pending · external
Provider Holdout
model-executed 0; token-observed 0
- 提交
evidence/world_class/submissions/provider-holdout.json- 模板
evidence/world_class/templates/provider-holdout.intake.json- 阻断
- 2 blocked / 1 pass
- 下一步
- Run provider-backed holdout cases with real credentials and commit only aggregate evidence.
阻断检查
- Provider model run
model_executed_count: 0 / >0Run provider-backed output-exec with real credentials. - Token usage observed
token_observed_count: 0 / >0Provider execution should return non-estimated token usage.
操作命令
- 准备提交
python3 scripts/yao.py world-class-submission-kit . --evidence-key provider-holdout --output-dir evidence/world_class/submissions - 校验入口
python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions - 审查提交
python3 scripts/yao.py world-class-submission-review . --submissions-dir evidence/world_class/submissions - 刷新台账
python3 scripts/yao.py world-class-ledger . --submissions-dir evidence/world_class/submissions
首要步骤
- Set OPENAI_API_KEY in the operator shell before running provider evidence; never commit or print the value.
- export YAO_OUTPUT_EVAL_MODEL=${YAO_OUTPUT_EVAL_MODEL:-gpt-4.1-mini}
- python3 scripts/yao.py output-exec --provider-runner openai --timeout-seconds 60
采集契约
来源要求
- provider-backed model run
- observed timing
- observed token metadata
通过条件
- reports/output_execution_runs.json summary.model_executed_count > 0
- reports/output_execution_runs.json summary.timing_observed_count > 0
- reports/output_execution_runs.json summary.token_observed_count > 0
- reports/skill_os2_audit.json item provider-holdout status becomes pass
证据资产
- reports/output_execution_runs.json
- reports/output_execution_runs.md
- reports/skill_os2_audit.json
- evidence/world_class/intake.schema.json
- evidence/world_class/templates/provider-holdout.intake.json
资产角色
source: world-class-submission-kit; counts as evidence: false; prefill counts as evidence: false
- submission-ref1 / 1 ready
artifact_refs: trueRows marked submission-ref are the aggregate paths expected in artifact_refs. - supporting-evidence6 / 6 ready
artifact_refs: falseSupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
隐私边界
- Do not commit provider credentials or environment dumps.
- The output execution report records output hashes and aggregate run metadata, not raw provider prompts.
pending · human
Human Adjudication
0/5 decisions; pending 5
- 提交
evidence/world_class/submissions/human-adjudication.json- 模板
evidence/world_class/templates/human-adjudication.intake.json- 阻断
- 4 blocked / 4 pass
- 下一步
- Record real A/B choices in the decision template, then regenerate adjudication.
阻断检查
- No pending decisions
pending_count: 5 / ==0Record a reviewer choice and reason for every pair. - Judgments complete
judgment_count: 0 / ==pair_countEvery pair needs one valid human judgment. - Reviewer metadata
reviewer_metadata_present: False / trueRecord reviewer and reviewed_at before adjudication can count. - Human evidence ready
ready_for_human_evidence: False / trueComplete all reviewer decisions with reviewer metadata and rationale.
操作命令
- 准备提交
python3 scripts/yao.py world-class-submission-kit . --evidence-key human-adjudication --output-dir evidence/world_class/submissions - 校验入口
python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions - 审查提交
python3 scripts/yao.py world-class-submission-review . --submissions-dir evidence/world_class/submissions - 刷新台账
python3 scripts/yao.py world-class-ledger . --submissions-dir evidence/world_class/submissions
首要步骤
- python3 scripts/yao.py output-review-kit --write-template
- Open reports/output_review_kit.md and choose A or B for each pair without opening the answer key.
- python3 scripts/adjudicate_output_review.py --write-template
采集契约
来源要求
- real reviewer identity
- blind A/B decisions
- answer key unopened until decisions exist
通过条件
- reports/output_review_adjudication.json summary.pending_count == 0
- reports/output_review_adjudication.json summary.judgment_count == summary.pair_count
- reports/output_review_adjudication.json summary.invalid_decision_count == 0
- reports/output_review_adjudication.json summary.reviewer_metadata_present is true
- reports/output_review_adjudication.json pairs and reviewer_checklist store prompt_sha256, not raw prompt text
证据资产
- reports/output_blind_review_pack.md
- reports/output_review_kit.md
- reports/output_review_decisions.json
- reports/output_review_adjudication.json
- reports/output_review_adjudication.md
资产角色
source: world-class-submission-kit; counts as evidence: false; prefill counts as evidence: false
- submission-ref2 / 2 ready
artifact_refs: trueRows marked submission-ref are the aggregate paths expected in artifact_refs. - supporting-evidence8 / 8 ready
artifact_refs: falseSupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
隐私边界
- Reviewer decisions should not include raw user data or private customer detail.
- Reviewer reasons must be rubric-based and must not include raw user data or private customer detail.
- The decision importer rejects raw prompt, output, transcript, message, and answer-key fields.
- The adjudication evidence stores prompt_sha256 instead of raw prompt text.
pending · external
Native Permission Enforcement
native-enforced targets 0; installer-enforced targets 4
- 提交
evidence/world_class/submissions/native-permission-enforcement.json- 模板
evidence/world_class/templates/native-permission-enforcement.intake.json- 阻断
- 1 blocked / 2 pass
- 下一步
- Integrate a real target-client or external installer runtime guard before claiming native permission enforcement.
阻断检查
- Native enforcement
native_enforcement_count: 0 / >0Collect real target-client or external runtime guard proof.
操作命令
- 准备提交
python3 scripts/yao.py world-class-submission-kit . --evidence-key native-permission-enforcement --output-dir evidence/world_class/submissions - 校验入口
python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions - 审查提交
python3 scripts/yao.py world-class-submission-review . --submissions-dir evidence/world_class/submissions - 刷新台账
python3 scripts/yao.py world-class-ledger . --submissions-dir evidence/world_class/submissions
首要步骤
- Implement or connect a real target client or external installer runtime guard that blocks undeclared network, file_write, or subprocess capabilities.
- Update the generated target adapter only when the guard is actually enforced by that target.
- python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip
采集契约
来源要求
- real target client or external installer runtime guard
- native enforcement flag or externally accepted guard proof
- residual risk retained for fallback targets
通过条件
- reports/runtime_permission_probes.json summary.native_enforcement_count > 0
- reports/runtime_permission_probes.json summary.failure_count == 0
- reports/runtime_permission_probes.json summary.installer_enforcement_pass_count records local installer enforcement but does not replace native evidence
- reports/skill_os2_audit.json item native-permission-enforcement status becomes pass
证据资产
- dist/targets/*/adapter.json
- reports/runtime_permission_probes.json
- reports/runtime_permission_probes.md
- reports/install_simulation.json
- reports/install_simulation.md
资产角色
source: world-class-submission-kit; counts as evidence: false; prefill counts as evidence: false
- submission-ref2 / 2 ready
artifact_refs: trueRows marked submission-ref are the aggregate paths expected in artifact_refs. - supporting-evidence11 / 11 ready
artifact_refs: falseSupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
隐私边界
- Do not mark native_enforcement true for metadata-only fallbacks.
- Keep residual risks visible for targets that still rely on operator enforcement.
pending · external
Native Client Telemetry
external source events 0; adoption samples 1
- 提交
evidence/world_class/submissions/native-client-telemetry.json- 模板
evidence/world_class/templates/native-client-telemetry.intake.json- 阻断
- 1 blocked / 2 pass
- 下一步
- Install a real client against the native host and import production metadata-only events.
阻断检查
- External events
external_source_events: 0 / >0Import at least one metadata-only event from a real client.
操作命令
- 准备提交
python3 scripts/yao.py world-class-submission-kit . --evidence-key native-client-telemetry --output-dir evidence/world_class/submissions - 校验入口
python3 scripts/yao.py world-class-intake . --submissions-dir evidence/world_class/submissions - 审查提交
python3 scripts/yao.py world-class-submission-review . --submissions-dir evidence/world_class/submissions - 刷新台账
python3 scripts/yao.py world-class-ledger . --submissions-dir evidence/world_class/submissions
首要步骤
- python3 scripts/telemetry_native_host.py . --write-launcher /tmp/yao-telemetry-host.sh --write-manifest /tmp/yao-telemetry-host.json --allowed-origin chrome-extension://<extension-id>/
- Install the generated native messaging manifest for the real client and send at least one accepted skill_activation or skill_output event.
- python3 scripts/yao.py telemetry-import . --input-jsonl .yao/telemetry_spool/external_events.jsonl
采集契约
来源要求
- real external client source
- metadata-only event
- local-first import path
通过条件
- reports/adoption_drift_report.json summary.source_types.external > 0
- reports/adoption_drift_report.json summary.adoption_sample_count > 0
- reports/skill_os2_audit.json item native-client-telemetry status becomes pass
证据资产
- reports/adoption_drift_report.json
- reports/adoption_drift_report.md
- reports/telemetry_hook_recipes.json
- scripts/telemetry_native_host.py
- evidence/world_class/intake.schema.json
资产角色
source: world-class-submission-kit; counts as evidence: false; prefill counts as evidence: false
- submission-ref2 / 2 ready
artifact_refs: trueRows marked submission-ref are the aggregate paths expected in artifact_refs. - supporting-evidence6 / 6 ready
artifact_refs: falseSupporting-evidence rows help reviewers audit the packet but do not all need to be copied into artifact_refs.
隐私边界
- Telemetry must remain metadata-only and local-first.
- Do not package reports/telemetry_events.jsonl or any raw prompt, output, transcript, note, or message field.