telosieve 0.2.0-rc.4

Read-only infrastructure instruction evaluation that refuses when trusted evidence cannot agree
Documentation
{
  "schema_version": "telosieve.evaluation-product-contract/v3",
  "decision": "private-evaluation-product-authorized",
  "decision_date": "2026-07-30",
  "contract_revision_date": "2026-08-02",
  "repository_visibility": "private",
  "authoritative_ci": "./scripts/ci-local.sh",
  "evaluation_authority_boundary": "read-only-no-target-mutation",
  "supported_evaluation_modes": [
    {
      "configuration_schema": "telosieve.evaluation-config/v4",
      "mode": "kubernetes-shadow",
      "target_mutated": false,
      "observation_quorum_required": true,
      "certificate_schema": "telosieve.certificate/v9"
    },
    {
      "configuration_schema": "telosieve.evaluation-config/v5",
      "mode": "kubernetes-live",
      "target_mutated": false,
      "observation_quorum_required": true,
      "certificate_schema": "telosieve.certificate/v9"
    },
    {
      "configuration_schema": "telosieve.evaluation-config/v6",
      "mode": "opentofu-plan",
      "target_mutated": false,
      "observation_quorum_required": true,
      "certificate_schema": "telosieve.certificate/v10"
    },
    {
      "configuration_schema": "telosieve.evaluation-config/v7",
      "mode": "external-read-only",
      "target_mutated": false,
      "observation_quorum_required": true,
      "certificate_schema": "telosieve.certificate/v11"
    }
  ],
  "authorized_work": [
    "diagnostics-and-operator-evidence",
    "installation-upgrade-rollback-packaging",
    "private-evaluation-candidate-preparation",
    "read-only-external-observation",
    "stable-cli-and-configuration"
  ],
  "prohibited_without_separate_authorization": [
    "autonomous-production-actuation",
    "default-on-telemetry",
    "general-safety-or-byzantine-resilience-claims",
    "hosted-ci-while-private",
    "production-credential-custody",
    "public-package-or-release"
  ],
  "candidate_readiness_gates": [
    "bounded-and-versioned-cli-configuration",
    "fail-closed-live-read-only-integration",
    "install-upgrade-rollback-and-uninstall-procedure",
    "least-privilege-and-secret-free-defaults",
    "operator-diagnostics-and-evidence-export",
    "platform-resource-and-recovery-qualification",
    "signed-checksummed-reproducible-private-bundle",
    "threat-model-runbook-and-known-limitations"
  ],
  "production_promotion_gates": [
    "explicit-production-promotion-decision",
    "independent-operator-reproduction-of-exact-candidate",
    "independent-security-assessment-of-exact-candidate",
    "material-findings-remediated-and-reassessed",
    "named-production-adapter-concurrency-and-recovery-proof",
    "production-identity-key-clock-and-custody-design"
  ]
}