{ "baseline_pass": false, "per_node": [ { "spec_version": "1.4.0", "agent_type": "ironclaw", "agent_id": "ai:alice", "node_index": "1", "framework_version": "ironclaw 0.27.0", "ai_memory_version": "0.6.3.1", "peer_urls": "http://10.10.0.3:9077,http://10.10.0.5:9077,http://10.10.0.2:9077", "config_file_sha256": "3c13774f324eaa4b9f265377680fd5df012ead8b5ae35f8a9c848ff25d88c9d5", "config_attestation": { "framework_is_authentic": true, "mcp_server_ai_memory_registered": true, "llm_backend_is_xai_grok": true, "llm_is_default_provider": true, "mcp_command_is_ai_memory": true, "agent_id_stamped": true, "federation_live": true, "ufw_disabled": true, "iptables_flushed": true, "dead_man_switch_scheduled": true }, "negative_invariants": { "_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory. Any true here = thesis-preserving.", "a2a_protocol_off": true, "sub_agent_or_sessions_spawn_off": true, "alternative_channels_off": true, "tool_allowlist_is_memory_only": true, "a2a_gate_profile_locked": true }, "functional_probes": { "xai_grok_chat_reachable": true, "xai_grok_sample_reply": "READY", "substrate_http_canary_f2a": true, "substrate_http_canary_uuid": "0428cbee-ffe3-401d-a1c5-43174f01fdcf", "agent_mcp_canary_f2b": false, "agent_mcp_canary_uuid": "ff0311cb-8fa5-4987-923e-12562743b115", "agent_canary_response_head": "error: unrecognized subcommand 'chat' tip: a similar subcommand exists: 'channels' Usage: ironclaw [OPTIONS] [COMMAND] For more information, try '--help'. ", "_f2b_note": "F2b is LLM-dependent and non-blocking. F2a (deterministic HTTP substrate) gates baseline_pass.", "mesh_connectivity_f4": true, "mesh_edges_ok": 3, "mesh_edges_total": 3, "mesh_edges_detail": "10.10.0.3:9077:OK,10.10.0.5:9077:OK,10.10.0.2:9077:OK", "_f4_note": "F4 verifies this local nodes N-1 OUTBOUND mesh edges to every peer via both GET health and POST sync_push dry_run. Aggregator ANDs across N nodes to confirm full N*(N-1) bidirectional reachability. Gates baseline_pass.", "ai_memory_mcp_stdio_f5": true, "ai_memory_mcp_stdio_init_ok": true, "ai_memory_mcp_stdio_tools_ok": true, "ai_memory_mcp_stdio_tools_found": "memory_agent_list,memory_agent_register,memory_archive_list,memory_archive_purge,memory_archive_restore,memory_archive_stats,memory_auto_tag,memory_capabilities,memory_check_duplicate,memory_consolidate,memory_delete,memory_detect_contradiction,memory_entity_get_by_alias,memory_entity_register,memory_expand_query,memory_forget,memory_gc,memory_get,memory_get_links,memory_get_taxonomy,memory_inbox,memory_kg_invalidate,memory_kg_query,memory_kg_timeline,memory_link,memory_list,memory_list_subscriptions,memory_namespace_clear_standard,memory_namespace_get_standard,memory_namespace_set_standard,memory_notify,memory_pending_approve,memory_pending_list,memory_pending_reject,memory_promote,memory_recall,memory_search,memory_session_start,memory_stats,memory_store,memory_subscribe,memory_unsubscribe,memory_update", "_f5_note": "F5 spawns the ai-memory stdio MCP subprocess using the framework-configured invocation and verifies initialize + tools/list return memory_store, memory_recall, memory_list. Deterministic (no LLM). Gates baseline_pass.", "tls_mode": "off", "tls_handshake_f6": true, "tls_handshake_f6_reason": "", "mtls_enforcement_f7": true, "mtls_enforcement_f7_reason": "", "_f6_f7_note": "F6 verifies the TLS 1.3 handshake against the local serve + CA chain. F7 verifies mTLS enforcement — anonymous client rejected, whitelisted client accepted. Both gate baseline_pass when tls_mode != off / mtls respectively.", "embedder_loaded_f8": true, "embedder_loaded_f8_reason": "", "_f8_note": "F8 verifies /api/v1/capabilities reports features.embedder_loaded=true — i.e. the MiniLM embedder initialised at serve startup. Gates baseline_pass unconditionally. Without this, scenario-18 silently black-holes (semantic recall returns 0 rows).", "agent_mcp_ai_memory_canary": true, "canary_uuid": "0428cbee-ffe3-401d-a1c5-43174f01fdcf", "canary_namespace": "_baseline_canary_f2a" }, "baseline_pass": true }, { "spec_version": "1.4.0", "agent_type": "ironclaw", "agent_id": "ai:bob", "node_index": "2", "framework_version": "ironclaw 0.27.0", "ai_memory_version": "0.6.3.1", "peer_urls": "http://10.10.0.4:9077,http://10.10.0.5:9077,http://10.10.0.2:9077", "config_file_sha256": "c5df68c6022b5e90438f00d71693fc5a6a814c80366e9f8fc28675b7873523a5", "config_attestation": { "framework_is_authentic": true, "mcp_server_ai_memory_registered": true, "llm_backend_is_xai_grok": true, "llm_is_default_provider": true, "mcp_command_is_ai_memory": true, "agent_id_stamped": true, "federation_live": true, "ufw_disabled": true, "iptables_flushed": true, "dead_man_switch_scheduled": true }, "negative_invariants": { "_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory. Any true here = thesis-preserving.", "a2a_protocol_off": true, "sub_agent_or_sessions_spawn_off": true, "alternative_channels_off": true, "tool_allowlist_is_memory_only": true, "a2a_gate_profile_locked": true }, "functional_probes": { "xai_grok_chat_reachable": false, "xai_grok_sample_reply": "", "substrate_http_canary_f2a": true, "substrate_http_canary_uuid": "fad97ee2-45e2-4f18-a973-c480f3faab71", "agent_mcp_canary_f2b": false, "agent_mcp_canary_uuid": "2c43258e-4ca1-42fc-a3e8-f0a73e53a061", "agent_canary_response_head": "error: unrecognized subcommand 'chat' tip: a similar subcommand exists: 'channels' Usage: ironclaw [OPTIONS] [COMMAND] For more information, try '--help'. ", "_f2b_note": "F2b is LLM-dependent and non-blocking. F2a (deterministic HTTP substrate) gates baseline_pass.", "mesh_connectivity_f4": true, "mesh_edges_ok": 3, "mesh_edges_total": 3, "mesh_edges_detail": "10.10.0.4:9077:OK,10.10.0.5:9077:OK,10.10.0.2:9077:OK", "_f4_note": "F4 verifies this local nodes N-1 OUTBOUND mesh edges to every peer via both GET health and POST sync_push dry_run. Aggregator ANDs across N nodes to confirm full N*(N-1) bidirectional reachability. Gates baseline_pass.", "ai_memory_mcp_stdio_f5": true, "ai_memory_mcp_stdio_init_ok": true, "ai_memory_mcp_stdio_tools_ok": true, "ai_memory_mcp_stdio_tools_found": "memory_agent_list,memory_agent_register,memory_archive_list,memory_archive_purge,memory_archive_restore,memory_archive_stats,memory_auto_tag,memory_capabilities,memory_check_duplicate,memory_consolidate,memory_delete,memory_detect_contradiction,memory_entity_get_by_alias,memory_entity_register,memory_expand_query,memory_forget,memory_gc,memory_get,memory_get_links,memory_get_taxonomy,memory_inbox,memory_kg_invalidate,memory_kg_query,memory_kg_timeline,memory_link,memory_list,memory_list_subscriptions,memory_namespace_clear_standard,memory_namespace_get_standard,memory_namespace_set_standard,memory_notify,memory_pending_approve,memory_pending_list,memory_pending_reject,memory_promote,memory_recall,memory_search,memory_session_start,memory_stats,memory_store,memory_subscribe,memory_unsubscribe,memory_update", "_f5_note": "F5 spawns the ai-memory stdio MCP subprocess using the framework-configured invocation and verifies initialize + tools/list return memory_store, memory_recall, memory_list. Deterministic (no LLM). Gates baseline_pass.", "tls_mode": "off", "tls_handshake_f6": true, "tls_handshake_f6_reason": "", "mtls_enforcement_f7": true, "mtls_enforcement_f7_reason": "", "_f6_f7_note": "F6 verifies the TLS 1.3 handshake against the local serve + CA chain. F7 verifies mTLS enforcement — anonymous client rejected, whitelisted client accepted. Both gate baseline_pass when tls_mode != off / mtls respectively.", "embedder_loaded_f8": true, "embedder_loaded_f8_reason": "", "_f8_note": "F8 verifies /api/v1/capabilities reports features.embedder_loaded=true — i.e. the MiniLM embedder initialised at serve startup. Gates baseline_pass unconditionally. Without this, scenario-18 silently black-holes (semantic recall returns 0 rows).", "agent_mcp_ai_memory_canary": true, "canary_uuid": "fad97ee2-45e2-4f18-a973-c480f3faab71", "canary_namespace": "_baseline_canary_f2a" }, "baseline_pass": false }, { "spec_version": "1.4.0", "agent_type": "ironclaw", "agent_id": "ai:charlie", "node_index": "3", "framework_version": "ironclaw 0.27.0", "ai_memory_version": "0.6.3.1", "peer_urls": "http://10.10.0.4:9077,http://10.10.0.3:9077,http://10.10.0.2:9077", "config_file_sha256": "91241417668a51ed880c7738d00e7e4e81cde853335f956490c662ca6dfa8450", "config_attestation": { "framework_is_authentic": true, "mcp_server_ai_memory_registered": true, "llm_backend_is_xai_grok": true, "llm_is_default_provider": true, "mcp_command_is_ai_memory": true, "agent_id_stamped": true, "federation_live": true, "ufw_disabled": true, "iptables_flushed": true, "dead_man_switch_scheduled": true }, "negative_invariants": { "_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory. Any true here = thesis-preserving.", "a2a_protocol_off": true, "sub_agent_or_sessions_spawn_off": true, "alternative_channels_off": true, "tool_allowlist_is_memory_only": true, "a2a_gate_profile_locked": true }, "functional_probes": { "xai_grok_chat_reachable": true, "xai_grok_sample_reply": "READY", "substrate_http_canary_f2a": true, "substrate_http_canary_uuid": "549c6bcd-13a0-45a3-b3be-15993c2f86f0", "agent_mcp_canary_f2b": false, "agent_mcp_canary_uuid": "13c9e4d6-2311-4dea-b900-f47db96afdbd", "agent_canary_response_head": "error: unrecognized subcommand 'chat' tip: a similar subcommand exists: 'channels' Usage: ironclaw [OPTIONS] [COMMAND] For more information, try '--help'. ", "_f2b_note": "F2b is LLM-dependent and non-blocking. F2a (deterministic HTTP substrate) gates baseline_pass.", "mesh_connectivity_f4": true, "mesh_edges_ok": 3, "mesh_edges_total": 3, "mesh_edges_detail": "10.10.0.4:9077:OK,10.10.0.3:9077:OK,10.10.0.2:9077:OK", "_f4_note": "F4 verifies this local nodes N-1 OUTBOUND mesh edges to every peer via both GET health and POST sync_push dry_run. Aggregator ANDs across N nodes to confirm full N*(N-1) bidirectional reachability. Gates baseline_pass.", "ai_memory_mcp_stdio_f5": true, "ai_memory_mcp_stdio_init_ok": true, "ai_memory_mcp_stdio_tools_ok": true, "ai_memory_mcp_stdio_tools_found": "memory_agent_list,memory_agent_register,memory_archive_list,memory_archive_purge,memory_archive_restore,memory_archive_stats,memory_auto_tag,memory_capabilities,memory_check_duplicate,memory_consolidate,memory_delete,memory_detect_contradiction,memory_entity_get_by_alias,memory_entity_register,memory_expand_query,memory_forget,memory_gc,memory_get,memory_get_links,memory_get_taxonomy,memory_inbox,memory_kg_invalidate,memory_kg_query,memory_kg_timeline,memory_link,memory_list,memory_list_subscriptions,memory_namespace_clear_standard,memory_namespace_get_standard,memory_namespace_set_standard,memory_notify,memory_pending_approve,memory_pending_list,memory_pending_reject,memory_promote,memory_recall,memory_search,memory_session_start,memory_stats,memory_store,memory_subscribe,memory_unsubscribe,memory_update", "_f5_note": "F5 spawns the ai-memory stdio MCP subprocess using the framework-configured invocation and verifies initialize + tools/list return memory_store, memory_recall, memory_list. Deterministic (no LLM). Gates baseline_pass.", "tls_mode": "off", "tls_handshake_f6": true, "tls_handshake_f6_reason": "", "mtls_enforcement_f7": true, "mtls_enforcement_f7_reason": "", "_f6_f7_note": "F6 verifies the TLS 1.3 handshake against the local serve + CA chain. F7 verifies mTLS enforcement — anonymous client rejected, whitelisted client accepted. Both gate baseline_pass when tls_mode != off / mtls respectively.", "embedder_loaded_f8": true, "embedder_loaded_f8_reason": "", "_f8_note": "F8 verifies /api/v1/capabilities reports features.embedder_loaded=true — i.e. the MiniLM embedder initialised at serve startup. Gates baseline_pass unconditionally. Without this, scenario-18 silently black-holes (semantic recall returns 0 rows).", "agent_mcp_ai_memory_canary": true, "canary_uuid": "549c6bcd-13a0-45a3-b3be-15993c2f86f0", "canary_namespace": "_baseline_canary_f2a" }, "baseline_pass": true } ], "failure_mode": "baseline-violation" }