Workflow Bible
Public-safe operating rules for scoping, verification, shipping, journaling, and false-positive response.
PUBLISHEDA method description, not a guarantee of outcome quality.
EVIDENCE-GATED / BOUNDED / INSPECTABLE
AI Assurance Runtime.
A practical way to keep AI proposals from becoming unexamined facts, saved state, delegated instructions, or external actions.
POSITIONING BOUNDARYThis is a research and implementation direction supported by discrete public references. It is not a claim of a finished universal platform, production reliability, or complete AI safety.
THE GRAMMAR
Authority and evidence travel with the work.
Models can propose quickly. The control question is what those proposals are allowed to become. This approach assigns that decision to deterministic policy, narrow executors, independent checks, and receipts.
01 / OBSERVE
Identify the sourceRecord what was seen, where it came from, and what is merely generated or unverified.
02 / AUTHORIZE
Bind the boundaryApply scope, capability, data, target, and human-approval policy before action.
03 / VERIFY
Challenge the claimRun a clean control, meaningful refusal, or independent check before promotion.
04 / RECEIPT
Leave a trailPreserve evidence, verdict, execution state, outcome, uncertainty, and the next gate.
CURRENT PUBLIC REFERENCES
Evidence first. Limits included.
MCP authorization proof
Controlled local reference mechanics for resource, audience, scope, session, and token-handling boundaries.
PUBLISHEDNot MCP/OAuth conformance, a production audit, or an external-server assessment.
FastMCP signed-agent reference
Local native-middleware fixture with a synthetic signed-agent contract and reproduction receipt.
PUBLISHEDNot FastMCP-wide security, an identity standard, or production readiness.
Replay-record reference
Six local checks around a persisted digest-only replay record and fail-closed malformed state.
PUBLISHEDNot crash, power-loss, distributed, or production replay safety.
CLAIMS NAVIGATOR
What can be checked right now.
A public claim should make its evidence, limit, and next missing proof easy to find. A lead stays a lead until it clears that bar.
MCP authorization fixture
Inspect the public source, evidence snapshot, and local test command.
Next proof: trusted conformance evidence or a separately authorized owned-system pilot.
FastMCP signed-agent fixture
Inspect the six-scenario contract and local reproduction path.
Next proof: independent/blinded evaluation and durable recovery boundaries.
Replay-record fixture
Inspect the direct six-test reference and sanitized receipt.
Next proof: separately scoped crash, power-loss, and distributed-storage evaluation.
ENGAGEMENT SHAPE
Start small enough to reproduce.
The first useful engagement is an authorization-control assessment and reproducible test-fixture handoff, not a broad audit claim.
01 / SCOPE
Agree the owned or explicitly authorized surface, the decision-maker, the safe test method, and the out-of-bounds area.
02 / REPRODUCE
Build the smallest useful clean control, denial path, and receipt a team can run again.
03 / HAND OFF
Deliver the reproduction path, limitations, and prioritized next-control plan. Production access, credentials, scanning, deployment, and public claims remain separate approvals.