surface 08 / replay / refusal-live-0ac8eaf3c722
go-live refused because deployment must be ready
DECISION_LOOP replay for @op_k14m5ooeqh/deployment-a2aec441. The public view answers what observed the state, what policy touched it, what signing boundary existed, and what happened after resolution.
proof capsule
shareable decision evidence.
This replay exposes a stable canonical URL, JSON contract, OG image, schema, and journal proof references for the same decision artifact.
decision graph
observe to replay
- 01observecompleteoperator requested a live lease
- 02hypothesizenot_applicablerefusal occurred before strategy hypothesis execution
- 03sizerefusedgo-live request failed the live lease safety gate
- 04commitrefusedno signed action or live transition was committed
- 05resolvecompleterefused: deployment_not_ready
- 06evolvepartialoperator/runtime may retry after resolving the refusal reason
- 07replaycompletestored decision_replay_frames row
model
- status
- partial
- model id
- control-plane
- runtime build
- a2aec441-c88e-41f0-8157-e3efb026821b
- policy version
- privy-hl-go-live-v1
prompt
- status
- partial
- prompt sha
- refusal:0ac8eaf3c72296d2
- note
- Control-plane refusal frame; no strategy prompt was executed by this route.
tools
- calls
- safety_gate:complete / decision_replay_writer:complete
- safety_gate
- complete · deployment_not_ready
- decision_replay_writer
- complete · refusal persisted as replay evidence
journal
- status
- partial
- verifier
- zero.journal.v1
- stream
- safety_refusals
- sequence
- unavailable
- entry hash
- unavailable
- root hash
- unavailable
- anchor
- unavailable
- note
- No signed journal root has been attached to this replay yet.
audit
- status
- partial
- score
- 75/100
- checks
- 5/10 complete
retained graph context
adjacent decisions and hash coverage
Public graph context keeps the replay connected to nearby decisions, refusals, and journal evidence while keeping raw prompts, tool payloads, private traces, operator ids, private keys, and performance metrics out of the public payload.
refusal:0ac8eaf3c72296d2 · body public: no65f09ba43ecf17248e497e42f9f052732a69c4716a567634a8a2fcd3d98012ee0ac8eaf3c72296d2124128df87bb63baab5b66665489b2199d09854811ac2988pending root hashprevious
- replay
- refusal-hl-98ffd019106e
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
next
- replay
- refusal-hl-1373743781b4
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
same operator
signing boundary
live_lease_gate
no private keys stored. Allowed actions are rendered from the replay payload, so a human and an agent can verify whether this decision was execution-capable or a refusal.
0ac8eaf3c72296d2124128df87bb63baab5b66665489b2199d09854811ac2988journal rootpartialraw evidencehttps://getzero.dev/api/deployments/a2aec441-c88e-41f0-8157-e3efb026821b/evidence