompts, outputs, transcripts, messages, and private user content.
- Current
False- Expected
false- Status
- pass
- Action
- Adjudication evidence should store prompt hashes and reviewer metadata, not raw prompts, outputs, transcripts, or messages.
- Current
False- Expected
true- Status
- blocked
- Action
- Complete all reviewer decisions with metadata and rationale, plus blind-review attestation and integrity fingerprints.
Repair Rows
- Priority
- 20
- Phase
- unblock-access
- Owner
- human reviewer
- Status
- blocked
- Reason
- Required human precheck is human-required.
- Action
- Assign a real reviewer identity before claiming human adjudication.
- Verify
python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- human reviewer
- Status
- blocked
- Reason
- Current value False does not satisfy 'true'.
- Action
- Set reviewer_attestation only after choices are completed before opening the answer key.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- human reviewer
- Status
- blocked
- Reason
- Current value 0 does not satisfy '==pair_count'.
- Action
- Every pair needs one valid human judgment.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- human reviewer
- Status
- blocked
- Reason
- Current value 5 does not satisfy '==0'.
- Action
- Record a reviewer choice and reason for every pair.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- human reviewer
- Status
- blocked
- Reason
- Current value False does not satisfy 'true'.
- Action
- Complete all reviewer decisions with metadata and rationale, plus blind-review attestation and integrity fingerprints.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- human reviewer
- Status
- blocked
- Reason
- Current value False does not satisfy 'true'.
- Action
- Record reviewer and reviewed_at before adjudication can count.
- Verify
python3 scripts/yao.py output-review && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
Runbook
- python3 scripts/yao.py output-review-kit --write-template
- Open reports/output_review_kit.md and choose A or B for each pair without opening the answer key.
- python3 scripts/adjudicate_output_review.py --write-template
- Record reviewer choices in a separate JSON, JSONL, or CSV decision source with reviewer, reviewed_at, case_id, winner_variant, confidence, required reason, and truthful reviewer_attestation only.
- python3 scripts/yao.py output-review-import --input <reviewer-decisions.json> --blind-review-attested --run-adjudication
- python3 scripts/yao.py output-review
- python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>
- Copy evidence/world_class/templates/human-adjudication.intake.json to evidence/world_class/submissions/human-adjudication.json and fill only real evidence fields.
- python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions
Native Permission Enforcement
Artifact Roles
submission-ref
2/2 readyRows marked submission-ref are the aggregate paths expected in artifact_refs.
copy to artifact_refs:true
supporting-evidence
11/11 readySupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
copy to artifact_refs:false
Prechecks
- Current
present- Status
- pass
- Action
- Keep approved high-permission capabilities explicit.
- Current
present- Status
- pass
- Action
- Refresh runtime permission probes after packaging changes.
- Current
external-integration-required- Status
- external-required
- Action
- Attach a real target-client or external installer runtime guard; metadata fallback is not enough.
Source Checks
- Current
0- Expected
>0- Status
- blocked
- Action
- Collect real target-client or external runtime guard proof.
- Current
0- Expected
==0- Status
- pass
- Action
- Runtime permission probes must stay clean.
- Current
True- Expected
true- Status
- pass
- Action
- Installer enforcement is supporting evidence, not native proof.
Repair Rows
- Priority
- 20
- Phase
- unblock-access
- Owner
- target client or installer integrator
- Status
- blocked
- Reason
- Required external precheck is external-required.
- Action
- Attach a real target-client or external installer runtime guard; metadata fallback is not enough.
- Verify
python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- target client or installer integrator
- Status
- blocked
- Reason
- Current value 0 does not satisfy '>0'.
- Action
- Collect real target-client or external runtime guard proof.
- Verify
python3 scripts/yao.py runtime-permissions . --package-dir dist && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
Runbook
- Implement or connect a real target client or external installer runtime guard that blocks undeclared network, file_write, or subprocess capabilities.
- Update the generated target adapter only when the guard is actually enforced by that target.
- python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip
- python3 scripts/yao.py install-simulate . --package-dir dist --install-root dist/install-simulation
- python3 scripts/yao.py runtime-permissions . --package-dir dist
- python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>
- Copy evidence/world_class/templates/native-permission-enforcement.intake.json to evidence/world_class/submissions/native-permission-enforcement.json and fill only real evidence fields.
- python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions
Native Client Telemetry
Artifact Roles
submission-ref
2/2 readyRows marked submission-ref are the aggregate paths expected in artifact_refs.
copy to artifact_refs:true
supporting-evidence
6/6 readySupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
copy to artifact_refs:false
Prechecks
- Current
present- Status
- pass
- Action
- Use the native host to receive metadata-only client events.
- Current
present- Status
- pass
- Action
- Refresh telemetry hook recipes before external client installation.
- Current
external-integration-required- Status
- external-required
- Action
- Install a real Browser, Chrome, IDE, or provider client that emits metadata-only events.
Source Checks
- Current
0- Expected
>0- Status
- blocked
- Action
- Import at least one metadata-only event from a real client.
- Current
1- Expected
>0- Status
- pass
- Action
- Telemetry must include adoption outcome evidence.
- Current
False- Expected
false- Status
- pass
- Action
- Telemetry must stay metadata-only.
Repair Rows
- Priority
- 20
- Phase
- unblock-access
- Owner
- Browser/Chrome/IDE/provider client integrator
- Status
- blocked
- Reason
- Required external precheck is external-required.
- Action
- Install a real Browser, Chrome, IDE, or provider client that emits metadata-only events.
- Verify
python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
- Priority
- 40
- Phase
- collect-source
- Owner
- Browser/Chrome/IDE/provider client integrator
- Status
- blocked
- Reason
- Current value 0 does not satisfy '>0'.
- Action
- Import at least one metadata-only event from a real client.
- Verify
python3 scripts/yao.py telemetry-import . --input-jsonl .yao/telemetry_spool/external_events.jsonl && python3 scripts/yao.py world-class-preflight . --submissions-dir evidence/world_class/submissions- Evidence
- does not count as completion
Runbook
- python3 scripts/telemetry_native_host.py . --write-launcher /tmp/yao-telemetry-host.sh --write-manifest /tmp/yao-telemetry-host.json --allowed-origin chrome-extension://<extension-id>/
- Install the generated native messaging manifest for the real client and send at least one accepted skill_activation or skill_output event.
- python3 scripts/yao.py telemetry-import . --input-jsonl .yao/telemetry_spool/external_events.jsonl
- python3 scripts/yao.py skill-atlas --workspace-root .
- python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>
- Copy evidence/world_class/templates/native-client-telemetry.intake.json to evidence/world_class/submissions/native-client-telemetry.json and fill only real evidence fields.
- python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions
Safety Boundary
- Environment variables are displayed only as set or not-set; secret values are never printed.
- Human-required and external-required states are operator work, not accepted evidence.
- The world-class ledger remains the only source of truth for ready_to_claim_world_class.