Campaign a2a-openclaw-v0.6.2-local-docker-mtls-r3 PASS

Agent group: openclaw (homogeneous)
ai-memory ref: release/v0.6.2
Completed at: 2026-04-24T17:32:06Z
Overall pass: true
Skipped reports: 0

Infrastructure

Provider: local-docker
Region: local-docker
Droplet size: n/a (container mem_limit=16g per openclaw agent; 4g for aggregator)
Topology: 4-node Docker bridge network (10.88.1.0/24) — 3 openclaw agent containers + 1 memory-only aggregator
Scenarios started: 2026-04-24T17:21:47Z
Scenarios ended: 2026-04-24T17:32:06Z
Dispatched by: ?
Harness SHA: ?

Tested on a local Docker mesh (3 openclaw agents + 1 memory-only aggregator on a single workstation). NOT a DigitalOcean campaign — no DO infrastructure was provisioned. See docs/local-docker-mesh.md for full reproducibility. Every byte of config, build recipe, harness, and scenario is committed in this repo.

Node roster

#	Role	Agent ID	Public IP	Private IP
1	agent	`ai:alice`	`n/a (container)`	`10.88.1.11`
2	agent	`ai:bob`	`n/a (container)`	`10.88.1.12`
3	agent	`ai:charlie`	`n/a (container)`	`10.88.1.13`
4	memory-only	`—`	`n/a (container)`	`10.88.1.14`

Baseline attestation BASELINE OK

Per the authoritative baseline spec, every agent node must emit a self-attestation before any scenario is permitted to run. This run's attestation:

Spec version: 1.4.0 — see authoritative baseline.

Node	Agent	Framework	Authentic	MCP ai-memory	xAI cfg	xAI default	Agent ID	Federation	UFW off	iptables	dead-man	F1 xAI	F2a substrate	F2b agent (non-gating)	Config SHA	Pass
node-1	`ai:alice`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-2	`ai:bob`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-3	`ai:charlie`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-4		`aggregator`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS

a2a-baseline.json

{
	"baseline_pass": true,
	"per_node": [
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:alice",
			"node_index": "1",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "https://node-2:9077,https://node-3:9077,https://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:bob",
			"node_index": "2",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "https://node-1:9077,https://node-3:9077,https://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:charlie",
			"node_index": "3",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "https://node-1:9077,https://node-2:9077,https://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "aggregator",
			"agent_id": "",
			"node_index": "4",
			"framework_version": "",
			"ai_memory_version": "0.6.2",
			"peer_urls": "http://node-1:9077,http://node-2:9077,http://node-3:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true
			},
			"baseline_pass": true
		}
	]
}

ID	Title	Result
S1	Per-agent write + read (MCP stdio)	PASS
S1b	Per-agent write + read (HTTP)	PASS
S2	Shared-context handoff	PASS
S4	Federation-aware concurrent writes	PASS
S5	Consolidation + curation	PASS
S6	Contradiction detection	PASS
S9	Mutation round-trip	PASS
S10	Deletion propagation	PASS
S11	Link integrity	PASS
S12	Agent registration	PASS
S13	Concurrent write contention	PASS
S14	Partition tolerance	PASS
S15	Read-your-writes	PASS
S16	Tier promotion	PASS
S17	Stats consistency	PASS
S18	Semantic query expansion	PASS
S20	mTLS happy-path	PASS
S21	Anonymous client rejected	PASS
S22	Identity spoofing resistance	PASS
S23	Malicious content fuzz	PASS
S24	Byzantine peer	PASS
S25	Clock skew tolerance	PASS
S28	memory_search keyword	PASS
S29	memory_archive lifecycle	PASS
S30	memory_capabilities handshake	PASS
S31	memory_gc quiescence	PASS
S32	memory_inbox + notify	PASS
S33	memory_subscribe pub/sub	PASS
S34	memory_pending governance	PASS
S35	memory_namespace standards	PASS
S36	memory_session_start	PASS
S37	memory_get_links bidirectional	PASS
S38	/export + /import	PASS
S39	/sync/since delta	PASS
S40	/memories/bulk	PASS
S41	/metrics Prometheus	PASS
S42	/namespaces enumeration	PASS

Infrastructure

Node roster

Baseline attestation BASELINE OK

F3 — peer A2A via shared memory F3 OK

AI NHI analysis

Tests performed in this run

Scenario 1 — Per-agent write + read (MCP stdio) PASS

Scenario 1b — Per-agent write + read (HTTP) PASS

Scenario 2 — Shared-context handoff PASS

Scenario 4 — Federation-aware concurrent writes PASS

Scenario 5 — Consolidation + curation PASS

Scenario 6 — Contradiction detection PASS

Scenario 9 — Mutation round-trip PASS

Scenario 10 — Deletion propagation PASS

Scenario 11 — Link integrity PASS

Scenario 12 — Agent registration PASS

Scenario 13 — Concurrent write contention PASS

Scenario 14 — Partition tolerance PASS

Scenario 15 — Read-your-writes PASS

Scenario 16 — Tier promotion PASS

Scenario 17 — Stats consistency PASS

Scenario 18 — Semantic query expansion PASS

Scenario 20 — mTLS happy-path PASS

Scenario 21 — Anonymous client rejected PASS

Scenario 22 — Identity spoofing resistance PASS

Scenario 23 — Malicious content fuzz PASS

Scenario 24 — Byzantine peer PASS

Scenario 25 — Clock skew tolerance PASS

Scenario 28 — memory_search keyword PASS

Scenario 29 — memory_archive lifecycle PASS

Scenario 30 — memory_capabilities handshake PASS

Scenario 31 — memory_gc quiescence PASS

Scenario 32 — memory_inbox + notify PASS

Scenario 33 — memory_subscribe pub/sub PASS

Scenario 34 — memory_pending governance PASS

Scenario 35 — memory_namespace standards PASS

Scenario 36 — memory_session_start PASS

Scenario 37 — memory_get_links bidirectional PASS

Scenario 38 — /export + /import PASS

Scenario 39 — /sync/since delta PASS

Scenario 40 — /memories/bulk PASS

Scenario 41 — /metrics Prometheus PASS

Scenario 42 — /namespaces enumeration PASS

All artifacts