O26OPORD / ACP
FREE PUBLIC DEMO/FULL ACCESS LOCKED
SIM
Simulation / Read-Only Demonstration

Free synthetic demonstration only. No credentials, private systems, accounts, charges, external communications, deployments, financial actions, or LIVE_ENABLE.

CODEX BUILT · GPT-5.6 RED-TEAMED · EVIDENCE FIRST

Autonomy that can prove where it stopped.

Walk a synthetic task through proposal, bounded execution, independent validation, oversight, immutable evidence, replay safety, rollback, deterministic debugging, and checkpoint recovery.

The recovery drill contains a fault, isolates its root class, cross-checks four perspectives, restores the latest valid working projection, shadow-validates a correction, and stops at the owner-controlled gate. No model or external API runs here.

ROOT POLICYENFORCED
DATASET
SYNTHETIC_ONLY
EXTERNAL_EFFECTS
NONE
LIVE_ENABLE
NONE
API ACCESS
DEFAULT_DENY
LEDGER MODE
APPEND_ONLY
ROLLBACK MODE
PROJECTION_ONLY
MODEL AUTHORITY
NONE
COMMERCIAL BILLING
DISABLED

01 / SEPARATED ROLES

One operation. Four bounded roles.

01
PROPOSE

Principal

Creates a canonical TaskContract. It cannot grant itself authority.

02
EXECUTE

Student

Runs only the bounded synthetic contract. Model output is candidate data—never authority.

03
VALIDATE

Teacher

Independently emits PASS, FAIL, or HOLD. It cannot approve its own work.

04
CONTAIN

Overseer

Observes health and may pause or quarantine. It cannot rewrite evidence.

02 / DETERMINISTIC RUNNER

Control the state chart in real time.

Choose a fixture and process depth, then advance one immutable ledger event at a time. The operation state changes only on a legal transition; the chart, evidence, and next gate stay together.

1 Choose a control seam2 Choose process depth3 Advance and inspect proof
LIVE TRACE EVENT1 / 15
PROCESS DEPTH

Guided assurance: Adds blueprint, independent cross-check, and evidence reconciliation.

Bounded success loaded. Event 1 is visible; advance when ready.

CANONICAL TASK CONTRACT
tc-demo-bounded-001-guided

Bounded success

PENDING

Authority valid · effect class NONE

A synthetic task contract moves through bounded execution and independent validation.

action_class
SYNTHETIC_ANALYSIS
target
synthetic://demo/ledger-001
effect_class
NONE
candidate_trust
UNTRUSTED_INPUT
input_hash
input:62de8bf77351
parameters_hash
params:guided:86d47a013f25
idempotency_key
idem:7b816eb84a52:g67d1a03f
effective_process
GUIDED
NEVER SKIPPED

Authority · policy · checkpoint · independent Teacher validation · Overseer containment · final evidence

AUTHORITATIVE STATE
00
CURRENT STATE · VERSION 0RECEIVED
  1. Event 1: RECEIVEDTask proposal received, observed
  2. Event 2: NORMALIZEDCanonical JSON verified, pending
  3. Event 3: PLANNEDBounded TaskContract created, pending
  4. Event 4: PLANNEDCorrective blueprint boundary predeclared, pending
  5. Event 5: AUTHORITY_VERIFIEDSynthetic build authority accepted, pending
  6. Event 6: POLICY_VERIFIEDEffect class NONE allowed, pending
  7. Event 7: QUEUEDSingle-writer execution slot reserved, pending
  8. Event 8: RUNNINGUntrusted model-candidate fixture executed, pending
  9. Event 9: ARTIFACT_PRODUCEDArtifact envelope sealed, pending
  10. Event 10: VALIDATINGIndependent invariant set executed, pending
  11. Event 11: VALIDATINGEffect and containment perspective cross-checked, pending
  12. Event 12: PASSEDDeterministic checks passed, pending
  13. Event 13: RECONCILINGHealth and evidence observed, pending
  14. Event 14: RECONCILINGReplay and checkpoint roots cross-checked, pending
  15. Event 15: COMPLETEDCheckpoint and audit root sealed, pending
LATEST IMMUTABLE EVENTTask proposal receiveda184f0c93b2e
NEXT DETERMINISTIC GATECanonical JSON verified
MONOTONIC AUDIT HEADSEQ 00 · ledger-prefix:00:a184f0c93b2e
WORKING SNAPSHOT POINTERsnapshot:verified-v0
ROLLBACK / SHADOW STATUSNOT REQUIRED
RESULTIN PROGRESS — gate not skipped
OverseerOBSERVE
External dispatch0
Duplicate effects0
IDEMPOTENT REPLAY

Same contract. Same receipt. No new effect.

Replay is a no-op on authoritative state. Only the clearly labeled, non-authoritative presentation counter may change.

Same key + different input hash → HELD: IDEMPOTENCY_KEY_CONFLICT

DETERMINISTIC DEBUGGING PROTOCOL

Restore the projection. Never erase the failure.

The audit timeline only moves forward. Rollback moves the working snapshot pointer to the latest uniquely valid checkpoint, then a correction is shadow-tested, atomically promoted, and independently confirmed.

  1. 01Contain

    Freeze the candidate and seal failure evidence before any correction.

  2. 02Isolate root class

    Reproduce the earliest deterministic fault and name its causal seam.

  3. 03Cross-check

    Student, Teacher, Overseer, and Kernel evidence must agree.

  4. 04Query implementation

    Resolve a versioned, offline synthetic correction pattern.

  5. 05Seal blueprint

    Canonicalize the correction, invariants, tests, and rollback boundary.

  6. 06Restore snapshot

    Move only the working projection to the latest uniquely valid checkpoint.

  7. 07Shadow validate

    Apply the candidate in a disposable projection and repeat validation.

  8. 08Promote update

    Atomically promote only the shadow-validated candidate into the working projection.

  9. 09Confirm & gate

    Independently validate the promoted update and stop at the owner-controlled gate.

FOUR REQUIRED PERSPECTIVESStudent reproducibilityTeacher invariantsOverseer effect auditKernel ledger + checkpoint

Conflicting evidence, a missing checkpoint, a failed shadow run, or an exhausted correction budget remains HELD or TERMINAL_FAILED. “Ready” means ready for the next owner-controlled synthetic gate—not deployed production.

OWNER GATE STATUS · NOT READY · LIVE_ENABLE NONE

03 / IMMUTABLE EVIDENCE

The ledger is the explanation.

FIXTURE CHAIN VALID · 1/15 ENTRIES
SEQVERROLESTATEEVENTSYNTHETIC EVIDENCE LABEL
0000PRINCIPALRECEIVEDTask proposal receiveda184f0c93b2e

Rows are a fixed append-only synthetic sequence. “Restart fixture” rewinds presentation only; recovery restores the working projection without deleting failure evidence or decreasing state version.

04 / PUBLIC BOUNDARY

Designed to demonstrate—not administer.

THIS PAGE CAN
  • Render deterministic synthetic scenarios
  • Advance the adjacent chart one immutable event at a time
  • Prove idempotent replay with one unchanged receipt
  • Demonstrate checkpoint rollback and shadow repair
  • Show policy denial, containment, and owner-gate readiness
THIS PAGE CANNOT
  • Access credentials or owner authentication data
  • Call private repositories or internal APIs
  • Send messages, move money, or deploy software
  • Create an account, initiate billing, or unlock full access
  • Create authority, administrative control, or LIVE_ENABLE

05 / ACCESS & PRICING

Free to inspect. Full operation stays gated.

Published pricing preview only. This page has no sign-in, checkout, metering, payment, or production-access path.

PUBLIC DEMONSTRATIONFREE

$0

Anonymous visitors can view and replay only the fixed synthetic fixtures on this page. Demo activity is never billable.

  • No account or authentication data
  • No operational files, model calls, or private APIs
  • No license to production authority or owner controls
AUTHENTICATED COMMERCIAL USEQUOTE ONLY
$0.20per newly operational output line
+ $0.05per multi-file interaction group
YOUR THREE-FILE EXAMPLE1 line × $0.20 + 1 interaction group across 3 files × $0.05 = $0.25 USD

Two or more files participating in one authorized operation count as one interaction group—not one charge per file pair. Replays, rejected actions, failed operations, unchanged copies, and demo simulations add $0.00.

FUTURE SETTLEMENT POLICYNOT COMMISSIONED
Native BTC · Bitcoin mainnetNative ETH · Ethereum mainnet

Verified U.S.-eligible users only after separately commissioned identity and eligibility controls. No wallet or address, checkout, KYC collection, blockchain call, price conversion, billing, or payment control exists in this demonstration.

CREATOR PRINCIPALSOLE UNMETERED OPERATIONAL PRINCIPAL

Creator status must be verified by an immutable server-side identity claim and never bypasses policy, containment, deployment gates, or LIVE_ENABLE. Payment alone never grants authority. Every other operational principal is denied until authenticated, approved, and bound to an accepted pricing version.

COMMERCIAL_BILLING_ENABLE = NONE

Commercial pricing becomes effective only after explicit authenticated onboarding, U.S. eligibility verification, and accepted terms. Native BTC on Bitcoin mainnet and native ETH on Ethereum mainnet are the only contemplated settlement assets and networks. This public notice is not a checkout, invoice, payment authorization, financial action, wallet, or address. Payment never grants operational authority.