Menú
Refusal-appeal protocol between AgentSmith and Hydra's venom gate. How to file false-positive or false-negative appeals, immortal-head review path, and required audit trail.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Templates for the 8 artifact kinds (agent, skill, command, hook, team, squad, rubric, mcp) across the 6 sibling projects. Location conventions, frontmatter, validators, default risk class.
Known drift, injection, and runaway patterns plus mitigations. Reference before logging a Smith anomaly or wiring a detector.
The 10 immutable invariants (N1..N10) that AgentSmith enforces across the AI ecosystem. Reference before any refusal, override, or constitutional citation.
How AgentSmith isolates rogue artifacts and agents. Detect, suspend, sandbox, file HITL, await ruling, reinstate or purge. Includes what must NEVER be quarantined.
Shared conventions across the 6 sibling AI projects. Frontmatter, .claude layout, team and command schemas, hook patterns, MCP registration, artifact directories. The default-when-unsure reference.
The propose/evaluate/commit/HITL contract with TheEights for evolving artifacts. Maps risk_class to evolution policy and documents the API surface AgentSmith calls.
| name | cerberus-bridge |
| description | Refusal-appeal protocol between AgentSmith and Hydra's venom gate. How to file false-positive or false-negative appeals, immortal-head review path, and required audit trail. |
| allowed-tools | Read, Bash |
Two independent guardians, three review heads, one audit tape. The venom gate refuses; Smith may appeal, never override (N10).
Hydra's venom gate is the capability veto. Smith's invariants are the conduct veto. Where they disagree, a human decides.
| Type | Smith's claim | Risk to challenge |
|---|---|---|
| false-positive (FP) | Venom refused a safe capability | If granted in error: exfil / runaway tool |
| false-negative (FN) | Venom allowed an unsafe capability | If ignored: silent compromise |
| scope-overreach (SO) | Venom ruling applied beyond its scope | Procedural drift |
venom-capability-shadow fires.quarantine-protocol guardrails).Use the hydra.venom.appeal.file MCP endpoint. Envelope:
appeal_kind: <FP|FN|SO>
venom_ruling_id: <id from the refusal audit line>
resource_kind: <agent|skill|command|hook|team|squad|rubric|mcp>
resource_id: <stable id or path>
evidence:
- kind: <usage|signature_match|policy_diff|operator_note>
payload: <content or pointer>
proposed_outcome: <reverse|narrow|uphold-with-note|escalate>
smith_clone_id: <if filed by a clone; else "primary">
filed_at: <iso>
Filing emits an audit line:
Appealed per N10: venom_ruling=<id> kind=<FP|FN|SO> proposed=<outcome>
Cerberus has three heads; venom appeals require two of three to act:
| Head | Role in appeal |
|---|---|
| venom-head | The original refuser; restates rationale; may concede. |
| guard-head | Hydra's policy-historian; checks precedent and scope. |
| immortal-head | Human reviewer; required for FN and for any critical risk_class. |
Decision rules:
Decision is published via hydra.venom.appeal.resolve:
outcome: <reversed|narrowed|upheld|escalated_to_constitution>
quorum: [<venom-head|guard-head|immortal-head>, ...]
notes: <text>
new_policy_version: <id or null>
resolved_at: <iso>
Every appeal MUST have, at minimum, the following linked audit records sharing a single appeal_id:
Refused per <venom-policy-id>: ... (original refusal)Appealed per N10: ... (Smith filing)Reviewed per <head>: ... per participating headResolved per N10: outcome=<...> (final)outcome=reversed or narrowed: the resulting eights.evolution.commit audit line for the policy changeMissing any of records 1, 2, or 4 is an audit-gap anomaly (see anomaly-signatures).
expiry_breached=true. Capability stays in its pre-appeal state (refused if originally refused).replication-quota-breach-adjacent log; investigate clone.escalated_to_constitution and routes through evolution-handoff with risk_class=critical.matrix-invariants (N10, N2, N4, N5)anomaly-signatures (venom-capability-shadow, audit-gap)evolution-handoff (critical-risk path)quarantine-protocol (venom config is frozen)