Campaign a2a-openclaw-v0.6.2-local-docker-r3 PASS

Agent group: openclaw (homogeneous)
ai-memory ref: release/v0.6.2
Completed at: 2026-04-24T14:11:06Z
Overall pass: true
Skipped reports: 0

Infrastructure

Provider: local-docker
Region: local-docker
Droplet size: n/a (container mem_limit=16g per openclaw agent; 4g for aggregator)
Topology: 4-node Docker bridge network (10.88.1.0/24) — 3 openclaw agent containers + 1 memory-only aggregator
Scenarios started: 2026-04-24T14:01:12Z
Scenarios ended: 2026-04-24T14:11:06Z
Dispatched by: ?
Harness SHA: ?

Tested on a local Docker mesh (3 openclaw agents + 1 memory-only aggregator on a single workstation). NOT a DigitalOcean campaign — no DO infrastructure was provisioned. See docs/local-docker-mesh.md for full reproducibility. Every byte of config, build recipe, harness, and scenario is committed in this repo.

Node roster

#	Role	Agent ID	Public IP	Private IP
1	agent	`ai:alice`	`n/a (container)`	`10.88.1.11`
2	agent	`ai:bob`	`n/a (container)`	`10.88.1.12`
3	agent	`ai:charlie`	`n/a (container)`	`10.88.1.13`
4	memory-only	`—`	`n/a (container)`	`10.88.1.14`

Baseline attestation BASELINE OK

Per the authoritative baseline spec, every agent node must emit a self-attestation before any scenario is permitted to run. This run's attestation:

Spec version: 1.4.0 — see authoritative baseline.

Node	Agent	Framework	Authentic	MCP ai-memory	xAI cfg	xAI default	Agent ID	Federation	UFW off	iptables	dead-man	F1 xAI	F2a substrate	F2b agent (non-gating)	Config SHA	Pass
node-1	`ai:alice`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-2	`ai:bob`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-3	`ai:charlie`	`openclaw OpenClaw 2026.4.22 (00bd2cf)`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS
node-4		`aggregator`	✅	✅	✅	✅	✅	✅	✅	✅	—	❌	✅	—	`—`	PASS

a2a-baseline.json

{
	"baseline_pass": true,
	"per_node": [
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:alice",
			"node_index": "1",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "http://node-2:9077,http://node-3:9077,http://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true,
				"_topology_note": "Local Docker mesh on a single workstation (3 openclaw agent containers + 1 memory-only aggregator). See docs/local-docker-mesh.md for reproducibility."
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:bob",
			"node_index": "2",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "http://node-1:9077,http://node-3:9077,http://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true,
				"_topology_note": "Local Docker mesh on a single workstation (3 openclaw agent containers + 1 memory-only aggregator). See docs/local-docker-mesh.md for reproducibility."
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "openclaw",
			"agent_id": "ai:charlie",
			"node_index": "3",
			"framework_version": "OpenClaw 2026.4.22 (00bd2cf)",
			"ai_memory_version": "0.6.2",
			"peer_urls": "http://node-1:9077,http://node-2:9077,http://node-4:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true,
				"_topology_note": "Local Docker mesh on a single workstation (3 openclaw agent containers + 1 memory-only aggregator). See docs/local-docker-mesh.md for reproducibility."
			},
			"baseline_pass": true
		},
		{
			"spec_version": "1.4.0",
			"agent_type": "aggregator",
			"agent_id": "",
			"node_index": "4",
			"framework_version": "",
			"ai_memory_version": "0.6.2",
			"peer_urls": "http://node-1:9077,http://node-2:9077,http://node-3:9077",
			"config_attestation": {
				"framework_is_authentic": true,
				"mcp_server_ai_memory_registered": true,
				"llm_backend_is_xai_grok": true,
				"llm_is_default_provider": true,
				"mcp_command_is_ai_memory": true,
				"agent_id_stamped": true,
				"federation_live": true,
				"ufw_disabled": true,
				"iptables_flushed": true,
				"dead_man_switch_scheduled": "N/A (local-docker)",
				"topology": "local-docker"
			},
			"negative_invariants": {
				"_description": "Alternative A2A channels must be OFF so a passing scenario is only passing via ai-memory shared memory.",
				"a2a_protocol_off": true,
				"sub_agent_or_sessions_spawn_off": true,
				"alternative_channels_off": true,
				"tool_allowlist_is_memory_only": true,
				"a2a_gate_profile_locked": true
			},
			"functional_probes": {
				"substrate_http_canary_f2a": true,
				"mesh_connectivity_f4": true,
				"tls_handshake_f6": true,
				"mtls_enforcement_f7": true,
				"embedder_loaded_f8": true,
				"_topology_note": "Local Docker mesh on a single workstation (3 openclaw agent containers + 1 memory-only aggregator). See docs/local-docker-mesh.md for reproducibility."
			},
			"baseline_pass": true
		}
	],
	"_topology": "local-docker",
	"_topology_note": "Local Docker mesh on a single workstation (3 openclaw agent containers + 1 memory-only aggregator). See docs/local-docker-mesh.md for reproducibility."
}

ID	Title	Result
S1	Per-agent write + read (MCP stdio)	PASS
S1b	Per-agent write + read (HTTP)	PASS
S2	Shared-context handoff	PASS
S4	Federation-aware concurrent writes	PASS
S5	Consolidation + curation	PASS
S6	Contradiction detection	PASS
S9	Mutation round-trip	PASS
S10	Deletion propagation	PASS
S11	Link integrity	PASS
S12	Agent registration	PASS
S13	Concurrent write contention	PASS
S14	Partition tolerance	PASS
S15	Read-your-writes	PASS
S16	Tier promotion	PASS
S17	Stats consistency	PASS
S18	Semantic query expansion	PASS
S22	Identity spoofing resistance	PASS
S23	Malicious content fuzz	PASS
S24	Byzantine peer	PASS
S25	Clock skew tolerance	PASS
S28	memory_search keyword	PASS
S29	memory_archive lifecycle	PASS
S30	memory_capabilities handshake	PASS
S31	memory_gc quiescence	PASS
S32	memory_inbox + notify	PASS
S33	memory_subscribe pub/sub	PASS
S34	memory_pending governance	PASS
S35	memory_namespace standards	PASS
S36	memory_session_start	PASS
S37	memory_get_links bidirectional	PASS
S38	/export + /import	PASS
S39	/sync/since delta	PASS
S40	/memories/bulk	PASS
S41	/metrics Prometheus	PASS
S42	/namespaces enumeration	PASS

Infrastructure

Node roster

Baseline attestation BASELINE OK

F3 — peer A2A via shared memory F3 OK

AI NHI analysis

Tests performed in this run

Scenario 1 — Per-agent write + read (MCP stdio) PASS

Scenario 1b — Per-agent write + read (HTTP) PASS

Scenario 2 — Shared-context handoff PASS

Scenario 4 — Federation-aware concurrent writes PASS

Scenario 5 — Consolidation + curation PASS

Scenario 6 — Contradiction detection PASS

Scenario 9 — Mutation round-trip PASS

Scenario 10 — Deletion propagation PASS

Scenario 11 — Link integrity PASS

Scenario 12 — Agent registration PASS

Scenario 13 — Concurrent write contention PASS

Scenario 14 — Partition tolerance PASS

Scenario 15 — Read-your-writes PASS

Scenario 16 — Tier promotion PASS

Scenario 17 — Stats consistency PASS

Scenario 18 — Semantic query expansion PASS

Scenario 22 — Identity spoofing resistance PASS

Scenario 23 — Malicious content fuzz PASS

Scenario 24 — Byzantine peer PASS

Scenario 25 — Clock skew tolerance PASS

Scenario 28 — memory_search keyword PASS

Scenario 29 — memory_archive lifecycle PASS

Scenario 30 — memory_capabilities handshake PASS

Scenario 31 — memory_gc quiescence PASS

Scenario 32 — memory_inbox + notify PASS

Scenario 33 — memory_subscribe pub/sub PASS

Scenario 34 — memory_pending governance PASS

Scenario 35 — memory_namespace standards PASS

Scenario 36 — memory_session_start PASS

Scenario 37 — memory_get_links bidirectional PASS

Scenario 38 — /export + /import PASS

Scenario 39 — /sync/since delta PASS

Scenario 40 — /memories/bulk PASS

Scenario 41 — /metrics Prometheus PASS

Scenario 42 — /namespaces enumeration PASS

All artifacts