surface 08 / replay / refusal-live-c5d292b39c07
go-live refused because deployment must be ready
DECISION_LOOP replay for @op_k14m5ooeqh/deployment-ed287d76. The public view answers what observed the state, what policy touched it, what signing boundary existed, and what happened after resolution.
proof capsule
shareable decision evidence.
This replay exposes a stable canonical URL, JSON contract, OG image, schema, and journal proof references for the same decision artifact.
decision graph
observe to replay
- 01observecompleteoperator requested a live lease
- 02hypothesizenot_applicablerefusal occurred before strategy hypothesis execution
- 03sizerefusedgo-live request failed the live lease safety gate
- 04commitrefusedno signed action or live transition was committed
- 05resolvecompleterefused: deployment_not_ready
- 06evolvepartialoperator/runtime may retry after resolving the refusal reason
- 07replaycompletestored decision_replay_frames row
model
- status
- partial
- model id
- control-plane
- runtime build
- ed287d76-bb47-4f6e-919e-78fbd764724e
- policy version
- privy-hl-go-live-v1
prompt
- status
- partial
- prompt sha
- refusal:c5d292b39c077efc
- note
- Control-plane refusal frame; no strategy prompt was executed by this route.
tools
- calls
- safety_gate:complete / decision_replay_writer:complete
- safety_gate
- complete · deployment_not_ready
- decision_replay_writer
- complete · refusal persisted as replay evidence
journal
- status
- partial
- verifier
- zero.journal.v1
- stream
- safety_refusals
- sequence
- unavailable
- entry hash
- unavailable
- root hash
- unavailable
- anchor
- unavailable
- note
- No signed journal root has been attached to this replay yet.
audit
- status
- partial
- score
- 75/100
- checks
- 5/10 complete
retained graph context
adjacent decisions and hash coverage
Public graph context keeps the replay connected to nearby decisions, refusals, and journal evidence while keeping raw prompts, tool payloads, private traces, operator ids, private keys, and performance metrics out of the public payload.
refusal:c5d292b39c077efc · body public: no65f09ba43ecf17248e497e42f9f052732a69c4716a567634a8a2fcd3d98012eec5d292b39c077efc20521fa6172a711532a5010aca2c04ead74bcda5d3c8381dpending root hashprevious
- replay
- refusal-hl-4171c1a8177f
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
next
- replay
- refusal-hl-cd0a9a17aac5
- outcome
- refusal
- journal
- partial
- audit
- partial
- summary
- runtime signing refused because deployment is not live
same operator
signing boundary
live_lease_gate
no private keys stored. Allowed actions are rendered from the replay payload, so a human and an agent can verify whether this decision was execution-capable or a refusal.
c5d292b39c077efc20521fa6172a711532a5010aca2c04ead74bcda5d3c8381djournal rootpartialraw evidencehttps://getzero.dev/api/deployments/ed287d76-bb47-4f6e-919e-78fbd764724e/evidence