surface 08 / replay / refusal-live-6f9706c39302
go-live refused because deployment must be ready
DECISION_LOOP replay for @op_k14m5ooeqh/deployment-678ff335. The public view answers what observed the state, what policy touched it, what signing boundary existed, and what happened after resolution.
proof capsule
shareable decision evidence.
This replay exposes a stable canonical URL, JSON contract, OG image, schema, and journal proof references for the same decision artifact.
decision graph
observe to replay
- 01observecompleteoperator requested a live lease
- 02hypothesizenot_applicablerefusal occurred before strategy hypothesis execution
- 03sizerefusedgo-live request failed the live lease safety gate
- 04commitrefusedno signed action or live transition was committed
- 05resolvecompleterefused: deployment_not_ready
- 06evolvepartialoperator/runtime may retry after resolving the refusal reason
- 07replaycompletestored decision_replay_frames row
model
- status
- partial
- model id
- control-plane
- runtime build
- 678ff335-1e88-4051-8d22-5bcf5fabcb0a
- policy version
- privy-hl-go-live-v1
prompt
- status
- partial
- prompt sha
- refusal:6f9706c393021a6d
- note
- Control-plane refusal frame; no strategy prompt was executed by this route.
tools
- calls
- safety_gate:complete / decision_replay_writer:complete
- safety_gate
- complete · deployment_not_ready
- decision_replay_writer
- complete · refusal persisted as replay evidence
journal
- status
- partial
- verifier
- zero.journal.v1
- stream
- safety_refusals
- sequence
- unavailable
- entry hash
- unavailable
- root hash
- unavailable
- anchor
- unavailable
- note
- No signed journal root has been attached to this replay yet.
audit
- status
- partial
- score
- 75/100
- checks
- 5/10 complete
retained graph context
adjacent decisions and hash coverage
Public graph context keeps the replay connected to nearby decisions, refusals, and journal evidence while keeping raw prompts, tool payloads, private traces, operator ids, private keys, and performance metrics out of the public payload.
refusal:6f9706c393021a6d · body public: no65f09ba43ecf17248e497e42f9f052732a69c4716a567634a8a2fcd3d98012ee6f9706c393021a6dc77b0bfa942697c06a1fb4b976f86063de827bd3a5789f73pending root hashprevious
- replay
- refusal-hl-79470e6ebdf9
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
next
- replay
- refusal-hl-72028877cedc
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
same operator
signing boundary
live_lease_gate
no private keys stored. Allowed actions are rendered from the replay payload, so a human and an agent can verify whether this decision was execution-capable or a refusal.
6f9706c393021a6dc77b0bfa942697c06a1fb4b976f86063de827bd3a5789f73journal rootpartialraw evidencehttps://getzero.dev/api/deployments/678ff335-1e88-4051-8d22-5bcf5fabcb0a/evidence