surface 08 / replay / refusal-live-68a0cc7974cd
go-live refused because deployment must be ready
DECISION_LOOP replay for @op_k14m5ooeqh/deployment-cdc1472d. The public view answers what observed the state, what policy touched it, what signing boundary existed, and what happened after resolution.
proof capsule
shareable decision evidence.
This replay exposes a stable canonical URL, JSON contract, OG image, schema, and journal proof references for the same decision artifact.
decision graph
observe to replay
- 01observecompleteoperator requested a live lease
- 02hypothesizenot_applicablerefusal occurred before strategy hypothesis execution
- 03sizerefusedgo-live request failed the live lease safety gate
- 04commitrefusedno signed action or live transition was committed
- 05resolvecompleterefused: deployment_not_ready
- 06evolvepartialoperator/runtime may retry after resolving the refusal reason
- 07replaycompletestored decision_replay_frames row
model
- status
- partial
- model id
- control-plane
- runtime build
- cdc1472d-36e6-4493-8b69-ae3b19238788
- policy version
- privy-hl-go-live-v1
prompt
- status
- partial
- prompt sha
- refusal:68a0cc7974cd2a02
- note
- Control-plane refusal frame; no strategy prompt was executed by this route.
tools
- calls
- safety_gate:complete / decision_replay_writer:complete
- safety_gate
- complete · deployment_not_ready
- decision_replay_writer
- complete · refusal persisted as replay evidence
journal
- status
- partial
- verifier
- zero.journal.v1
- stream
- safety_refusals
- sequence
- unavailable
- entry hash
- unavailable
- root hash
- unavailable
- anchor
- unavailable
- note
- No signed journal root has been attached to this replay yet.
audit
- status
- partial
- score
- 75/100
- checks
- 5/10 complete
retained graph context
adjacent decisions and hash coverage
Public graph context keeps the replay connected to nearby decisions, refusals, and journal evidence while keeping raw prompts, tool payloads, private traces, operator ids, private keys, and performance metrics out of the public payload.
refusal:68a0cc7974cd2a02 · body public: no65f09ba43ecf17248e497e42f9f052732a69c4716a567634a8a2fcd3d98012ee68a0cc7974cd2a02ed97f9ba2538234531ffc5b66aa4476ad18baa0c1e060a16pending root hashprevious
- replay
- refusal-hl-798e649ccb7e
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
next
- replay
- refusal-hl-5f698210146a
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
same operator
signing boundary
live_lease_gate
no private keys stored. Allowed actions are rendered from the replay payload, so a human and an agent can verify whether this decision was execution-capable or a refusal.
68a0cc7974cd2a02ed97f9ba2538234531ffc5b66aa4476ad18baa0c1e060a16journal rootpartialraw evidencehttps://getzero.dev/api/deployments/cdc1472d-36e6-4493-8b69-ae3b19238788/evidence