{
  "schema_version": "1.0",
  "ok": true,
  "generated_at": "2026-07-02",
  "skill_dir": ".",
  "decision": "evidence-pending",
  "ready_to_claim_world_class": false,
  "ledger_entry_count": 4,
  "source_accepted_count": 1,
  "accepted_count": 0,
  "pending_count": 4,
  "human_pending_count": 1,
  "external_pending_count": 3,
  "submitted_entry_count": 0,
  "reviewer_approved_submission_count": 0,
  "missing_submission_count": 4,
  "invalid_submission_count": 0,
  "source_check_count": 19,
  "source_pass_count": 12,
  "source_blocked_count": 7,
  "submitted_but_pending_count": 0,
  "source_accepted_without_valid_submission_count": 1,
  "overclaim_guard_active": true,
  "summary": {
    "ledger_entry_count": 4,
    "source_accepted_count": 1,
    "accepted_count": 0,
    "pending_count": 4,
    "human_pending_count": 1,
    "external_pending_count": 3,
    "submitted_entry_count": 0,
    "reviewer_approved_submission_count": 0,
    "missing_submission_count": 4,
    "invalid_submission_count": 0,
    "source_check_count": 19,
    "source_pass_count": 12,
    "source_blocked_count": 7,
    "submitted_but_pending_count": 0,
    "source_accepted_without_valid_submission_count": 1,
    "overclaim_guard_active": true,
    "ready_to_claim_world_class": false,
    "decision": "evidence-pending"
  },
  "report_contract": {
    "schema_version": "1.0",
    "contract": "world-class-evidence-ledger",
    "top_level_mirrors_summary": true,
    "summary_fields": [
      "decision",
      "ready_to_claim_world_class",
      "ledger_entry_count",
      "source_accepted_count",
      "accepted_count",
      "pending_count",
      "human_pending_count",
      "external_pending_count",
      "submitted_entry_count",
      "reviewer_approved_submission_count",
      "missing_submission_count",
      "invalid_submission_count",
      "source_check_count",
      "source_pass_count",
      "source_blocked_count",
      "submitted_but_pending_count",
      "source_accepted_without_valid_submission_count",
      "overclaim_guard_active"
    ],
    "source_of_truth": "summary"
  },
  "entries": [
    {
      "key": "provider-holdout",
      "label": "Provider Holdout",
      "category": "external",
      "owner": "operator with provider credentials",
      "status": "pending",
      "source_status": "pass",
      "source_accepted": true,
      "current": "model-executed 10; token-observed 10",
      "objective": "Collect at least one provider-backed output-eval holdout run with model, timing, and token metadata.",
      "runbook": [
        "Set one provider API key in the operator shell, such as OPENAI_API_KEY or DEEPSEEK_API_KEY; never commit or print the value.",
        "For OpenAI Responses: python3 scripts/yao.py output-exec --provider-runner openai --provider-model ${YAO_OUTPUT_EVAL_MODEL:-gpt-4.1-mini} --timeout-seconds 60",
        "For DeepSeek Chat Completions: python3 scripts/yao.py output-exec --provider-runner deepseek --provider-model deepseek-v4-flash --provider-api-format chat-completions --provider-thinking disabled --api-key-env DEEPSEEK_API_KEY --timeout-seconds 120",
        "python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>",
        "Copy evidence/world_class/templates/provider-holdout.intake.json to evidence/world_class/submissions/provider-holdout.json and fill only real evidence fields.",
        "python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions"
      ],
      "provenance_requirements": [
        "provider-backed model run",
        "observed timing",
        "observed token metadata"
      ],
      "success_checks": [
        "reports/output_execution_runs.json summary.model_executed_count > 0",
        "reports/output_execution_runs.json summary.timing_observed_count > 0",
        "reports/output_execution_runs.json summary.token_observed_count > 0",
        "reports/skill_os2_audit.json item provider-holdout status becomes pass"
      ],
      "evidence_artifacts": [
        "reports/output_execution_runs.json",
        "reports/output_execution_runs.md",
        "reports/skill_os2_audit.json",
        "evidence/world_class/intake.schema.json",
        "evidence/world_class/templates/provider-holdout.intake.json",
        "reports/world_class_evidence_intake.json",
        "reports/world_class_evidence_intake.md"
      ],
      "privacy_contract": [
        "Do not commit provider credentials or environment dumps.",
        "The output execution report records output hashes and aggregate run metadata, not raw provider prompts."
      ],
      "observed_state": {
        "model_executed_count": 10,
        "timing_observed_count": 10,
        "token_observed_count": 10,
        "accepted": true
      },
      "source_checklist": [
        {
          "evidence_key": "provider-holdout",
          "label": "Provider model run",
          "field": "model_executed_count",
          "expected": ">0",
          "actual": 10,
          "status": "pass",
          "source_accepted": true,
          "next_action": "Run provider-backed output-exec with real credentials."
        },
        {
          "evidence_key": "provider-holdout",
          "label": "Timing observed",
          "field": "timing_observed_count",
          "expected": ">0",
          "actual": 10,
          "status": "pass",
          "source_accepted": true,
          "next_action": "Provider execution should record timing metadata."
        },
        {
          "evidence_key": "provider-holdout",
          "label": "Token usage observed",
          "field": "token_observed_count",
          "expected": ">0",
          "actual": 10,
          "status": "pass",
          "source_accepted": true,
          "next_action": "Provider execution should return non-estimated token usage."
        }
      ],
      "source_check_count": 3,
      "source_pass_count": 3,
      "source_blocked_count": 0,
      "submission_state": {
        "status": "missing",
        "path": "evidence/world_class/submissions/provider-holdout.json",
        "artifact_ref_count": 0,
        "attested_real_evidence": false,
        "privacy_contract_satisfied": false,
        "ledger_reviewer_approved": false,
        "ledger_reviewer": "",
        "ledger_reviewed_at": "",
        "ledger_counts_as_completion": false
      },
      "anti_overclaim": {
        "planned_work_counts_as_evidence": false,
        "metadata_fallback_counts_as_native_enforcement": false,
        "pending_review_counts_as_human_decision": false,
        "local_command_runner_counts_as_provider_model": false
      },
      "next_action": "Run provider-backed holdout cases with real credentials and commit only aggregate evidence."
    },
    {
      "key": "human-adjudication",
      "label": "Human Adjudication",
      "category": "human",
      "owner": "human reviewer",
      "status": "pending",
      "source_status": "human_required",
      "source_accepted": false,
      "current": "0/5 decisions; pending 5",
      "objective": "Record real blind A/B reviewer decisions before claiming human output review completion.",
      "runbook": [
        "python3 scripts/yao.py output-review-kit --write-template",
        "Open reports/output_review_kit.md and choose A or B for each pair without opening the answer key.",
        "python3 scripts/adjudicate_output_review.py --write-template",
        "Record reviewer choices in a separate JSON, JSONL, or CSV decision source with reviewer, reviewed_at, case_id, winner_variant, confidence, required reason, and truthful reviewer_attestation only.",
        "python3 scripts/yao.py output-review-import --input <reviewer-decisions.json> --blind-review-attested --run-adjudication",
        "python3 scripts/yao.py output-review",
        "python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>",
        "Copy evidence/world_class/templates/human-adjudication.intake.json to evidence/world_class/submissions/human-adjudication.json and fill only real evidence fields.",
        "python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions"
      ],
      "provenance_requirements": [
        "real reviewer identity",
        "blind A/B decisions",
        "answer key unopened until decisions exist"
      ],
      "success_checks": [
        "reports/output_review_adjudication.json summary.pending_count == 0",
        "reports/output_review_adjudication.json summary.judgment_count == summary.pair_count",
        "reports/output_review_adjudication.json summary.invalid_decision_count == 0",
        "reports/output_review_adjudication.json summary.reviewer_metadata_present is true",
        "reports/output_review_adjudication.json summary.blind_review_attested is true",
        "reports/output_review_adjudication.json review_integrity.blind_pack_sha256 exists and matches reports/output_review_decisions.json",
        "reports/output_review_adjudication.json pairs and reviewer_checklist store prompt_sha256, not raw prompt text",
        "reports/output_review_adjudication.json summary.ready_for_human_evidence is true",
        "reports/skill_os2_audit.json item human-adjudication status becomes pass"
      ],
      "evidence_artifacts": [
        "reports/output_blind_review_pack.md",
        "reports/output_review_kit.md",
        "reports/output_review_decisions.json",
        "reports/output_review_adjudication.json",
        "reports/output_review_adjudication.md",
        "scripts/import_output_review_decisions.py",
        "evidence/world_class/intake.schema.json",
        "evidence/world_class/templates/human-adjudication.intake.json",
        "reports/world_class_evidence_intake.json",
        "reports/world_class_evidence_intake.md"
      ],
      "privacy_contract": [
        "Reviewer decisions should not include raw user data or private customer detail.",
        "Reviewer reasons must be rubric-based and must not include raw user data or private customer detail.",
        "The decision importer rejects raw prompt, output, transcript, message, and answer-key fields.",
        "The adjudication evidence stores prompt_sha256 instead of raw prompt text.",
        "The decision and adjudication artifacts preserve blind_pack_sha256 so reviewers can audit exactly which pack was judged.",
        "Keep the answer key separate until after decisions are recorded."
      ],
      "observed_state": {
        "pair_count": 5,
        "judgment_count": 0,
        "pending_count": 5,
        "invalid_decision_count": 0,
        "answer_revealed_count": 0,
        "reviewer_metadata_present": false,
        "reason_required": true,
        "blind_review_attested": false,
        "raw_content_excluded_attested": true,
        "reviewer_reason_required_attested": true,
        "ready_for_human_evidence": false,
        "raw_content_allowed": false,
        "raw_content_path_count": 0,
        "accepted": false
      },
      "source_checklist": [
        {
          "evidence_key": "human-adjudication",
          "label": "Review pairs exist",
          "field": "pair_count",
          "expected": ">0",
          "actual": 5,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Generate the blind A/B review pack."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "No pending decisions",
          "field": "pending_count",
          "expected": "==0",
          "actual": 5,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Record a reviewer choice and reason for every pair."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Judgments complete",
          "field": "judgment_count",
          "expected": "==pair_count",
          "actual": 0,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Every pair needs one valid human judgment."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "No invalid decisions",
          "field": "invalid_decision_count",
          "expected": "==0",
          "actual": 0,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Fix malformed winner/confidence entries."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Reviewer metadata",
          "field": "reviewer_metadata_present",
          "expected": "true",
          "actual": false,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Record reviewer and reviewed_at before adjudication can count."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Reason required",
          "field": "reason_required",
          "expected": "true",
          "actual": true,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Keep reason mandatory for every imported or direct reviewer decision."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Blind review attested",
          "field": "blind_review_attested",
          "expected": "true",
          "actual": false,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Set reviewer_attestation only after choices are completed before opening the answer key."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Raw content attested",
          "field": "raw_content_excluded_attested",
          "expected": "true",
          "actual": true,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Attest that reviewer decisions exclude raw prompts, outputs, transcripts, messages, and private user content."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Raw content blocked",
          "field": "raw_content_allowed",
          "expected": "false",
          "actual": false,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Adjudication evidence should store prompt hashes and reviewer metadata, not raw prompts, outputs, transcripts, or messages."
        },
        {
          "evidence_key": "human-adjudication",
          "label": "Human evidence ready",
          "field": "ready_for_human_evidence",
          "expected": "true",
          "actual": false,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Complete all reviewer decisions with metadata and rationale, plus blind-review attestation and integrity fingerprints."
        }
      ],
      "source_check_count": 10,
      "source_pass_count": 5,
      "source_blocked_count": 5,
      "submission_state": {
        "status": "missing",
        "path": "evidence/world_class/submissions/human-adjudication.json",
        "artifact_ref_count": 0,
        "attested_real_evidence": false,
        "privacy_contract_satisfied": false,
        "ledger_reviewer_approved": false,
        "ledger_reviewer": "",
        "ledger_reviewed_at": "",
        "ledger_counts_as_completion": false
      },
      "anti_overclaim": {
        "planned_work_counts_as_evidence": false,
        "metadata_fallback_counts_as_native_enforcement": false,
        "pending_review_counts_as_human_decision": false,
        "local_command_runner_counts_as_provider_model": false
      },
      "next_action": "Record real A/B choices, reviewer metadata, and blind-review attestation, then regenerate adjudication."
    },
    {
      "key": "native-permission-enforcement",
      "label": "Native Permission Enforcement",
      "category": "external",
      "owner": "target client or installer integrator",
      "status": "pending",
      "source_status": "external_required",
      "source_accepted": false,
      "current": "native-enforced targets 0; installer-enforced targets 4",
      "objective": "Prove at least one real target client or external installer runtime guard enforces approved high-permission capabilities.",
      "runbook": [
        "Implement or connect a real target client or external installer runtime guard that blocks undeclared network, file_write, or subprocess capabilities.",
        "Update the generated target adapter only when the guard is actually enforced by that target.",
        "python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip",
        "python3 scripts/yao.py install-simulate . --package-dir dist --install-root dist/install-simulation",
        "python3 scripts/yao.py runtime-permissions . --package-dir dist",
        "python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>",
        "Copy evidence/world_class/templates/native-permission-enforcement.intake.json to evidence/world_class/submissions/native-permission-enforcement.json and fill only real evidence fields.",
        "python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions"
      ],
      "provenance_requirements": [
        "real target client or external installer runtime guard",
        "native enforcement flag or externally accepted guard proof",
        "residual risk retained for fallback targets"
      ],
      "success_checks": [
        "reports/runtime_permission_probes.json summary.native_enforcement_count > 0",
        "reports/runtime_permission_probes.json summary.failure_count == 0",
        "reports/runtime_permission_probes.json summary.installer_enforcement_pass_count records local installer enforcement but does not replace native evidence",
        "reports/skill_os2_audit.json item native-permission-enforcement status becomes pass"
      ],
      "evidence_artifacts": [
        "dist/targets/*/adapter.json",
        "reports/runtime_permission_probes.json",
        "reports/runtime_permission_probes.md",
        "reports/install_simulation.json",
        "reports/install_simulation.md",
        "security/permission_policy.json",
        "evidence/world_class/intake.schema.json",
        "evidence/world_class/templates/native-permission-enforcement.intake.json",
        "reports/world_class_evidence_intake.json",
        "reports/world_class_evidence_intake.md"
      ],
      "privacy_contract": [
        "Do not mark native_enforcement true for metadata-only fallbacks.",
        "Keep residual risks visible for targets that still rely on operator enforcement."
      ],
      "observed_state": {
        "native_enforcement_count": 0,
        "metadata_fallback_count": 4,
        "installer_enforcement_pass_count": 4,
        "installer_permission_failure_count": 0,
        "installer_enforcement_ready": true,
        "residual_risk_count": 4,
        "failure_count": 0,
        "accepted": false
      },
      "source_checklist": [
        {
          "evidence_key": "native-permission-enforcement",
          "label": "Native enforcement",
          "field": "native_enforcement_count",
          "expected": ">0",
          "actual": 0,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Collect real target-client or external runtime guard proof."
        },
        {
          "evidence_key": "native-permission-enforcement",
          "label": "Probe failures",
          "field": "failure_count",
          "expected": "==0",
          "actual": 0,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Runtime permission probes must stay clean."
        },
        {
          "evidence_key": "native-permission-enforcement",
          "label": "Installer support",
          "field": "installer_enforcement_ready",
          "expected": "true",
          "actual": true,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Installer enforcement is supporting evidence, not native proof."
        }
      ],
      "source_check_count": 3,
      "source_pass_count": 2,
      "source_blocked_count": 1,
      "submission_state": {
        "status": "missing",
        "path": "evidence/world_class/submissions/native-permission-enforcement.json",
        "artifact_ref_count": 0,
        "attested_real_evidence": false,
        "privacy_contract_satisfied": false,
        "ledger_reviewer_approved": false,
        "ledger_reviewer": "",
        "ledger_reviewed_at": "",
        "ledger_counts_as_completion": false
      },
      "anti_overclaim": {
        "planned_work_counts_as_evidence": false,
        "metadata_fallback_counts_as_native_enforcement": false,
        "pending_review_counts_as_human_decision": false,
        "local_command_runner_counts_as_provider_model": false
      },
      "next_action": "Integrate a real target-client or external installer runtime guard before claiming native permission enforcement."
    },
    {
      "key": "native-client-telemetry",
      "label": "Native Client Telemetry",
      "category": "external",
      "owner": "Browser/Chrome/IDE/provider client integrator",
      "status": "pending",
      "source_status": "external_required",
      "source_accepted": false,
      "current": "external source events 0; adoption samples 1",
      "objective": "Import production metadata-only events from a real external client into the local drift loop.",
      "runbook": [
        "python3 scripts/telemetry_native_host.py . --write-launcher /tmp/yao-telemetry-host.sh --write-manifest /tmp/yao-telemetry-host.json --allowed-origin chrome-extension://<extension-id>/",
        "Install the generated native messaging manifest for the real client and send at least one accepted skill_activation or skill_output event.",
        "python3 scripts/yao.py telemetry-import . --input-jsonl .yao/telemetry_spool/external_events.jsonl",
        "python3 scripts/yao.py skill-atlas --workspace-root .",
        "python3 scripts/yao.py skill-os2-audit . --generated-at <YYYY-MM-DD>",
        "Copy evidence/world_class/templates/native-client-telemetry.intake.json to evidence/world_class/submissions/native-client-telemetry.json and fill only real evidence fields.",
        "python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions"
      ],
      "provenance_requirements": [
        "real external client source",
        "metadata-only event",
        "local-first import path"
      ],
      "success_checks": [
        "reports/adoption_drift_report.json summary.source_types.external > 0",
        "reports/adoption_drift_report.json summary.adoption_sample_count > 0",
        "reports/skill_os2_audit.json item native-client-telemetry status becomes pass"
      ],
      "evidence_artifacts": [
        "reports/adoption_drift_report.json",
        "reports/adoption_drift_report.md",
        "reports/telemetry_hook_recipes.json",
        "scripts/telemetry_native_host.py",
        "evidence/world_class/intake.schema.json",
        "evidence/world_class/templates/native-client-telemetry.intake.json",
        "reports/world_class_evidence_intake.json",
        "reports/world_class_evidence_intake.md"
      ],
      "privacy_contract": [
        "Telemetry must remain metadata-only and local-first.",
        "Do not package reports/telemetry_events.jsonl or any raw prompt, output, transcript, note, or message field."
      ],
      "observed_state": {
        "external_source_events": 0,
        "adoption_sample_count": 1,
        "raw_content_allowed": false,
        "risk_band": "low",
        "accepted": false
      },
      "source_checklist": [
        {
          "evidence_key": "native-client-telemetry",
          "label": "External events",
          "field": "external_source_events",
          "expected": ">0",
          "actual": 0,
          "status": "blocked",
          "source_accepted": false,
          "next_action": "Import at least one metadata-only event from a real client."
        },
        {
          "evidence_key": "native-client-telemetry",
          "label": "Adoption sample",
          "field": "adoption_sample_count",
          "expected": ">0",
          "actual": 1,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Telemetry must include adoption outcome evidence."
        },
        {
          "evidence_key": "native-client-telemetry",
          "label": "Raw content blocked",
          "field": "raw_content_allowed",
          "expected": "false",
          "actual": false,
          "status": "pass",
          "source_accepted": false,
          "next_action": "Telemetry must stay metadata-only."
        }
      ],
      "source_check_count": 3,
      "source_pass_count": 2,
      "source_blocked_count": 1,
      "submission_state": {
        "status": "missing",
        "path": "evidence/world_class/submissions/native-client-telemetry.json",
        "artifact_ref_count": 0,
        "attested_real_evidence": false,
        "privacy_contract_satisfied": false,
        "ledger_reviewer_approved": false,
        "ledger_reviewer": "",
        "ledger_reviewed_at": "",
        "ledger_counts_as_completion": false
      },
      "anti_overclaim": {
        "planned_work_counts_as_evidence": false,
        "metadata_fallback_counts_as_native_enforcement": false,
        "pending_review_counts_as_human_decision": false,
        "local_command_runner_counts_as_provider_model": false
      },
      "next_action": "Install a real client against the native host and import production metadata-only events."
    }
  ],
  "source_plan": {
    "json": "reports/world_class_evidence_plan.json",
    "markdown": "reports/world_class_evidence_plan.md",
    "task_count": 4,
    "evidence_requirement_count": 4
  },
  "submissions": {
    "directory": "evidence/world_class/submissions",
    "ledger_counts_submission_as_completion": false,
    "source_pass_requires_valid_submission": true
  },
  "artifacts": {
    "json": "reports/world_class_evidence_ledger.json",
    "markdown": "reports/world_class_evidence_ledger.md",
    "intake": "reports/world_class_evidence_intake.md"
  }
}
