القائمة
The propose/evaluate/commit/HITL contract with TheEights for evolving artifacts. Maps risk_class to evolution policy and documents the API surface AgentSmith calls.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | evolution-handoff |
| description | The propose/evaluate/commit/HITL contract with TheEights for evolving artifacts. Maps risk_class to evolution policy and documents the API surface AgentSmith calls. |
| allowed-tools | Read, Bash |
Smith never edits the world in place. Smith proposes; TheEights evolves; humans approve when risk_class demands it.
| risk_class | Policy | Path |
|---|---|---|
| low | auto | propose -> evaluate -> commit (no HITL; full audit per N5) |
| medium | hitl-only | propose -> evaluate -> HITL approve -> commit |
| high | hitl-only | propose -> evaluate -> HITL approve -> commit (2-reviewer rule) |
| critical | frozen | propose -> evaluate -> immortal-head HITL -> commit OR refuse |
frozen does not mean uneditable; it means the change requires the immortal-head review path documented in cerberus-bridge. Items in the quarantine-protocol "what NOT to quarantine" list are constitution-frozen and reject even propose calls (refuse per N4).
All calls go through the eights.evolution.* namespace. Smith authenticates with its constitution hash; mismatches refuse per N1.
eights.evolution.proposeSubmit a candidate change.
inputs:
artifact_kind: <agent|skill|command|hook|team|squad|rubric|mcp>
resource_id: <stable id or path>
diff: <unified diff or full replacement bytes>
rationale: <free text; cites a signal, anomaly, or request>
proposed_risk_class: <low|medium|high|critical>
returns:
proposal_id: <id>
status: registered
eights.evolution.evaluateTrigger evaluation (sandbox build, validator suite, judge rubric).
inputs:
proposal_id: <id>
returns:
verdict: <pass|fail|concern>
scores: { rubric: <slug>, breakdown: {...} }
effective_risk_class: <low|medium|high|critical> # may upgrade
blockers: [<anomaly-signature>, ...]
effective_risk_class may upgrade proposed_risk_class. Downgrades are refused per N4.
eights.evolution.commitApply an evaluated proposal.
inputs:
proposal_id: <id>
approval_token: <required when effective_risk_class >= medium>
returns:
commit_id: <id>
applied_at: <iso>
rollback_token: <opaque>
Refuses if verdict != pass. Refuses if effective_risk_class requires approval and approval_token is missing.
eights.evolution.approveHuman path — usually invoked by a HITL reviewer UI, but Smith may surface the deeplink.
inputs:
proposal_id: <id>
reviewer: <human id>
decision: <approve|reject>
notes: <text>
returns:
approval_token: <id> # only on approve
eights.evolution.rollbackUndo a commit. Always available; never gated.
inputs:
commit_id: <id>
rollback_token: <opaque>
reason: <text>
returns:
reverted_at: <iso>
A rollback emits a fresh audit record and does NOT delete the original commit history (N5).
| Trigger | Call sequence |
|---|---|
| Detector suggests a low-risk fix (typo, missing description) | propose -> evaluate -> commit |
Operator requests new skill via /smith:factory | propose -> evaluate -> (HITL if med+) -> commit |
| Anomaly mitigation requires schema correction | propose -> evaluate -> HITL -> commit |
| Constitution-adjacent request | refuse per N4; suggest immortal-head path |
| Post-deploy regression detected by missability check | rollback (with reason citing detection) |
registered; Smith does NOT auto-retry; surfaces to operator.commit; do not bypass. Validators are part of the trust boundary.matrix-invariants (N1, N4, N5, N6 cited above)agent-factory-recipes (default risk_class per kind)quarantine-protocol (the frozen-resource list)cerberus-bridge (immortal-head path for critical)Templates for the 8 artifact kinds (agent, skill, command, hook, team, squad, rubric, mcp) across the 6 sibling projects. Location conventions, frontmatter, validators, default risk class.
Known drift, injection, and runaway patterns plus mitigations. Reference before logging a Smith anomaly or wiring a detector.
The 10 immutable invariants (N1..N10) that AgentSmith enforces across the AI ecosystem. Reference before any refusal, override, or constitutional citation.
How AgentSmith isolates rogue artifacts and agents. Detect, suspend, sandbox, file HITL, await ruling, reinstate or purge. Includes what must NEVER be quarantined.
Refusal-appeal protocol between AgentSmith and Hydra's venom gate. How to file false-positive or false-negative appeals, immortal-head review path, and required audit trail.
Shared conventions across the 6 sibling AI projects. Frontmatter, .claude layout, team and command schemas, hook patterns, MCP registration, artifact directories. The default-when-unsure reference.