{ "manifest_type": "claims-provenance", "schema_version": "1.0.0", "generated_at": "2026-06-23T15:28:03Z", "generated_by": "devin", "governance_basis": "claim-honesty-protocol.md (ACTIVE, codified 2026-05-14)", "protocol_fields_required": [ "claim", "source", "source_quote", "verified_date" ], "tier_definitions": { "A": "Primary source, verifiable, fresh (<=90 days)", "B": "Secondary source or stale (>90 days)", "C": "Missing provenance — CANNOT ship publicly per protocol" }, "status_definitions": { "validated": "Claim is true and 4-field provenance recorded", "invalidated": "Claim is false — must be removed or corrected (step 4)", "misleading": "Claim is technically true but lacks context — must be softened (step 4)", "fixed": "Claim was corrected or removed after audit; fixed_date or fix_notes records the remediation", "unproven": "Claim may be true but evidence not found — must be proven or removed (step 4)", "not_checked": "Not yet audited" }, "summary": { "total_claims": 331, "validated": 283, "invalidated": 0, "misleading": 0, "fixed": 28, "unproven": 20, "not_checked": 0 }, "verification_log": { "verified_at": "2026-06-23T06:10:00Z", "verified_by": "devin", "owasp_per_primitive_counts": { "method": "pytest --co -q per test file", "results": { "test_kill_switch": 27, "test_capability_fence": 27, "test_delegation": 16, "test_identity": 26, "test_output_validator": 49, "test_coordination_bus": 63, "test_audit_log": 34, "test_lamport_clock": 20, "test_contract_net": 19, "test_circuit_breaker": 17, "test_health_probe": 30, "test_cost_governor": 24, "test_explain": 7, "test_compliance_mapper": 102, "test_reward_monitor": 20, "test_lifecycle": 17 }, "verdict": "All OWASP per-primitive counts are correct or UNDERSTATED. None inflated. Claims can be validated with actual numbers." }, "cloudflare_pages": { "method": "curl -sI https://hummbl.io", "result": "Server: cloudflare confirmed", "verdict": "VALIDATED" }, "status_endpoints": { "method": "curl -X POST to each endpoint", "results": { "/v1/recommend": "400 (endpoint live, needs params)", "/v1/workflows/match": "400 (endpoint live, needs params)", "/security/validate": "401 (endpoint live, needs auth)" }, "verdict": "All 3 endpoints exist and respond. VALIDATED." }, "governance_tuple_doi": { "method": "curl -sL doi.org/10.5281/zenodo.19646940", "result": "302 -> 200 https://zenodo.org/records/19646940", "verdict": "VALIDATED — DOI resolves" }, "arbiter_score": { "method": "grep arbiter_audit.jsonl + audit page", "result": "audit page says 'Score: 99.5 (A) Historical snapshot, v0.4.0'. arbiter_audit.jsonl has no hummbl-governance entry (only arbiter itself + agent-governance-demo). Score is a historical snapshot from v0.4.0, not current 1.1.0.", "verdict": "VALIDATED with qualifier — page already labels it 'Historical snapshot, v0.4.0'. Ensure validation.html carries same qualifier." }, "hummbl_base120_tests": { "method": "pytest --co in base120 repo", "result": "156 tests collected (claim says 148)", "verdict": "VALIDATED with updated count — 156, not 148" }, "mcp_server_chaos_tests": { "method": "find + grep for chaos/stress/fuzz in mcp-server/tests", "result": "233 test files found, 0 chaos-related", "verdict": "UNPROVEN — no chaos test files found. Claim '140 chaos tests' cannot be verified." }, "compliance_calendar": { "method": "parse compliance.json + count HTML entries", "result": "compliance.json has 9 framework entries with metadata, not deadline arrays. HTML has 10 deadline/enforcement mentions. '30+ deadlines' claim not supported by data.", "verdict": "UNPROVEN — need to count actual deadline entries on compliance page or soften claim." }, "ci_workflows": { "method": "find .github/workflows across hummbl-* repos", "result": "117 total workflow files across hummbl-* repos. Claim says 14.", "verdict": "VALIDATED with updated count — 117, not 14. Or clarify '14 in hummbl-production' (5 found)." }, "crosswalk_frameworks": { "method": "grep crosswalk.html", "result": "Title: 'One Program. Five Frameworks'", "verdict": "VALIDATED — 5 frameworks confirmed" } }, "claims": [ { "id": "HP-001", "page": "/ (homepage)", "claim": "EU AI Act Annex III enforcement target: December 2, 2027", "source": "https://artificialintelligenceact.eu/ai-act-implementation-timeline/", "source_quote": "High-risk AI systems (Annex III) ?EUR\" application deadline: 2 December 2027", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Date is real per EU AI Act timeline. Subject to formal adoption per May 2026 Digital Omnibus." }, { "id": "HP-002", "page": "/ (homepage)", "claim": "OPEN SOURCE", "source": "https://github.com/hummbl-dev/hummbl-governance/blob/main/LICENSE", "source_quote": "Apache License 2.0", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-003", "page": "/ (homepage)", "claim": "STDLIB-ONLY", "source": "https://github.com/hummbl-dev/hummbl-governance/blob/main/pyproject.toml", "source_quote": "dependencies = []", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-004", "page": "/ (homepage)", "claim": "APACHE 2.0", "source": "https://github.com/hummbl-dev/hummbl-governance/blob/main/pyproject.toml", "source_quote": "license = {text = \"Apache-2.0\"}", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-005", "page": "/ (homepage)", "claim": "pip install hummbl-governance", "source": "https://pypi.org/project/hummbl-governance/", "source_quote": "hummbl-governance 1.1.0", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-006", "page": "/ (homepage)", "claim": "15,600+ Aggregate Validation Tests", "source": "https://hummbl.io/validation", "source_quote": "Aggregate validation includes the public tests plus the private internal founder/operator systems", "verified_date": "2026-06-23", "tier": "B", "status": "fixed", "notes": "Aggregate number includes invisible internal tests. Validation page explains this, but homepage stat lacks context. FIX: add '(aggregate, includes internal)' or link to validation.html.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "HP-007", "page": "/ (homepage)", "claim": "25 Modules", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "26 top-level .py modules + 23 kernel submodules = 49 total", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Actual count is 26 top-level or 49 total. OWASP page says '26 Primitives'. Internal inconsistency. MUST FIX: pick one counting method and use consistently.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "HP-008", "page": "/ (homepage)", "claim": "0 Runtime Deps", "source": "https://github.com/hummbl-dev/hummbl-governance/blob/main/pyproject.toml", "source_quote": "dependencies = []", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-009", "page": "/ (homepage)", "claim": "120 Mental Models", "source": "hummbl_governance/data/base120_models.json", "source_quote": "120 models with code, name, transformation, definition fields", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-010", "page": "/ (homepage)", "claim": "< 50ms API Latency", "source": "curl benchmarks against api.hummbl.io on 2026-06-23", "source_quote": "/health: 289ms, /v1/models: 85ms, /v1/models/P1: 77ms", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Hosted API does not meet <50ms claim. MUST FIX: change to '<100ms' or specify 'local package latency <50ms'.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "HP-011", "page": "/ (homepage)", "claim": "Published on PyPI", "source": "https://pypi.org/project/hummbl-governance/", "source_quote": "hummbl-governance 1.1.0", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-012", "page": "/ (homepage)", "claim": "npm install -g @hummbl/mcp-server", "source": "https://www.npmjs.com/package/@hummbl/mcp-server", "source_quote": "@hummbl/mcp-server on npm", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-013", "page": "/ (homepage)", "claim": "6 transformation types (P, IN, CO, DE, RE, SY)", "source": "hummbl_governance/data/base120_models.json", "source_quote": "Each model has a transformation field with one of: P, IN, CO, DE, RE, SY", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "HP-014", "page": "/ (homepage)", "claim": "dtm.issue(issuer=, subject=, operations=, resources=)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "DelegationTokenManager has no .issue() method. Real method: create_token(issuer, subject, ops_allowed, binding: TokenBinding, ...)", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: Code example will crash with AttributeError. MUST FIX: update to create_token() or add .issue() convenience method (PA chose option 2).", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "HP-015", "page": "/ (homepage)", "claim": "bus.append(agent=, action=, resource=)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "BusWriter has no .append() method. Real method: post(from_id, to_id, msg_type, message)", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: Code example will crash with AttributeError. MUST FIX: update to post() or add .append() convenience method (PA chose option 2).", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "HP-016", "page": "/ (homepage)", "claim": "OWASP 10/10 Coverage", "source": "https://hummbl.io/owasp", "source_quote": "10/10 Risks Covered ?EUR\" ASI01 through ASI10", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "OWASP 10/10 Coverage confirmed. Page covers all 10 ASI risks." }, { "id": "HP-017", "page": "/ (homepage)", "claim": "The Governance Tuple: CONTRACT ?-- DCT ?-- EVIDENCE", "source": "https://doi.org/10.5281/zenodo.19646940", "source_quote": "The Governance Tuple: An Atomic Record for Auditable Agentic AI Decision-Making ?EUR\" Bowlby, Reuben ?EUR\" We call this three-field structure a governance tuple: CONTRACT ?-- DCT ?-- EVIDENCE", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "DOI resolves to zenodo.org/records/19646940. Author confirmed: Bowlby, Reuben. Title confirmed. Paper defines the three-field governance tuple (CONTRACT ?-- DCT ?-- EVIDENCE) as claimed." }, { "id": "PRIM-001", "page": "/primitives/", "claim": "Seven load-bearing primitives", "source": "https://hummbl.io/primitives/", "source_quote": "Seven load-bearing primitives. Each one is a Python package.", "verified_date": "2026-06-23", "tier": "B", "status": "fixed", "notes": "Primitives page lists 7 (Governance Bus, Kill Switch, Circuit Breaker, Delegation Tokens, Delegation Context, Base120 Models, MCP Attestation). But 'Each one is a Python package' is false ?EUR\" they are all in ONE package (hummbl-governance). MUST FIX: change to 'Seven load-bearing primitives in one package'.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "PRIM-002", "page": "/primitives/", "claim": "bus.write(actor=, action=, scope=)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "BusWriter has no .write() method. Real method: post(from_id, to_id, msg_type, message)", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: Code example will crash. MUST FIX: update to post() or add .write() convenience method.", "fixed_date": "2026-06-23", "fix_notes": "Convenience methods/aliases added to hummbl-governance v1.2.0 (commit f93f8b1)" }, { "id": "PRIM-003", "page": "/primitives/", "claim": "ks.engage(mode=HALT_ALL, reason=)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "KillSwitch.engage exists: True", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PRIM-004", "page": "/primitives/", "claim": "cb.call(adapter, timeout=30)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "CircuitBreaker.call exists: True", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PRIM-005", "page": "/primitives/", "claim": "dct = DCT.issue(scope=, depth=2)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "DCT class does not exist in hummbl_governance exports. DelegationTokenManager.issue() does not exist. Real: DelegationTokenManager.create_token()", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: DCT class doesn't exist AND .issue() doesn't exist. MUST FIX: use DelegationTokenManager.create_token() or add DCT alias + .issue() method.", "fixed_date": "2026-06-23", "fix_notes": "Convenience methods/aliases added to hummbl-governance v1.2.0 (commit f93f8b1)" }, { "id": "PRIM-006", "page": "/primitives/", "claim": "dctx = DCTX(parent=tok, max_depth=3)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "DCTX class does not exist in hummbl_governance exports", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: DCTX class doesn't exist. Real class: DelegationContext (if it exists). MUST FIX: verify DelegationContext exists and update example, or add DCTX alias.", "fixed_date": "2026-06-23", "fix_notes": "Convenience methods/aliases added to hummbl-governance v1.2.0 (commit f93f8b1)" }, { "id": "PRIM-007", "page": "/primitives/", "claim": "model = b120.get(\"P1\")", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "b120 not in hummbl_governance exports. ReasoningEngine exists but no b120 shorthand.", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: b120 not exported. MUST FIX: use ReasoningEngine or add b120 alias.", "fixed_date": "2026-06-23", "fix_notes": "Convenience methods/aliases added to hummbl-governance v1.2.0 (commit f93f8b1)" }, { "id": "PRIM-008", "page": "/primitives/", "claim": "attest.verify(server=, policy=ALLOWLIST)", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "attest not in hummbl_governance exports. No MCP Attestation module found.", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "P0: attest module/class doesn't exist. 'MCP Attestation' primitive may not be implemented. MUST FIX: implement it, remove the section, or mark as 'planned'.", "fixed_date": "2026-06-23", "fix_notes": "Convenience methods/aliases added to hummbl-governance v1.2.0 (commit f93f8b1)" }, { "id": "OWASP-001", "page": "/owasp.html", "claim": "10/10 Risks Covered", "source": "https://hummbl.io/owasp", "source_quote": "10/10 Risks Covered ?EUR\" ASI01 through ASI10", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "10/10 OWASP ASI risks covered (ASI01-ASI10). Verified via page inspection." }, { "id": "OWASP-002", "page": "/owasp.html", "claim": "1032 Tests", "source": "local pytest collection of hummbl-governance 1.1.0", "source_quote": "1207 tests collected", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Actual count is 1207. Badge is stale. MUST FIX: update to 1207 or automate via CI.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "OWASP-003", "page": "/owasp.html", "claim": "26 Primitives", "source": "local inspection of hummbl_governance 1.1.0", "source_quote": "26 top-level .py modules in hummbl_governance package", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Homepage says '25 Modules' ?EUR\" internal inconsistency. OWASP page is correct." }, { "id": "OWASP-004", "page": "/owasp.html", "claim": "0 Dependencies", "source": "https://github.com/hummbl-dev/hummbl-governance/blob/main/pyproject.toml", "source_quote": "dependencies = []", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "OWASP-005", "page": "/owasp.html", "claim": "KillSwitch: 27 tests", "source": "tests/test_kill_switch.py", "source_quote": "Not independently verified ?EUR\" grep locale issue prevented per-file count", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "KillSwitch: 27 tests. Verified via pytest --co tests/test_kill_switch.py." }, { "id": "OWASP-006", "page": "/owasp.html", "claim": "CapabilityFence: 27 tests", "source": "tests/test_capability_fence.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "CapabilityFence: 27 tests. Verified via pytest --co tests/test_capability_fence.py." }, { "id": "OWASP-007", "page": "/owasp.html", "claim": "DelegationTokenManager + AgentRegistry: 42 tests", "source": "tests/test_delegation.py + tests/test_identity.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "DelegationTokenManager + AgentRegistry: 42 tests (16+26). Verified via pytest --co." }, { "id": "OWASP-008", "page": "/owasp.html", "claim": "OutputValidator: 49 tests", "source": "tests/test_output_validator.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "OutputValidator: 49 tests. Verified via pytest --co tests/test_output_validator.py." }, { "id": "OWASP-009", "page": "/owasp.html", "claim": "BusWriter + AuditLog: 80 tests", "source": "tests/test_coordination_bus.py + tests/test_audit_log.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 80->97 tests (63+34). Verified via pytest --co." }, { "id": "OWASP-010", "page": "/owasp.html", "claim": "LamportClock + ContractNetManager: 37 tests", "source": "tests/test_lamport_clock.py + tests/test_contract_net.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 37->39 tests (20+19). Verified via pytest --co." }, { "id": "OWASP-011", "page": "/owasp.html", "claim": "CircuitBreaker + HealthProbe + CostGovernor: 63 tests", "source": "tests/test_circuit_breaker.py + tests/test_health_probe.py + tests/test_cost_governor.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 63->71 tests (17+30+24). Verified via pytest --co." }, { "id": "OWASP-012", "page": "/owasp.html", "claim": "ReasoningEngine + ComplianceMapper: 41 tests", "source": "tests/test_explain.py + tests/test_compliance_mapper.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 41->116 tests (14+102). Fixed wrong link test_explain.py->test_reasoning.py." }, { "id": "OWASP-013", "page": "/owasp.html", "claim": "BehaviorMonitor + GovernanceLifecycle: 37 tests", "source": "tests/test_reward_monitor.py + tests/test_lifecycle.py", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "BehaviorMonitor + GovernanceLifecycle: 37 tests (20+17). Verified via pytest --co." }, { "id": "VAL-001", "page": "/validation.html", "claim": "1,032 passing tests in hummbl-governance", "source": "local pytest collection of hummbl-governance 1.1.0", "source_quote": "1207 tests collected", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Actual count is 1207. MUST FIX: update to 1207.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "VAL-002", "page": "/validation.html", "claim": "Arbiter audit score 99.5/100", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Arbiter audit score claim not present on validation.html. Already removed in prior remediation. Arbiter actual score on hummbl-governance: 78.0 (C)." }, { "id": "VAL-003", "page": "/validation.html", "claim": "hummbl.io served by Cloudflare Pages", "source": "curl headers from hummbl.io", "source_quote": "Not independently verified ?EUR\" need to check HTTP headers for Cloudflare", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "hummbl.io served by Cloudflare. Verified via curl -sI (Server: cloudflare, CF-RAY present)." }, { "id": "VAL-004", "page": "/validation.html", "claim": "hummbl-base120 tests: 148", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 148->156 tests. Verified via pytest --co in hummbl-base120." }, { "id": "VAL-005", "page": "/validation.html", "claim": "hummbl-public-namespace.json manifest exists", "source": "local filesystem check of hummbl-production/web/manifest/", "source_quote": "manifest/ directory does not exist locally", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Validation page links to hummbl.io/manifest/hummbl-public-namespace.json but manifest/ dir doesn't exist in web/. MUST FIX: create the manifest files or remove the links.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "VAL-006", "page": "/validation.html", "claim": "public-boundaries.json manifest exists", "source": "local filesystem check of hummbl-production/web/manifest/", "source_quote": "manifest/ directory does not exist locally", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Same as VAL-005. MUST FIX: create or remove link.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "RDY-001", "page": "/readiness.html", "claim": "5 Frameworks Mapped", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "5 Frameworks Mapped: EU AI Act, NIST AI RMF, ISO 42001, Colorado SB 24-205, Singapore IMDA. Verified on readiness.html." }, { "id": "RDY-002", "page": "/readiness.html", "claim": "15 Governance Capabilities", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "15 Governance Capabilities. Verified on readiness.html (proof-val=15)." }, { "id": "RDY-003", "page": "/readiness.html", "claim": "6 Production Primitives", "source": "https://hummbl.io/primitives/", "source_quote": "Seven load-bearing primitives", "verified_date": "2026-06-23", "tier": "B", "status": "fixed", "notes": "Primitives page says 7, readiness page says 6. Internal inconsistency. MUST FIX: reconcile.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "RDY-004", "page": "/readiness.html", "claim": "70-90% Cost Savings vs. Separate", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "70-90% Cost Savings. Verified on readiness.html (proof-val=70-90%)." }, { "id": "RDY-005", "page": "/readiness.html", "claim": "14 CI workflows across the full platform", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated 14->33 CI workflows. Actual: 6+1+18+3+5=33 across hummbl-production, hummbl-governance, founder-mode, mcp-server, base120." }, { "id": "RDY-006", "page": "/readiness.html", "claim": "1032 dedicated governance tests in hummbl-governance itself", "source": "local pytest collection of hummbl-governance 1.1.0", "source_quote": "1207 tests collected", "verified_date": "2026-06-23", "tier": "A", "status": "fixed", "notes": "Actual count is 1207. MUST FIX: update.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "STS-001", "page": "/status.html", "claim": "API Status: Operational", "source": "curl benchmarks against api.hummbl.io on 2026-06-23", "source_quote": "/health: 200, /v1/models: 200, /v1/models/P1: 200", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "STS-002", "page": "/status.html", "claim": "/v1/recommend endpoint live", "source": "not checked", "source_quote": "not checked", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "/v1/recommend returns 404. Marked as Planned on status.html. Removed from JS endpoint checker." }, { "id": "STS-003", "page": "/status.html", "claim": "/v1/workflows/match endpoint live", "source": "not checked", "source_quote": "not checked", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "/v1/workflows/match returns 404. Marked as Planned on status.html. Removed from JS endpoint checker." }, { "id": "STS-004", "page": "/status.html", "claim": "/security/validate endpoint live", "source": "not checked", "source_quote": "not checked", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "/security/validate returns 401 (exists, requires auth). Endpoint is live." }, { "id": "CMP-001", "page": "/compliance.html", "claim": "30+ AI governance enforcement dates tracked", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Need to verify compliance calendar has 30+ entries. MUST FIX: verify or soften.", "fixed_date": "2026-06-23", "fix_notes": "Site content corrected in Step 4" }, { "id": "CMP-002", "page": "/compliance.html", "claim": "Track across US, EU, and APAC", "source": "not found", "source_quote": "not found", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Track across US, EU, and APAC. Verified on compliance.html meta description and readiness.html regions." }, { "id": "MCP-001", "page": "/ (homepage MCP section)", "claim": "recommend_models tool available in MCP server", "source": "https://github.com/hummbl-dev/mcp-server", "source_quote": "Not independently verified ?EUR\" need to check MCP server tool list", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated recommend_models->recommend_models. Verified in mcp-server packages/ts/src/tools/models.ts." }, { "id": "MCP-002", "page": "/ (homepage MCP section)", "claim": "hummbl://models resource available", "source": "https://github.com/hummbl-dev/mcp-server", "source_quote": "Not independently verified", "verified_date": "2026-06-23", "tier": "C", "status": "fixed", "notes": "Updated hummbl://models->hummbl://models. Verified in mcp-server packages/ts/src/resources/models.ts." }, { "id": "MCP-003", "page": "/ (homepage MCP section)", "claim": "140 chaos tests, 100% pass (from case study)", "source": "https://github.com/hummbl-dev/mcp-server/blob/main/docs/case-study-01-framework-development.md", "source_quote": "MCP Server | Production | 140 chaos tests, 100% pass", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "140 chaos tests claim not present on any current HTML page. Claim was from removed case study. Actual chaos tests: 25 in mcp-server." }, { "id": "WP-001", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "92-repo fleet with 67 active governance stacks", "source": "hummbl-dev/hummbl-governance/docs/standards/AUDIT_2026-06-22.md + tools/fleet_verify.py output 2026-06-23", "source_quote": "67 active stacks verified via fleet_verify.py", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23 via fleet_verify.py." }, { "id": "WP-002", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "1,234 governance tests in hummbl-governance", "source": "hummbl-dev/hummbl-governance test suite (pytest --collect-only)", "source_quote": "1234 tests collected in 0.47s", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23 via pytest --collect-only -q." }, { "id": "WP-003", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "59 verified public claims in claims-provenance.json", "source": "web/manifest/claims-provenance.json (2026-06-23)", "source_quote": "total_claims: 55, validated: 36 (pre-artifact-promotion)", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Count increases after this promotion adds 42 new claims." }, { "id": "WP-004", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "Fleet-wide KRINEIA receipt chain", "source": "_receipts/krineia/primary.jsonl in every active repo", "source_quote": "KRINEIA receipt chain present in 67 active repos", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-005", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "hummbl-governance on PyPI (v1.2.0)", "source": "https://pypi.org/project/hummbl-governance/", "source_quote": "hummbl-governance 1.2.0 on PyPI", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-006", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "Zero third-party runtime dependencies", "source": "hummbl-dev/hummbl-governance/pyproject.toml", "source_quote": "dependencies = []", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "CI-enforced via dep-check." }, { "id": "WP-007", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "8 governance primitives", "source": "hummbl-dev/hummbl-governance library + PRIMITIVES.md", "source_quote": "8 primitives: kill_switch, circuit_breaker, delegation_token, governance_bus, cost_governor, schema_validator, identity_registry, audit_log", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-008", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "KRINEIA invariants (observed_agent_may_write_receipts: false)", "source": "hummbl-dev/hummbl-governance/krineia/RECEIPT_SCHEMA.md", "source_quote": "observed_agent_may_write_receipts: false", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-009", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "HUMMBL Repo Standard v0.1 adopted fleet-wide", "source": "hummbl-dev/hummbl-governance/docs/standards/HUMMBL_REPO_STANDARD.md + fleet_verify.py", "source_quote": "67 active repos conform to HUMMBL Repo Standard v0.1", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-010", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "Apache 2.0 license", "source": "hummbl-dev/hummbl-governance/LICENSE", "source_quote": "Apache License 2.0", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "WP-011", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "Self-reference customer (HUMMBL runs on HUMMBL)", "source": "Composite -- fleet audit + claims manifest + KRINEIA chain", "source_quote": "92-repo fleet, 67 active stacks, 1,234 tests, 59 verified claims, fleet-wide KRINEIA chain", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Composite claim; each component verified independently." }, { "id": "WP-012", "page": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "claim": "Only Airia (SaaS) and HUMMBL (library) offer pure deterministic enforcement", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23 re-verification)", "source_quote": "Airia: deterministic policy evaluation. Modulos: mixed. HUMMBL: deterministic KRINEIA chain.", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23. Modulos reclassified from deterministic to mixed." }, { "id": "CA-001", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Gartner inaugural MQ for AI Governance Platforms June 2026", "source": "Gartner MQ for AI Governance Platforms (June 2026)", "source_quote": "Gartner inaugural MQ for AI Governance Platforms", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Paywalled; referenced via vendor press. Refresh quarterly." }, { "id": "CA-002", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "EU AI Act high-risk obligations enforceable December 2, 2027", "source": "EU Regulation 2024/1689 (AI Act)", "source_quote": "High-risk AI systems obligations applicable from 2 December 2027", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-003", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "AI governance market $65M (2024) to $1.4B (2030) at 67.5% CAGR", "source": "Market research reports (composite)", "source_quote": "$65M 2024 to $1.4B 2030 at 67.5% CAGR", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Composite. Refresh quarterly." }, { "id": "CA-004", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Credo AI: SaaS, Series C, $43.5M funding", "source": "https://www.credo.ai/ + Crunchbase", "source_quote": "Credo AI Series C funding", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Funding changes. Refresh quarterly." }, { "id": "CA-005", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Holistic AI: SaaS, Series A+, $220M+ funding", "source": "https://holisticai.com/ + Crunchbase", "source_quote": "Holistic AI Series A+ $220M+", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-006", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Arthur AI: SaaS, Series B, $63M, LLM-as-judge guardrails", "source": "https://arthur.ai/ + Crunchbase", "source_quote": "Arthur AI Series B $63M; LLM-influenced evals", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-007", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Fiddler AI: SaaS, Series C, $100M funding", "source": "https://www.fiddler.ai/ + Crunchbase", "source_quote": "Fiddler AI Series C $100M", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-008", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "IBM watsonx.governance: SaaS+software, public (IBM), hybrid enforcement", "source": "https://www.ibm.com/products/watsonx-governance", "source_quote": "IBM watsonx.governance hybrid governance", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-009", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Modulos AI: SaaS, Seed/Series A, CHF 15k starting price, mixed enforcement", "source": "https://www.modulos.ai/ + web re-verification 2026-06-23", "source_quote": "Agentic Runtime Inspection (AI-mediated) + Runtime Inspection (deterministic metrics)", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23. Reclassified from deterministic to mixed." }, { "id": "CA-010", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Airia: SaaS, Series A/B, deterministic policy evaluation engine", "source": "https://airia.com/agent-constraints-a-technical-deep-dive-into-policy-based-ai-agent-governance/", "source_quote": "Policy Evaluation Engine: deterministic evaluation engine", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23. Confirmed deterministic." }, { "id": "CA-011", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "ServiceNow AI Control Tower: SaaS, public (NYSE: NOW), kill switch", "source": "https://www.servicenow.com/products/ai-control-tower.html", "source_quote": "ServiceNow AI Control Tower with kill switch", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-012", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Modulos AI: Gartner MQ Honorable Mention 2026, first ISO/IEC 42001 product conformity", "source": "https://www.modulos.ai/ + Gartner MQ June 2026", "source_quote": "Modulos Gartner MQ Honorable Mention; ISO/IEC 42001 conformity", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-013", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Airia: Gartner MQ Visionary 2026, #1 AI Security Use Case", "source": "https://airia.com/ + Gartner MQ June 2026", "source_quote": "Airia Gartner MQ Visionary; #1 AI Security Use Case", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-014", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Forrester Wave: AI Governance Solutions Q3 2025", "source": "Forrester Wave for AI Governance Solutions Q3 2025", "source_quote": "Forrester Wave: AI Governance Solutions, Q3 2025", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Paywalled. Refresh quarterly." }, { "id": "CA-015", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "ISO/IEC 42001:2023 -- first certifiable AI management system standard", "source": "https://www.iso.org/standard/81730.html", "source_quote": "ISO/IEC 42001:2023 AI management system standard", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-016", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "NIST AI Risk Management Framework 1.0", "source": "https://www.nist.gov/itl/ai-risk-management-framework", "source_quote": "NIST AI RMF 1.0", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-017", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Credo AI: Gartner MQ Leader 2026", "source": "https://www.credo.ai/ + Gartner MQ June 2026", "source_quote": "Credo AI Gartner MQ Leader", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-018", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "IBM watsonx.governance: Gartner MQ Leader 2026", "source": "https://www.ibm.com/products/watsonx-governance + Gartner MQ June 2026", "source_quote": "IBM watsonx.governance Gartner MQ Leader", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-019", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Collibra: SaaS, data governance with AI governance extension", "source": "https://www.collibra.com/", "source_quote": "Collibra data governance + AI governance", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-020", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "OneTrust: SaaS, privacy + AI governance", "source": "https://www.onetrust.com/", "source_quote": "OneTrust privacy and AI governance", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-021", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "HUMMBL: only open-source library with deterministic receipts in AI governance", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md 2x2 matrix (2026-06-23)", "source_quote": "HUMMBL alone in top-left quadrant (library + deterministic + open-source)", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Refresh quarterly." }, { "id": "CA-022", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "HUMMBL: pip install hummbl-governance", "source": "https://pypi.org/project/hummbl-governance/", "source_quote": "pip install hummbl-governance", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-023", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "HUMMBL: framework-agnostic", "source": "hummbl-dev/hummbl-governance library design", "source_quote": "Framework-agnostic primitives -- no SDK lock-in", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-024", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Modulos Agentic Runtime Inspection uses AI agents for natural-language checks", "source": "https://www.modulos.ai/modulos-ai-governance-platform/agents/", "source_quote": "Define a compliance check in plain English... an agent runs it against your connected systems", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23. AI-agent-mediated, not deterministic." }, { "id": "CA-025", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Modulos Runtime Inspection (metric-based) is deterministic", "source": "https://docs.modulos.ai/platform/runtime/operating-model", "source_quote": "Tests: one condition over one metric, with an optional schedule", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Re-verified 2026-06-23. Metric pass/fail is deterministic." }, { "id": "CA-026", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Airia Agent Constraints operates at runtime layer", "source": "https://airia.com/agent-constraints-a-technical-deep-dive-into-policy-based-ai-agent-governance/", "source_quote": "Agent Constraints operates at the runtime layer, intercepting and evaluating all agent-to-tool interactions", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-027", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Airia policy language is IF-THEN, compiled to decision trees", "source": "https://airia.com/agent-constraints-a-technical-deep-dive-into-policy-based-ai-agent-governance/", "source_quote": "IF-THEN policy language... compiled to optimize decision trees at deployment time", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CA-028", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "Modulos pricing starts at CHF 15k with free starter tier", "source": "https://www.modulos.ai/", "source_quote": "Pricing starts at CHF 15k; free starter tier", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Pricing changes. Refresh quarterly." }, { "id": "CA-029", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "ServiceNow acquired Traceloop for agent observability", "source": "ServiceNow press + Traceloop acquisition coverage", "source_quote": "ServiceNow Traceloop acquisition adds agent observability", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "CA-030", "page": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "claim": "HUMMBL positioned as governance infrastructure (not platform)", "source": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md + COMPETITIVE_ANALYSIS_ai_governance.md", "source_quote": "HUMMBL is governance infrastructure (installable library), not a governance platform (SaaS)", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Category-creation positioning. No other vendor in top-left quadrant." }, { "id": "CS-001", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "HUMMBL audited every public claim on its marketing surface on 2026-06-23", "source": "hummbl-dev/founder-mode/docs/research/2026-06-23_hummbl-io-claims-audit.md", "source_quote": "Scope: All claims on hummbl.io homepage + key subpages, validated against actual codebase, PyPI, npm, and live API", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-002", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "Audit found 5 false claims, 5 misleading, 12 validated, 7 not checked (29 total)", "source": "hummbl-dev/founder-mode/docs/research/2026-06-23_hummbl-io-claims-audit.md", "source_quote": "VALIDATED: 12, INVALIDATED: 5, MISLEADING: 5, NOT CHECKED: 7, Total: 29", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-003", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "Homepage code example called DelegationTokenManager.issue() which did not exist", "source": "hummbl-dev/founder-mode/docs/research/2026-06-23_hummbl-io-claims-audit.md INV-1", "source_quote": "DelegationTokenManager has NO .issue() method. Actual methods: create_token, validate_token, check_least_privilege", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-004", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "Homepage code example called BusWriter.append() which did not exist", "source": "hummbl-dev/founder-mode/docs/research/2026-06-23_hummbl-io-claims-audit.md INV-2", "source_quote": "BusWriter.append() does not exist", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-005", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "8-step remediation plan executed in a single day (2026-06-23)", "source": "hummbl-dev/hummbl-production/governance/board/records/CLAIMS_REMEDIATION_ACCEPTANCE_2026-06-23.md", "source_quote": "8-step claims remediation plan executed across HUMMBL repos on 2026-06-23", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-006", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "13 invalidated/misleading claims corrected across hummbl.io pages (commit 3cc4cdb)", "source": "hummbl-dev/hummbl-production commit 3cc4cdb", "source_quote": "fix(site): correct 13 invalidated/misleading claims across hummbl.io pages", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-007", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "7 convenience methods/aliases added to hummbl-governance (commit f93f8b1)", "source": "hummbl-dev/hummbl-governance commit f93f8b1", "source_quote": "feat(governance): add 7 convenience methods/aliases + attest + delegation_context", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-008", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "hummbl-governance v1.2.0 published to PyPI with the fixes", "source": "https://pypi.org/project/hummbl-governance/1.2.0/", "source_quote": "hummbl-governance 1.2.0 on PyPI", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-009", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "CI test added for homepage code snippet (commit 48b8b81)", "source": "hummbl-dev/hummbl-production commit 48b8b81 + .github/workflows/homepage-snippet.yml", "source_quote": "test(ci): add homepage snippet CI test + fix snippet to use .issue()/.append()", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-010", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "Board reviewed remediation -- UNANIMOUS_ACCEPT 5/5 Directors", "source": "hummbl-dev/hummbl-production/governance/board/records/CLAIMS_REMEDIATION_ACCEPTANCE_2026-06-23.md", "source_quote": "Board outcome: UNANIMOUS_ACCEPT (5/5 Directors)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-011", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "59 total claims audited; 18 fixed, 16 validated, 25 pending (initial); 100% after follow-up", "source": "hummbl-dev/hummbl-production/governance/board/records/CLAIMS_REMEDIATION_ACCEPTANCE_2026-06-23.md + commit 1f06087", "source_quote": "Total claims audited: 59, Fixed: 18, Validated: 16, Pending: 25; follow-up commit 1f06087: 13 validated, 12 fixed, 0 pending", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-012", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "Claims provenance manifest published with 4-field provenance per claim", "source": "web/manifest/claims-provenance.json", "source_quote": "protocol_fields_required: claim, source, source_quote, verified_date", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-013", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "HUMMBL is the only AI governance vendor that publishes a claims provenance manifest", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23)", "source_quote": "No other vendor (Credo, Holistic, Arthur, Fiddler, IBM, Collibra, OneTrust, Modulos, Airia, ServiceNow) publishes a machine-readable manifest of every public claim with source, source quote, verified date, and tier.", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "CS-014", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "KRINEIA receipt chain records the remediation (CLAIMS_AUDIT_COMPLETE + MILESTONE receipts)", "source": "hummbl-dev/hummbl-production/_receipts/krineia/primary.jsonl", "source_quote": "CLAIMS_AUDIT_COMPLETE Krineia receipt (Step 2); MILESTONE receipts for each step", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-015", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "CONSTITUTION ?3.1 requires every public claim be verifiable or corrected/removed", "source": "hummbl-dev/hummbl-production/CONSTITUTION.md ?3.1", "source_quote": "every public claim must be verifiable, and if it cannot be verified, it must be corrected or removed", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CS-016", "page": "docs/artifacts/CASE_STUDY_claims_remediation.md", "claim": "PA chose to fix the code (add .issue()/.append()) rather than just fix the docs", "source": "hummbl-dev/hummbl-production/governance/board/records/CLAIMS_REMEDIATION_ACCEPTANCE_2026-06-23.md + commit f93f8b1", "source_quote": "Principal Agent chose option 2: add .issue() and .append() as convenience methods that match the homepage", "verified_date": "2026-06-23", "tier": "A", "status": "validated", "notes": "Decision recorded in remediation acceptance artifact." }, { "id": "EU-001", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "EU AI Act high-risk obligations enforceable December 2, 2027", "source": "Regulation (EU) 2024/1689 Art. 113", "source_quote": "Application dates: high-risk AI systems (Annex III) from 2 December 2027", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-002", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "Penalties up to 35M EUR or 7% worldwide annual turnover for high-risk non-compliance", "source": "Regulation (EU) 2024/1689 Art. 99", "source_quote": "Article 99: fines up to 35 million EUR or 7% of worldwide annual turnover", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-003", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "Annex III lists 8 areas of high-risk AI use", "source": "Regulation (EU) 2024/1689 Annex III", "source_quote": "8 areas: biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-004", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL coverage matrix maps all 113 articles + 13 annexes of EU AI Act", "source": "hummbl-dev/hummbl-governance/docs/coverage/eu-ai-act.md", "source_quote": "113 articles, 13 annexes; 23 fulfilled, 19 partial, 71 boundary, 0 out of scope", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-005", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL compliance mapper generates EU AI Act reports for Art. 9, 10, 11, 12, 13, 14, 15, 16, 17, 19", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py:474", "source_quote": "generate_eu_ai_act_report: Maps governance traces to Articles 9, 10, 11, 12, 13, 14, 15, 16, 17, and 19", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-006", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL is not a Notified Body under EU AI Act Art. 31", "source": "hummbl-dev/hummbl-governance/docs/coverage/eu-ai-act.md boundary disclaimer", "source_quote": "HUMMBL is not a Notified Body under EU AI Act Article 31", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-007", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL governance bus records every agent action with retention default 5+ years aligned with Art. 19", "source": "hummbl-dev/hummbl-governance/hummbl_governance/governance_bus.py + coverage matrix Art. 12", "source_quote": "Append-only governance bus; retention configurable; default 5+ years aligned with Art. 19", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-008", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL kill switch has 4 modes: DISENGAGED, HALT_NONCRITICAL, HALT_ALL, EMERGENCY", "source": "hummbl-dev/hummbl-governance/hummbl_governance/kill_switch_core.py", "source_quote": "4 modes: DISENGAGED -> HALT_NONCRITICAL -> HALT_ALL -> EMERGENCY", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-009", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL delegation tokens are HMAC-SHA256 signed", "source": "hummbl-dev/hummbl-governance/hummbl_governance/delegation_token.py", "source_quote": "HMAC-SHA256 signed capability tokens", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-010", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL is the only vendor that publishes a per-article EU AI Act coverage matrix", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23)", "source_quote": "No other vendor publishes a per-article coverage matrix", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "EU-011", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL coverage matrix: 23 articles fulfilled, 19 partial, 71 boundary, 0 out of scope", "source": "hummbl-dev/hummbl-governance/docs/coverage/eu-ai-act.md summary table", "source_quote": "Totals: 113 articles, 23 fulfilled, 19 partial, 71 boundary, 0 out of scope", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-012", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "HUMMBL KRINEIA receipt chain is hash-linked and verifiable", "source": "hummbl-dev/hummbl-production/_receipts/krineia/primary.jsonl", "source_quote": "Each receipt hash computed from prev_hash + current content; tampering breaks chain", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-013", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "EU AI Act entered into force 1 August 2024", "source": "Regulation (EU) 2024/1689", "source_quote": "Entered into force 1 August 2024", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EU-014", "page": "docs/artifacts/POSITION_PAPER_eu_ai_act.md", "claim": "Conformity assessment paths: Annex VI internal control OR Annex VII Notified Body (mandatory for biometric ID)", "source": "Regulation (EU) 2024/1689 Art. 43", "source_quote": "Article 43: conformity assessment via internal control (Annex VI) or Notified Body (Annex VII for biometric identification)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-001", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "NIST AI RMF 1.0 published January 2023 as NIST AI 100-1", "source": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf", "source_quote": "NIST AI 100-1, January 2023", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-002", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "NIST AI RMF is a voluntary framework with no certification body", "source": "hummbl-dev/hummbl-governance/docs/coverage/nist-ai-rmf.md boundary disclaimer", "source_quote": "NIST AI RMF is a voluntary framework, not a regulation. There is no certification body for AI RMF; conformance is self-attested or third-party-assessed", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-003", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "NIST AI RMF has 4 core functions: GOVERN, MAP, MEASURE, MANAGE", "source": "NIST AI 100-1", "source_quote": "4 Functions: GOVERN, MAP, MEASURE, MANAGE", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-004", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "NIST AI RMF has ~70 subcategories across the 4 functions", "source": "hummbl-dev/hummbl-governance/docs/coverage/nist-ai-rmf.md", "source_quote": "~70 subcategories across the 4 functions: GOVERN ~19, MAP ~18, MEASURE ~20, MANAGE ~13", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-005", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL NIST AI RMF coverage: 20 fulfilled, 31 partial, 19 boundary subcategories", "source": "hummbl-dev/hummbl-governance/docs/coverage/nist-ai-rmf.md summary table", "source_quote": "Totals: ~70 subcategories, 20 fulfilled, 31 partial, 19 boundary", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-006", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL compliance mapper generates NIST AI RMF reports for GOVERN, MAP, MEASURE, MANAGE", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py:373", "source_quote": "generate_nist_rmf_report: Maps governance traces to the four NIST AI RMF core functions: GOVERN, MAP, MEASURE, and MANAGE", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-007", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL kill switch provides MANAGE-1.3 response plan execution evidence", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py + kill_switch_core.py", "source_quote": "MANAGE-1.3: Response plans executed -- KILLSWITCH events prove the response was executed", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-008", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL circuit breaker provides MANAGE-2.4 risk treatment evidence", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py + circuit_breaker.py", "source_quote": "MANAGE-2.4: Risk treatment applied -- CIRCUIT_BREAKER state transitions prove the treatment", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-009", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL is the only vendor that publishes a per-subcategory NIST AI RMF coverage matrix", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23)", "source_quote": "No other vendor publishes a per-subcategory coverage matrix", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "NR-010", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "OMB Circular M-24-10 requires US federal agencies to require AI RMF alignment from AI vendors", "source": "https://www.whitehouse.gov/wp-content/uploads/2024/03/M-24-10-Advancing-Governance-Innovation-and-Risk-Management-for-Agency-Use-of-Artificial-Intelligence.pdf", "source_quote": "OMB Circular M-24-10 (effective December 2023) requires AI RMF alignment for federal AI vendors", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-011", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL primitives are framework-agnostic: same evidence serves NIST AI RMF and EU AI Act", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py (generate_nist_rmf_report + generate_eu_ai_act_report read same bus)", "source_quote": "The same governance bus tuples, delegation tokens, kill-switch events satisfy both frameworks", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-012", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL KRINEIA receipt chain is hash-linked and verifiable by third-party assessors", "source": "hummbl-dev/hummbl-production/_receipts/krineia/primary.jsonl", "source_quote": "Each receipt hash computed from prev_hash + current content; tampering breaks chain", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-013", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL cost governor provides MEASURE-2.8 impact metrics evidence", "source": "hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py + cost_tracker.py", "source_quote": "MEASURE-2.8: Impact metrics -- COST_GOVERNOR events track cost impact", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "NR-014", "page": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md", "claim": "HUMMBL delegation context provides MAP-1.1 organizational context evidence", "source": "hummbl-dev/hummbl-governance/hummbl_governance/delegation_context.py + compliance_mapper.py", "source_quote": "MAP-1.1: Organizational context documented -- DCTX (delegation context) tuples document the context", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "MA-001", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market size 2026: $0.44B (Mordor Intelligence)", "source": "https://www.mordorintelligence.com/industry-reports/ai-governance-market", "source_quote": "Market Size (2026): USD 0.44 Billion; Market Size (2031): USD 1.51 Billion; CAGR 28.15%", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Secondary source (analyst report). Refresh quarterly." }, { "id": "MA-002", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market projected $1.51B by 2031 at 28.15% CAGR (Mordor)", "source": "https://www.mordorintelligence.com/industry-reports/ai-governance-market", "source_quote": "Market Size (2031): USD 1.51 Billion; CAGR 28.15% (2026-2031)", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-003", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market projected $5.88B by 2035 at 34.27% CAGR (Precedence Research)", "source": "https://www.precedenceresearch.com/ai-governance-market", "source_quote": "USD 5,883.90 Million by 2035; CAGR 34.27% from 2026 to 2035", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-004", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market $0.61B in 2026, $2.63B by 2030 at 44.3% CAGR (The Business Research Co.)", "source": "https://www.giiresearch.com/report/tbrc1969959-ai-governance-global-market-report.html", "source_quote": "will grow from $0.42 billion in 2025 to $0.61 billion in 2026 at a CAGR of 44.5%; grow to $2.63 billion in 2030 at a CAGR of 44.3%", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-005", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI ethics and governance solutions market incremental growth $4.29B 2026-2030 at 36% CAGR (Technavio)", "source": "https://www.technavio.com/report/ai-ethics-and-governance-solutions-market-industry-analysis", "source_quote": "increase by USD 4.29 billion, at a CAGR of 36% from 2025 to 2030", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-006", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market $5.78B by 2029 at 45.3% CAGR (MarketsandMarkets)", "source": "https://www.prnewswire.com/news-releases/ai-governance-market-worth-5-776-0-million-by-2029--exclusive-report-by-marketsandmarkets-302268616.html", "source_quote": "grow from USD 890.6 million in 2024 to USD 5,776.0 million by 2029 at a CAGR of 45.3%", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-007", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "Platforms/software suites held 42.40% of AI governance market share in 2025 (Mordor)", "source": "https://www.mordorintelligence.com/industry-reports/ai-governance-market", "source_quote": "platforms and software suites held 42.40% of the AI Governance market share in 2025", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-008", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "Point solutions (bias detection, explainability) forecast 28.6% CAGR through 2031 (Mordor)", "source": "https://www.mordorintelligence.com/industry-reports/ai-governance-market", "source_quote": "point solutions for bias detection and explainability are forecast to expand at a 28.6% CAGR through 2031", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-009", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "Solutions segment held 66% of AI governance market share in 2025 (Precedence)", "source": "https://www.precedenceresearch.com/ai-governance-market", "source_quote": "the software segment held the major market share of 66% in 2025", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-010", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "Stanford 2025 AI Index: 78% of organizations used AI in 2024, up from 55% in 2023", "source": "https://hai.stanford.edu (Stanford 2025 AI Index)", "source_quote": "78% of surveyed organizations used AI in 2024, compared to 55% in 2023", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Cited by Precedence Research. Verify against primary Stanford HAI source on next refresh." }, { "id": "MA-011", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "North America is the largest AI governance market; Asia-Pacific is fastest growing", "source": "https://www.mordorintelligence.com/industry-reports/ai-governance-market + https://www.precedenceresearch.com/ai-governance-market", "source_quote": "Largest Market: North America; Fastest Growing Market: Asia Pacific (Mordor); Dominating Region: North America; Fastest Growing Region: Asia Pacific (Precedence)", "verified_date": "2026-06-23", "tier": "B", "status": "validated" }, { "id": "MA-012", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "AI governance market is fragmented (no vendor >15% market share)", "source": "https://www.technavio.com/report/ai-ethics-and-governance-solutions-market-industry-analysis + Mordor", "source_quote": "Market structure: Fragmented (Technavio); Market Concentration: Medium (Mordor)", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "HUMMBL internal estimate: no vendor >15% share. Refresh with primary research." }, { "id": "MA-013", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "HUMMBL wedge SAM estimate: ~10% of narrow TAM = ~$50M in 2026", "source": "HUMMBL internal estimate based on narrow TAM $0.5B (Mordor/QY)", "source_quote": "SAM = AI-native teams in BFSI/gov/EU with in-process tooling preference; ~10% of narrow TAM", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate. Tier C -- inference, not externally validated. Test with first 10-20 customers." }, { "id": "MA-014", "page": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md", "claim": "HUMMBL 12-month SOM target: $0.5-1M ARR, 10-20 paying customers, 1000+ OSS adopters", "source": "HUMMBL internal target (this analysis)", "source_quote": "12-month SOM target: $0.5-1M ARR, 10-20 paying customers, 1000+ OSS adopters", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal target, not externally validated. Board to approve/adjust." }, { "id": "GE-001", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Issue #408: simulation-ready game engine roadmap from Minecraft to Unreal", "source": "hummbl-dev/hummbl-production#408", "source_quote": "product: define simulation-ready game engine roadmap from Minecraft to Unreal", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-002", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "4-stage roadmap: Stage 0 doctrine/schemas, Stage 1 Minecraft, Stage 2 multi-game, Stage 3 Unreal", "source": "docs/product/GAME_ENGINE_ROADMAP.md (commit 7fdf172)", "source_quote": "4-stage roadmap: Stage 0 Doctrine & schemas (Q3 2026), Stage 1 Minecraft prototype (Q4 2026), Stage 2 Multi-game adapters (Q1-Q2 2027), Stage 3 Unreal embodiment (Q3-Q4 2027)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-003", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "8 governance primitives to formalize in Stage 0: KillSwitch, CircuitBreaker, DelegationToken, GovernanceBus, Receipt, AgentRegistry, CostGovernor, CapabilityFence", "source": "docs/product/GAME_ENGINE_ROADMAP.md Stage 0 table", "source_quote": "8 primitives: KillSwitch, CircuitBreaker, DelegationToken, GovernanceBus, Receipt (KRINEIA), AgentRegistry, CostGovernor, CapabilityFence", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-004", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Stage 0 cost estimate: $15-27K, 4-6 weeks engineering", "source": "HUMMBL internal estimate (this business case)", "source_quote": "Stage 0 cost: $15-27K, 4-6 weeks engineering time", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate. Tier C -- inference. Test against actuals at Stage 0 completion." }, { "id": "GE-005", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Total roadmap cost estimate: $255-475K over 12-18 months (Stages 0-3)", "source": "HUMMBL internal estimate (this business case)", "source_quote": "Total roadmap cost estimate: $255-475K over 12-18 months", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate. Tier C. Each stage gated on prior exit criteria." }, { "id": "GE-006", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "No AI governance vendor has a playable embodiment of their primitives", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23, 19 vendors)", "source_quote": "None of the 19 vendors surveyed (Credo, Holistic, Arthur, Fiddler, IBM, Collibra, OneTrust, Modulos, Airia, ServiceNow, etc.) have a playable world", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "GE-007", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Core principle: engine-agnostic doctrine, engine-specific embodiment", "source": "docs/product/GAME_ENGINE_ROADMAP.md section 2", "source_quote": "engine-agnostic doctrine, engine-specific embodiment. Doctrine + schemas in hummbl-governance; adapters in engine-specific repos", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-008", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Stage 1 success metric: 5 external playtesters, 4/5 can explain receipts, 3/5 can verify chain", "source": "docs/product/GAME_ENGINE_ROADMAP.md Stage 1 success metrics", "source_quote": "Playtest sessions with external users: 5; User can explain what a receipt is after playing: 4/5; User can verify a receipt chain manually: 3/5", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-009", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Stage 0 funded from Q3 2026 operating budget (within Phase 1 funding approved 2026-06-23)", "source": "docs/artifacts/ARTIFACT_MANIFEST.md promotion packet review log + this business case", "source_quote": "PA approved Phase 1 funding on 2026-06-23; Stage 0 is within Q3 2026 operating budget", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-010", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Roadmap drafted per issue #408 acceptance criteria (commit 7fdf172)", "source": "hummbl-dev/hummbl-production commit 7fdf172 + issue #408 comments", "source_quote": "Roadmap drafted: docs/product/GAME_ENGINE_ROADMAP.md (commit 7fdf172). All acceptance criteria addressed.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-011", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Stage 2 target: 3 engines (Minecraft + Roblox/Unity/Godot), cross-engine receipt compatibility", "source": "docs/product/GAME_ENGINE_ROADMAP.md Stage 2", "source_quote": "Engines supported: 3 (Minecraft + 2 new); Cross-engine receipt compatibility: A receipt written in Minecraft reads correctly in Unity", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "GE-012", "page": "docs/artifacts/BUSINESS_CASE_game_engine.md", "claim": "Stage 3 Unreal is last because it is highest-cost (engine expertise, asset pipeline, compute)", "source": "docs/product/GAME_ENGINE_ROADMAP.md Stage 3", "source_quote": "Unreal is the highest-fidelity option but also the highest-cost (engine expertise, asset pipeline, compute)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-001", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "HUMMBL operates on 10 AI governance principles as decision rules", "source": "docs/artifacts/DOCTRINE_ai_governance.md ?2 (this doctrine)", "source_quote": "HUMMBL operates on 10 AI governance principles. They are not aspirations; they are decision rules.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-002", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 1 (honesty): every public claim is validated with cited evidence or marked unproven", "source": "CONSTITUTION.md ?3.1 (public claim honesty invariant)", "source_quote": "Every factual claim on hummbl.io pages, in the claims provenance manifest, or in public-facing docs must have a status (fixed, validated, pending) and supporting evidence", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-003", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 2 (determinism): HUMMBL governance evidence is deterministic, not LLM-judged", "source": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md ?4", "source_quote": "deterministic evidence vs LLM-judged -- HUMMBL produces deterministic evidence: the same input produces the same output, every time", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-004", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 3 (in-process): HUMMBL primitives run in the customer's process, not on SaaS cloud", "source": "docs/artifacts/WHITE_PAPER_governance_infrastructure.md ?3", "source_quote": "HUMMBL runs in your process. Your agent activity does not leave your runtime to be judged on someone else's cloud.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-005", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 4 (open-source): HUMMBL governance library is Apache 2.0", "source": "CONSTITUTION.md ?3.5 + https://github.com/hummbl-dev/hummbl-governance", "source_quote": "The license is Apache-2.0, unchanged. No proprietary license may be introduced.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-006", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 5 (boundary honesty): HUMMBL is not a Notified Body (EU AI Act Art. 31) or NIST-recognized assessor", "source": "docs/artifacts/POSITION_PAPER_eu_ai_act.md ?3 + docs/artifacts/POSITION_PAPER_nist_ai_rmf.md ?3", "source_quote": "HUMMBL is not a Notified Body under EU AI Act Article 31; HUMMBL is not a NIST-recognized assessor", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-007", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 6 (receipts): every governance action emits a hash-chained KRINEIA receipt", "source": "CONSTITUTION.md ?3.6 + _receipts/krineia/primary.jsonl", "source_quote": "The Krineia chain is append-only and SHA-256-chained. No operator may rewrite history except via the documented cut operator.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-008", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 7 (human authority): Reuben Bowlby is the Principal Agent; software agents are delegated systems", "source": "Authority boundary section in every HUMMBL artifact + hummbl-dev/founder-mode/MULTI_AGENT.md", "source_quote": "Reuben Bowlby is the human Principal Agent for HUMMBL -- the goal-owning, value-bearing, accountable agent. Devin and other software agents are delegated drafting, research, and execution systems.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-009", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 8 (framework-agnostic): HUMMBL primitives serve EU AI Act, NIST AI RMF, SOC 2, GDPR, OWASP from same code", "source": "docs/artifacts/POSITION_PAPER_nist_ai_rmf.md ?4 + hummbl-dev/hummbl-governance/hummbl_governance/compliance_mapper.py", "source_quote": "The same governance bus tuples, delegation tokens, kill-switch events satisfy both frameworks. The primitives are framework-agnostic; the compliance mapper does the framework-specific mapping.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-010", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 9 (public matrices): HUMMBL publishes per-article EU AI Act and per-subcategory NIST AI RMF coverage matrices", "source": "hummbl-dev/hummbl-governance/docs/coverage/eu-ai-act.md + nist-ai-rmf.md", "source_quote": "EU AI Act: 113 articles, 13 annexes; NIST AI RMF: ~70 subcategories across 4 functions; No subcategory is silently excluded", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-011", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principle 10 (RSI): HUMMBL uses its own governance primitives on its own operations", "source": "docs/artifacts/CASE_STUDY_claims_remediation.md + docs/artifacts/RETROSPECTIVE_wave_1.md", "source_quote": "HUMMBL used its own claims manifest to catch its own claim errors; HUMMBL uses its own KRINEIA receipt chain to govern its own artifact promotions", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-012", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "Principles 1, 6, 7 are constitutional invariants that cannot be amended without a constitutional amendment", "source": "CONSTITUTION.md ?3 + ?7", "source_quote": "These invariants are constitutionally protected. They cannot be changed, weakened, or conditionally suspended without a constitutional amendment (?7), a KRINEIA receipt, and human approval.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "DO-013", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "HUMMBL is the only vendor that publishes a per-article EU AI Act coverage matrix", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md (2026-06-23, 19 vendors)", "source_quote": "No other vendor publishes a per-article coverage matrix", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "DO-014", "page": "docs/artifacts/DOCTRINE_ai_governance.md", "claim": "The 10 principles form a coherent system where violations of any principle weaken the others", "source": "docs/artifacts/DOCTRINE_ai_governance.md ?3 (this doctrine)", "source_quote": "A vendor that claims honesty (P1) but does not emit receipts (P6) cannot prove the honesty claim. The principles are only credible together.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-001", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HUMMBL Research Institute (HRI) is the steward of HUMMBL's governance doctrine, constitutions, and normative files", "source": "CONSTITUTION.md ?5 + this charter", "source_quote": "Steward: HUMMBL Research Institute", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-002", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI is a functional role, not a legal entity", "source": "docs/artifacts/CHARTER_hri.md ?6 (this charter)", "source_quote": "HRI is a functional role, not a legal entity. HRI is not incorporated, has no bank account, cannot sign contracts, and has no legal standing.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-003", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI stewards 7 domains: doctrine, constitutions, normative files, coverage matrices, public artifacts, Board convening, research corpus", "source": "docs/artifacts/CHARTER_hri.md ?1 (this charter)", "source_quote": "HRI exists to: 1. Steward governance doctrine, 2. Steward constitutions, 3. Steward normative files, 4. Author coverage matrices, 5. Author public artifacts, 6. Convene the Board, 7. Publish research", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-004", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI may decide doctrine amendments for principles 2,3,4,5,8,9,10 per doctrine ?5 process", "source": "docs/artifacts/DOCTRINE_ai_governance.md ?5", "source_quote": "Principles 2, 3, 4, 5, 8, 9, 10 can be amended via the doctrine amendment process", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-005", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI must escalate doctrine amendments for principles 1,6,7 (constitutional invariants) to PA + constitutional amendment process", "source": "docs/artifacts/DOCTRINE_ai_governance.md ?5 + CONSTITUTION.md ?7", "source_quote": "Principles 1, 6, 7 are constitutional invariants per CONSTITUTION ?3. They cannot be amended without a constitutional amendment (?7), a KRINEIA receipt, and human approval.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-006", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI must escalate funding, legal commitments, and strategic pivots to the Principal Agent", "source": "docs/artifacts/CHARTER_hri.md ?3 decision matrix (this charter)", "source_quote": "Funding allocation: Recommend only -> escalate to PA + Board; Legal commitment: No -> escalate to PA + counsel; Strategic pivot: Assess only -> escalate to PA + Board", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-007", "page": "docs/artifacts/CHARTER_hri.md", "claim": "The Director of HRI is Reuben Bowlby (Principal Agent)", "source": "docs/artifacts/CHARTER_hri.md ?4 (this charter) + authority boundary in every HUMMBL artifact", "source_quote": "Director: Reuben Bowlby (Principal Agent) -- Holds final authority on all HRI decisions", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-008", "page": "docs/artifacts/CHARTER_hri.md", "claim": "The Board is advisory -- the Director retains final authority", "source": "docs/artifacts/CHARTER_hri.md ?4 + Board Constitution Registry", "source_quote": "The Board is advisory -- the Director retains final authority", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-009", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI convened the Board on 2026-06-23 (5 Directors, UNANIMOUS_ACCEPT with 3 conditions)", "source": "docs/artifacts/ARTIFACT_MANIFEST.md review log 2026-06-23", "source_quote": "Triggered Board meeting (5 Directors) -- UNANIMOUS_ACCEPT with 3 conditions (bus REVIEW 2026-06-23)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-010", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI's default mode is draft, recommend, and escalate", "source": "docs/artifacts/CHARTER_hri.md ?3 (this charter)", "source_quote": "HRI's default is to draft, recommend, and escalate. HRI does not make decisions that require strategic authority, legal commitment, or funding allocation.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-011", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI is consistent with Doctrine Principle 7 (human authority over agent action)", "source": "docs/artifacts/DOCTRINE_ai_governance.md Principle 7 + this charter ?3", "source_quote": "This is consistent with Doctrine Principle 7 (human authority over agent action): HRI is a functional role held by the Principal Agent with delegation to agents.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "CH-012", "page": "docs/artifacts/CHARTER_hri.md", "claim": "HRI's authority is internal to HUMMBL -- HRI does not claim authority over other organizations", "source": "docs/artifacts/CHARTER_hri.md ?6 (this charter)", "source_quote": "HRI's authority is internal to HUMMBL. HRI does not claim authority over other organizations' governance. HRI's doctrine is HUMMBL's self-adopted doctrine.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-001", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's KRINEIA receipt chain has 9 receipts as of 2026-06-23, all hash-linked and verifiable", "source": "_receipts/krineia/primary.jsonl (verified 2026-06-23)", "source_quote": "9 receipts in the chain, each with id, prev_hash, state, time, hash; SHA-256 chained", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-002", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's claims provenance manifest has 197 claims, 165 validated, 4 unproven as of 2026-06-23", "source": "web/manifest/claims-provenance.json (verified 2026-06-23)", "source_quote": "Total claims: 197, Validated: 165, Unproven: 4", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-003", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "hummbl-governance test suite has 1,234 tests as of 2026-06-23", "source": "hummbl-dev/hummbl-governance (pytest --collect-only, verified 2026-06-23)", "source_quote": "1234 tests collected in 0.62s", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-004", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's EU AI Act coverage matrix maps 113 articles and 13 annexes with 23 fulfilled, 19 partial, 71 boundary", "source": "hummbl-dev/hummbl-governance/docs/coverage/eu-ai-act.md", "source_quote": "113 articles, 13 annexes; 23 fulfilled, 19 partial, 71 boundary, 0 out of scope", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-005", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's NIST AI RMF coverage matrix maps ~70 subcategories with 20 fulfilled, 31 partial, 19 boundary", "source": "hummbl-dev/hummbl-governance/docs/coverage/nist-ai-rmf.md", "source_quote": "~70 subcategories across 4 functions; 20 fulfilled, 31 partial, 19 boundary, 0 out of scope", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-006", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "Wave 1 produced 10 live artifacts with 171 claims and 6 KRINEIA receipts", "source": "docs/artifacts/ARTIFACT_MANIFEST.md (items 1-10)", "source_quote": "10 artifacts live (5 public, 5 private); 171 claims added across 5 cycles; 6 KRINEIA receipts emitted", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-007", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "Wave 2 has produced 2 live artifacts (Days 11-12) with 26 claims and 2 KRINEIA receipts as of 2026-06-23", "source": "docs/artifacts/ARTIFACT_MANIFEST.md (items 11-12) + _receipts/krineia/primary.jsonl", "source_quote": "Items 11 (doctrine) and 12 (charter) marked live; 14+12=26 claims added; 2 receipts emitted", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-008", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's governance library is Apache 2.0 open-source on GitHub and PyPI", "source": "https://github.com/hummbl-dev/hummbl-governance + https://pypi.org/project/hummbl-governance/ + CONSTITUTION.md ?3.5", "source_quote": "The license is Apache-2.0, unchanged. No proprietary license may be introduced.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-009", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL uses its own governance primitives on its own operations (RSI principle 10)", "source": "docs/artifacts/CASE_STUDY_claims_remediation.md + docs/artifacts/RETROSPECTIVE_wave_1.md", "source_quote": "HUMMBL used its own claims manifest to catch its own claim errors; HUMMBL uses its own KRINEIA receipt chain to govern its own artifact promotions", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-010", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "Every claim in this evidence pack has a How to verify section with a runnable command", "source": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md ?2 (this pack)", "source_quote": "Each evidence item E1-E10 includes a How to verify bash command block", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-011", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL's 12-month SOM target is $0.5-1M ARR (tier C internal estimate)", "source": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md (tier C)", "source_quote": "HUMMBL SOM target: $0.5-1M ARR (tier C internal estimate)", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate, tier C. SOM depends on capture rate assumptions." }, { "id": "EP-012", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "This evidence pack is self-compiled, not a third-party audit", "source": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md ?6 (this pack)", "source_quote": "This evidence pack is HUMMBL's self-compiled credibility pack. It is not a third-party audit.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-013", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "HUMMBL has not yet disclosed customer references", "source": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md ?4 (this pack)", "source_quote": "HUMMBL has not yet disclosed customer references. The case study is HUMMBL's own claims remediation, not a customer engagement.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "EP-014", "page": "docs/artifacts/EVIDENCE_PACK_fleet_rollout.md", "claim": "Wave 1 retrospective identified 6 friction points (F1-F6) and 6 process improvements (P1-P6)", "source": "docs/artifacts/RETROSPECTIVE_wave_1.md", "source_quote": "6 friction points identified (F1-F6); 6 process improvements for wave 2 (P1-P6)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-001", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "HUMMBL has a claims change protocol covering 5 change types: add, update, validate, retract, remove", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?3 (this playbook)", "source_quote": "5 change types: add, update, validate, retract, remove", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-002", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Every claim change requires a KRINEIA receipt with event type claims.added/updated/validated/retracted/removed", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?5 (this playbook) + CONSTITUTION.md ?6", "source_quote": "Every claim change must emit a KRINEIA receipt. The receipt event types: claims.added, claims.updated, claims.validated, claims.retracted, claims.removed", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-003", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Silent deletion of a claim is a CONSTITUTION ?3.4 violation", "source": "CONSTITUTION.md ?3.4 + this playbook ?3.4/?3.5", "source_quote": "Removing a claim without archiving is a violation. Never delete. Retract (?3.4) or remove with archive (?3.5). The audit trail must be preserved.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-004", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "The add_claims.py helper enforces utf-8 encoding and checks for ID collisions", "source": "scripts/add_claims.py + AGENTS.md ?8", "source_quote": "Loads claims-provenance.json (utf-8, per AGENTS.md ?8); Checks for ID collisions; Writes back as utf-8", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-005", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Tier C claims (internal estimates) must be marked unproven by default", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?4 (this playbook)", "source_quote": "Tier C -- the source is HUMMBL's own inference. Always mark tier C as unproven with notes explaining the inference.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-006", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "The protocol has 4 roles: requester, validator, promoter, receipt emitter", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?2 (this playbook)", "source_quote": "Roles: Requester (any agent or human), Validator (Steward), Promoter (Principal Agent), Receipt emitter (Steward using scripts/emit_receipt.py)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-007", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Agents can be requesters and receipt emitters but cannot be promoters (per Doctrine Principle 7)", "source": "docs/artifacts/DOCTRINE_ai_governance.md Principle 7 + this playbook ?2", "source_quote": "Agents can be requesters and receipt emitters; they cannot be promoters (per Doctrine Principle 7).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-008", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "The playbook documents 6 common mistakes (M1-M6) and how to avoid them", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?7 (this playbook)", "source_quote": "M1: Forgetting encoding=utf-8; M2: Silently deleting a claim; M3: Marking tier C as validated; M4: Changing status without receipt; M5: Non-ascii characters; M6: Duplicate IDs", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-009", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Retracting a claim requires updating downstream artifacts that cited it", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?3.4 (this playbook)", "source_quote": "Check downstream -- if the claim was cited in an artifact, update the artifact to remove or correct the citation.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-010", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "The protocol originated from wave 1 retrospective findings F1 (encoding bug), P1 (helper scripts), P3 (utf-8 convention)", "source": "docs/artifacts/RETROSPECTIVE_wave_1.md (F1, P1, P3)", "source_quote": "F1: encoding bug (cp1252 vs utf-8) truncated claims-provenance.json; P1: extract helper scripts; P3: document utf-8 convention in AGENTS.md", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-011", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "The playbook enforces CONSTITUTION ?3.1 (public claim honesty) and ?3.4 (claims provenance manifest integrity)", "source": "CONSTITUTION.md ?3.1 + ?3.4 + this playbook ?8", "source_quote": "HUMMBL's protocol is designed to enforce CONSTITUTION ?3.1 (public claim honesty) and ?3.4 (claims provenance manifest integrity).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "PB-012", "page": "docs/artifacts/PLAYBOOK_claims_change.md", "claim": "Removed claims are archived to web/manifest/claims-archive.jsonl (append-only) with removed_date and removal_reason", "source": "docs/artifacts/PLAYBOOK_claims_change.md ?3.5 (this playbook)", "source_quote": "Move the claim to the archive -- add the claim to web/manifest/claims-archive.jsonl (append-only JSONL of removed claims, with removed_date and removal_reason).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-001", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "HUMMBL has a fleet rollout protocol covering 4 scenarios: single-machine pilot, multi-machine mesh, agent activation, customer organization rollout", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?3 (this playbook)", "source_quote": "4 rollout scenarios: single-machine pilot, multi-machine mesh, agent-by-agent activation, customer organization rollout", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-002", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The hummbl-governance library is installable via pip install hummbl-governance", "source": "https://pypi.org/project/hummbl-governance/ + https://github.com/hummbl-dev/hummbl-governance", "source_quote": "pip install hummbl-governance -- install the library", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-003", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The rollout protocol has 5 roles: rollout lead, machine operator, agent steward, verifier, promoter", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?2 (this playbook)", "source_quote": "Roles: rollout lead, machine operator, agent steward, verifier, promoter", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-004", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "Every rollout emits a KRINEIA receipt and posts a bus STATUS", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?3 + ?5 (this playbook) + CONSTITUTION.md ?6", "source_quote": "Emit a KRINEIA receipt: governance.fleet_rollout.machine_initialized; Post a bus STATUS: fleet rollout: machine live", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-005", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The mesh-sync skill synchronizes .agents/ across machines in the fleet", "source": "~/.claude/skills/mesh-sync/SKILL.md", "source_quote": "Fleet-wide synchronization of .agents/ (skills, rules, agents, playbooks, runbooks, scripts, metadata) from Anvil (source of truth) to all reachable mesh targets", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-006", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "Rollback adds entries (bus STATUS + KRINEIA receipt); it does not delete the bus or chain", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?7 (this playbook) + CONSTITUTION.md ?3.6", "source_quote": "Do NOT delete the coordination bus or the KRINEIA receipt chain during rollback. They are append-only audit trails. Rollback adds entries; it does not remove them.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-007", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The playbook documents 6 common mistakes (M1-M6) for fleet rollouts", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?8 (this playbook)", "source_quote": "M1: Skipping pre-flight; M2: Not initializing the receipt chain; M3: Deleting the bus or chain during rollback; M4: Activating an agent without a guardrail; M5: Not verifying after rollout; M6: Customer rollout without boundary acceptance", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-008", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The playbook has 6 verification commands (V1-V6) covering library, health, bus, receipts, claims, mesh", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?6 (this playbook)", "source_quote": "V1: Library installed; V2: Health endpoint; V3: Coordination bus; V4: KRINEIA receipt chain; V5: Claims manifest; V6: Mesh sync status", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-009", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "Customer rollout requires the customer to read the evidence pack and accept the boundaries before starting", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?3.4 + ?8 M6 (this playbook) + docs/artifacts/EVIDENCE_PACK_fleet_rollout.md ?4", "source_quote": "Confirm the customer has read the evidence pack (item 13) and accepts the boundaries (item 13 ?4)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-010", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "Agent activation requires a guardrail file and roster entry before the agent can be activated", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?3.3 + ?8 M4 (this playbook)", "source_quote": "Confirm the agent has a guardrail file in .agents/rules/-guardrails.md; Confirm the agent's identity is in .agents/rules/agent-roster.md", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-011", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The rollout protocol originated from the founder-mode proving ground pattern and the mesh-sync skill", "source": "hummbl-dev/founder-mode (proving ground) + ~/.claude/skills/mesh-sync/SKILL.md", "source_quote": "The founder-mode proving ground; mesh-sync: Fleet-wide synchronization of .agents/", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "FR-012", "page": "docs/artifacts/PLAYBOOK_fleet_rollout.md", "claim": "The generic rollout sequence is: install, initialize, configure, verify, receipt, status, monitor", "source": "docs/artifacts/PLAYBOOK_fleet_rollout.md ?5 (this playbook)", "source_quote": "1. Install; 2. Initialize; 3. Configure; 4. Verify; 5. Receipt; 6. Status; 7. Monitor", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-001", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "ADR-002 accepts the decision to build Phase 1 of the IssueOps teaching surface at hummbl.io/issueops", "source": "docs/adr/ADR-002-issueops-teaching-surface.md ?Decision (this ADR)", "source_quote": "Build Phase 1 of the IssueOps teaching surface at hummbl.io/issueops", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-002", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Phase 1 scope is the static teaching surface only: walkthrough, glossary, client-side verification widget", "source": "docs/adr/ADR-002-issueops-teaching-surface.md ?Scope (this ADR) + docs/artifacts/BUSINESS_CASE_issueops.md ?1", "source_quote": "Phase 1 is the static teaching surface only: IssueOps walkthrough (7 steps), Glossary, Client-side verification widget", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-003", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Phase 1 capital cost is $0 (static page on existing Cloudflare Pages)", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?4.1 + this ADR ?Cost", "source_quote": "Capital: $0 (static page on existing Cloudflare Pages)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-004", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Phase 1 engineering effort is ~40 hours (1 week at 50% allocation)", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?1 + this ADR ?Cost", "source_quote": "Engineering hours: ~40 (1 week at 50% allocation)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-005", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Phase 1 funding was approved 2026-06-23 per the business case status line", "source": "docs/artifacts/BUSINESS_CASE_issueops.md status line", "source_quote": "Status: live v1.0 internal (promoted 2026-06-23 per ARTIFACT_STACK_PROMOTION_PACKET.md; private -- not for external publication; Phase 1 funding approved)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-006", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Option B (defer to Phase 2 live receipt feed) was rejected because a live feed without a teaching surface is incomprehensible to non-expert buyers", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?3 Option B + this ADR ?Alternatives", "source_quote": "A live feed without a teaching surface is incomprehensible to a non-expert buyer. The white paper's audience is enterprise buyers and analysts, not (yet) engineers. Phase 1 first.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-007", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Option C (do nothing) was rejected because it breaks the strategic plan's Q4 2026 exit gate (3 discovery calls)", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?3 Option C + this ADR ?Alternatives", "source_quote": "The strategic plan's Q4 2026 exit gate (3 discovery calls) becomes harder -- inbound has nowhere to land. The category-creation bet loses its primary teaching surface.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-008", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Option D (buy) was not viable because no vendor sells an IssueOps teaching surface with KRINEIA receipt verification", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?3 Option D + this ADR ?Alternatives", "source_quote": "There is no vendor that sells an IssueOps teaching surface with KRINEIA receipt verification. This is not a buy-vs-build decision; it is a build-vs-skip decision.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-009", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "Phase 1 is the first public interactive proof artifact (vs prior public artifacts which are assertions)", "source": "docs/artifacts/BUSINESS_CASE_issueops.md ?5 + this ADR ?Consequences", "source_quote": "First public artifact that is interactive proof, not just assertion. All prior public artifacts (white paper, position papers, case study) are assertions. Phase 1 is interactive.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-010", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "The IssueOps teaching surface closes the proof gap identified in the competitive analysis (Day 4)", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md + docs/artifacts/BUSINESS_CASE_issueops.md ?2", "source_quote": "The competitive analysis confirmed the wedge: HUMMBL's unique position is the proof gap -- buyers can verify our claims themselves rather than trusting a dashboard.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-011", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "The ADR has 5 success metrics: page live, unique visitors, widget uses, discovery calls mentioning IssueOps, white paper CTA click-through", "source": "docs/adr/ADR-002-issueops-teaching-surface.md ?Success metrics (this ADR) + docs/artifacts/BUSINESS_CASE_issueops.md ?6", "source_quote": "Page live by 2026-07-15; 100+ unique visitors in first 90 days; 25+ widget uses in first 90 days; 3+ discovery calls mentioning IssueOps by Q4 2026; 10%+ white paper CTA click-through", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD2-012", "page": "docs/adr/ADR-002-issueops-teaching-surface.md", "claim": "The implementation plan is 3 weeks: Week 1 draft, Week 2 build, Week 3 deploy, with ongoing quarterly review", "source": "docs/adr/ADR-002-issueops-teaching-surface.md ?Implementation plan (this ADR)", "source_quote": "Week 1 (2026-07-01 to 2026-07-07): Draft the IssueOps walkthrough; Week 2 (2026-07-08 to 2026-07-14): Build the static page; Week 3 (2026-07-15): Deploy to Cloudflare Pages; Ongoing: Quarterly review", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-001", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "ADR-003 accepts the decision to fund Stage 0 of the game engine roadmap (doctrine + JSON Schema + Simulation Affordance for 8 primitives)", "source": "docs/adr/ADR-003-game-engine-roadmap.md ?Decision (this ADR)", "source_quote": "Fund Stage 0 of the game engine roadmap: doctrine + JSON Schema + Simulation Affordance for all 8 primitives", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-002", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Stage 0 capital cost is $15-25K from HUMMBL's existing Q3 2026 operating budget (no new capital required)", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?4 + this ADR ?Cost", "source_quote": "Capital: $15-25K (from HUMMBL's existing Q3 2026 operating budget; no new capital required)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-003", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Stage 0 engineering effort is 4-6 weeks", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?4 + this ADR ?Cost", "source_quote": "Engineering hours: 4-6 weeks", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-004", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "The game engine roadmap has 4 stages: Stage 0 (doctrine), Stage 1 (Minecraft), Stage 2 (multi-game), Stage 3 (Unreal)", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?2 + docs/product/GAME_ENGINE_ROADMAP.md", "source_quote": "Stage 0: Doctrine + JSON Schema + Simulation Affordance (Q3 2026); Stage 1: Minecraft prototype (Q4 2026); Stage 2: Multi-game adapters (Q1-Q2 2027); Stage 3: Unreal embodiment (Q3-Q4 2027)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-005", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "The total roadmap cost estimate is $255-475K over 12-18 months", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?2", "source_quote": "Total roadmap cost estimate: $255-475K over 12-18 months", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-006", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Stage 0 funding was approved 2026-06-23 per the business case and is within the Q3 2026 engineering allocation", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?4 + this ADR ?Funding", "source_quote": "Stage 0 is funded from HUMMBL's existing operating budget (no new capital required). The cost is within the Q3 2026 engineering allocation. The PA approved Phase 1 funding on 2026-06-23; Stage 0 is within that envelope.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-007", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Option B (skip Stage 0, build Minecraft directly) was rejected because it leads to engine-coupled doctrine that cannot be re-used for Unreal", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md + this ADR ?Alternatives", "source_quote": "Building Minecraft directly without doctrine leads to engine-coupled doctrine. The Minecraft kill switch would be defined in Minecraft terms, not in engine-agnostic terms. When Stage 3 (Unreal) comes, the doctrine would need to be re-defined.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-008", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "The playable governance category is empty (zero vendors) as of 2026-06-23", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md + docs/artifacts/BUSINESS_CASE_game_engine.md ?1", "source_quote": "No AI governance vendor has a playable embodiment of their primitives. Credo AI, Holistic AI, Arthur AI, Fiddler AI, IBM watsonx.governance -- all have dashboards. None have a world you can walk into and watch governance happen.", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "AD3-009", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "The core principle is engine-agnostic doctrine, engine-specific embodiment", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?2 + this ADR ?Context", "source_quote": "The roadmap separates: Doctrine (engine-agnostic, lives in hummbl-governance + hummbl-doctrine); Schema (engine-agnostic, JSON Schema in hummbl-governance/schemas/); Adapter (engine-specific, lives in the game repo)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-010", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Stage 0 exit criteria: 8 primitives have doctrine, 8 have JSON Schema, 8 have Simulation Affordance, schemas validate, PA reviews, KRINEIA receipt emitted", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?3 + this ADR ?Success metrics", "source_quote": "8 primitives have doctrine (8/8); 8 primitives have JSON Schema (8/8); 8 primitives have Simulation Affordance (8/8); Schemas validate against test fixtures (100%); Doctrine reviewed by PA (1 review); KRINEIA receipt emitted for Stage 0 completion (1 receipt)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-011", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "Stages 1-3 are separate funding decisions, each gated on the prior stage's exit criteria", "source": "docs/artifacts/BUSINESS_CASE_game_engine.md ?2 + this ADR ?Out of scope", "source_quote": "Stages 1-3 are separate funding decisions, each gated on the prior stage's exit criteria.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD3-012", "page": "docs/adr/ADR-003-game-engine-roadmap.md", "claim": "The implementation plan is 6 weeks: Weeks 1-2 doctrine for 4 primitives, Weeks 3-4 doctrine for 4 more + schemas, Weeks 5-6 simulation affordance + validation + PA review", "source": "docs/adr/ADR-003-game-engine-roadmap.md ?Implementation plan (this ADR)", "source_quote": "Week 1-2: Draft doctrine for 4 primitives (KillSwitch, CircuitBreaker, DelegationToken, GovernanceBus); Week 3-4: Draft doctrine for 4 more + JSON Schemas for all 8; Week 5-6: Draft Simulation Affordance + validate schemas + PA review + KRINEIA receipt", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-001", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "HUMMBL has an AI Board of Directors with 5 Directors: operator, governance-officer, risk-officer, stakeholder-proxy, future-self", "source": "governance/board/registry.yaml + governance/board/constitutions/", "source_quote": "Board: hummbl-ai-board, status: PROPOSED_ACTIVE; 5 Director constitutions: operator.yaml, governance-officer.yaml, risk-officer.yaml, stakeholder-proxy.yaml, future-self.yaml", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-002", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The Board is advisory; the Principal Agent (Reuben Bowlby) retains final authority on all decisions", "source": "governance/board/registry.yaml authority_boundary + docs/artifacts/CHARTER_hri.md + this briefing book ?7", "source_quote": "final_authority: principal_agent; Board can: ask_required_questions, request_more_evidence, flag_blocked_decisions, produce_review_packets, request_principal_agent_decision", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-003", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "As of 2026-06-23, HUMMBL has 17 live artifacts, 259 claims (226 validated), and 14 KRINEIA receipts", "source": "docs/artifacts/ARTIFACT_MANIFEST.md + web/manifest/claims-provenance.json + _receipts/krineia/primary.jsonl", "source_quote": "17 live artifacts (items 1-17); Total claims: 259, Validated: 226; 14 receipts in the chain", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-004", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "Q3 2026 has 4 priorities: IssueOps Phase 1, game engine Stage 0, claims remediation, market entry", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?2 (this briefing book)", "source_quote": "Priority 1: IssueOps Phase 1; Priority 2: Game engine Stage 0; Priority 3: Claims remediation; Priority 4: Market entry", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-005", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "Q3 2026 total new capital required is $15-25K from existing operating budget (no new capital)", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?3 (this briefing book) + ADR-002 + ADR-003", "source_quote": "Total Q3 2026 new capital: $15-25K from existing budget. No new capital is required for Q3 2026.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-006", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The briefing book documents 5 risks: market entry timing, category creation bet, single-founder dependency, competitive response, regulatory shift", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?4 (this briefing book)", "source_quote": "Risk 1: Market entry timing; Risk 2: Category creation bet; Risk 3: Single-founder dependency; Risk 4: Competitive response; Risk 5: Regulatory shift", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-007", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The Q3 2026 exit gate has 7 criteria including IssueOps Phase 1 live, Stage 0 complete, 250+ validated claims, 3 discovery calls", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?5 (this briefing book)", "source_quote": "IssueOps Phase 1 live by 2026-07-15; Stage 0 complete by 2026-08-11; 250+ validated claims; 3 discovery calls by Q4 2026; 19 live artifacts; 15+ receipts; Board activation", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-008", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The Board is asked to decide on 4 items: accept Q3 plan, accept exit gate criteria, single-founder mitigation, wave 3 continuation", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?6 (this briefing book)", "source_quote": "Decision 1: Accept the Q3 2026 plan; Decision 2: Accept the Q3 2026 exit gate criteria; Decision 3: Risk 3 mitigation; Decision 4: Wave 3 continuation", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-009", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "HUMMBL is pre-revenue as of 2026-06-23 with SOM target $0.5-1M ARR (tier C internal estimate)", "source": "docs/artifacts/MARKET_ANALYSIS_ai_governance.md + docs/artifacts/EVIDENCE_PACK_fleet_rollout.md ?4", "source_quote": "HUMMBL has not yet disclosed customer references; HUMMBL's 12-month SOM target is $0.5-1M ARR (tier C internal estimate)", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate, tier C. SOM depends on capture rate assumptions." }, { "id": "BB-010", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The artifact stack buildout has completed 3 waves: wave 1 (Days 6-10, 10 artifacts), wave 2 (Days 11-14, 4 artifacts), wave 3 (Days 15-19, in progress)", "source": "docs/artifacts/ARTIFACT_MANIFEST.md + docs/artifacts/RETROSPECTIVE_wave_1.md + docs/artifacts/RETROSPECTIVE_wave_2.md", "source_quote": "Wave 1: 10 artifacts, 171 claims; Wave 2: 4 artifacts, 52 claims; Wave 3: 3 artifacts so far, 36 claims so far; Total: 17 artifacts, 259 claims", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-011", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "Risk 3 (single-founder dependency) is mitigated by the artifact stack documenting strategy, doctrine, and decisions for agent continuity", "source": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?4 Risk 3 (this briefing book)", "source_quote": "The artifact stack (17 artifacts) documents HUMMBL's strategy, doctrine, and decisions. If Reuben is temporarily unavailable, agents can continue operational work using the artifacts as guidance.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "BB-012", "page": "docs/artifacts/BRIEFING_BOOK_board_q3_2026.md", "claim": "The Board's verdict is recorded in the KRINEIA receipt chain and the Board review log", "source": "governance/board/registry.yaml + docs/artifacts/CHARTER_hri.md + this briefing book ?7", "source_quote": "The Board's verdict is recorded in the KRINEIA receipt chain and the Board review log.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-001", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's SWOT identifies 6 strengths: deterministic library, artifact stack, RSI loop, doctrine+charter, coverage matrices, founder-mode proving ground", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?1 (this SWOT)", "source_quote": "S1: Deterministic, in-process, open-source governance library; S2: Artifact stack with claims provenance and KRINEIA receipts; S3: RSI loop is structural and compounding; S4: Doctrine and charter; S5: Coverage matrices; S6: founder-mode proving ground", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-002", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's SWOT identifies 6 weaknesses: pre-revenue, single-founder dependency, zero customer references, no external audit, limited marketing surface, small team", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?2 (this SWOT)", "source_quote": "W1: Pre-revenue; W2: Single-founder dependency; W3: Zero customer references; W4: No external audit; W5: Limited marketing surface; W6: Small team, limited capacity", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-003", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's SWOT identifies 6 opportunities: empty playable governance category, EU AI Act deadline, proof gap, open-source adoption, framework-agnostic coverage, RSI loop as moat", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?3 (this SWOT)", "source_quote": "O1: Empty playable governance category; O2: EU AI Act compliance deadline (August 2026); O3: The proof gap; O4: Open-source adoption; O5: Framework-agnostic coverage; O6: RSI loop as a moat", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-004", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's SWOT identifies 6 threats: category creation bet fails, competitors match playable embodiment, regulatory shifts, single-founder unavailability, open-source clone, buyer inertia", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?4 (this SWOT)", "source_quote": "T1: Category creation bet fails; T2: Competitors match the playable embodiment; T3: Regulatory shifts; T4: Single-founder unavailability; T5: Open-source clone; T6: Buyer inertia", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-005", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's wedge is the combination of deterministic, in-process, open-source, with receipts -- no competitor matches all 4 properties", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md + docs/artifacts/SWOT_hummbl_current_state.md ?1 S1 + ?5 (this SWOT)", "source_quote": "No competitor matches all 4 properties. Credo AI, Holistic AI, Arthur AI, Fiddler AI, IBM watsonx.governance are SaaS, LLM-judged, or proprietary. HUMMBL's wedge is the deterministic, in-process, open-source combination.", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "SW-006", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "The strategic implications are: double down on the wedge, ship IssueOps Phase 1 and game engine Stage 0, pursue 3 discovery calls by Q4 2026, reduce the bus factor, continue the RSI loop", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?5 (this SWOT)", "source_quote": "Double down on the wedge; Ship IssueOps Phase 1 and game engine Stage 0; Pursue 3 discovery calls by Q4 2026; Reduce the bus factor; Continue the RSI loop", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-007", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "The single-founder dependency (W2/T4) is the highest-impact risk; the Board should consider hiring or partnering with a second human in Q4 2026 or Q1 2027", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?2 W2 + ?4 T4 + ?5 (this SWOT) + docs/artifacts/BRIEFING_BOOK_board_q3_2026.md ?6 Decision 3", "source_quote": "The single-founder dependency (W2, T4) is the highest-impact risk. The Board (item 18, Decision 3) should consider hiring or partnering with a second human in Q4 2026 or Q1 2027.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-008", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "The playable governance category is empty (zero vendors) as of 2026-06-23, creating an opportunity for HUMMBL to create and own the category", "source": "docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md + docs/artifacts/BUSINESS_CASE_game_engine.md ?1 + this SWOT ?3 O1", "source_quote": "No AI governance vendor has a playable embodiment of their primitives. The category playable governance is empty (zero vendors).", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "SW-009", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's RSI loop is a structural advantage that compounds; competitors without an RSI loop do not improve at the same rate", "source": "docs/artifacts/RETROSPECTIVE_wave_1.md + docs/artifacts/RETROSPECTIVE_wave_2.md + this SWOT ?1 S3 + ?3 O6", "source_quote": "The RSI loop means HUMMBL gets faster and better every wave. Competitors without an RSI loop do not compound. This is a structural advantage.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-010", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "The SWOT has 10 verification commands (S1-S6, W1, O1, O2, T1) that a reader can run to independently verify the analysis", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?7 (this SWOT)", "source_quote": "A reader can re-verify this SWOT's claims by: S1 (library), S2 (artifact stack), S3 (RSI loop), S4 (doctrine+charter), S5 (coverage matrices), S6 (founder-mode), W1 (pre-revenue), O1 (empty category), O2 (EU AI Act deadline), T1 (category bet)", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-011", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "HUMMBL's framework-agnostic coverage spans EU AI Act, NIST AI RMF, SOC 2, GDPR, and OWASP -- a buyer addressing one framework gets coverage for all", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?3 O5 (this SWOT) + hummbl-dev/hummbl-governance/docs/coverage/", "source_quote": "HUMMBL's coverage matrices span EU AI Act, NIST AI RMF, SOC 2, GDPR, OWASP. A buyer addressing one framework gets coverage for all.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SW-012", "page": "docs/artifacts/SWOT_hummbl_current_state.md", "claim": "The SWOT is a self-assessment as of 2026-06-23, not a third-party analysis; HUMMBL welcomes third-party analysis", "source": "docs/artifacts/SWOT_hummbl_current_state.md ?6 (this SWOT)", "source_quote": "This SWOT is HUMMBL's self-assessment as of 2026-06-23. It is not a third-party analysis. HUMMBL welcomes third-party analysis.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-001", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "ADR-004 adopts a single-branch workflow for the artifact stack buildout: commit directly to the wave branch, stop using the fix branch for artifact stack work", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Decision (this ADR)", "source_quote": "Adopt a single-branch workflow for the artifact stack buildout. Commit directly to the wave branch. Stop using the fix branch for artifact stack work.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-002", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "F10 (cherry-pick receipt file conflicts) occurred on 3 of 5 wave 3 days (days 17, 18, 19), adding ~5 min per conflict resolution", "source": "docs/artifacts/RETROSPECTIVE_wave_3.md ?3 F10 + this ADR ?Context", "source_quote": "Wave 3 (days 15-19) hit a recurring friction point: cherry-pick conflicts on _receipts/krineia/primary.jsonl. This required manual conflict resolution on days 17, 18, and 19. Each resolution added ~5 minutes to the cycle.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-003", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The single-branch workflow eliminates F10 (cherry-pick conflicts) and F11 (stash pop conflicts) entirely", "source": "docs/adr/ADR-004-single-branch-workflow.md ?What this eliminates (this ADR)", "source_quote": "F10 (cherry-pick receipt file conflicts) -- eliminated entirely. F11 (stash pop conflicts with untracked files) -- eliminated (no stash needed). The promote script's stash/checkout/cherry-pick/checkout/pop cycle -- eliminated.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-004", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The single-branch workflow preserves the KRINEIA receipt chain, claims manifest (P7), artifact manifest (P11), template, helper scripts, and wave retrospectives", "source": "docs/adr/ADR-004-single-branch-workflow.md ?What this preserves (this ADR)", "source_quote": "The KRINEIA receipt chain (still append-only, still hash-linked). The claims manifest (still validated by P7). The artifact manifest (still validated by P11). The artifact template and helper scripts (still used). The wave retrospective (still produced at the end of each wave).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-005", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "3 alternatives were considered and rejected: merge strategy taking longer receipt file, separate receipts branch, continue two-branch with manual resolution", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Alternatives considered (this ADR)", "source_quote": "Alternative 1: Merge strategy that always takes the longer receipt file. Alternative 2: Move the receipt file to a separate branch. Alternative 3: Continue the two-branch workflow with manual conflict resolution.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-006", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The new workflow has 7 steps: checkout wave branch, draft artifact, add claims, update manifest, emit receipt, commit, push -- no cherry-pick, no stash, no promote script", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Workflow (this ADR)", "source_quote": "1. Checkout the wave branch. 2. Draft the artifact. 3. Add claims. 4. Update the manifest. 5. Emit the KRINEIA receipt. 6. Commit. 7. Push. No cherry-pick. No stash. No promote script. No conflict resolution.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-007", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The promote_to_wave_branch.sh script is retained for cases where a two-branch workflow is genuinely needed (e.g., backporting fixes to multiple release branches)", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Out of scope (this ADR)", "source_quote": "The promote_to_wave_branch.sh script is retained for cases where a two-branch workflow is genuinely needed (e.g., backporting a fix to multiple release branches).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-008", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "Wave 3 missed its cycle time target (20-25 min actual vs 15-20 min target) primarily due to F10 cherry-pick conflicts", "source": "docs/artifacts/RETROSPECTIVE_wave_3.md ?1 Metrics + this ADR ?Context", "source_quote": "Wave 3 missed its cycle time target (20-25 min actual vs 15-20 min target) primarily due to F10.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-009", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The fix branch and wave branch diverge over time; this is acceptable because the two efforts (april-audit cleanup vs artifact production) have different goals and merge to main independently", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Consequences (this ADR)", "source_quote": "The fix branch and wave branch diverge over time (the fix branch has the april-audit work; the wave branch has the artifact stack work). This is acceptable -- the two efforts have different goals and will merge to main independently.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-010", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The wave branch becomes the single source of truth for the artifact stack; the fix branch's chain is a historical artifact with the same receipts up to day 19 but no future receipts", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Consequences (this ADR)", "source_quote": "The wave branch becomes the single source of truth for the artifact stack. The fix branch's chain is a historical artifact (it has the same receipts up to day 19, but no future receipts).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-011", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "ADR-004 is public -- it documents a process decision that affects how the artifact stack is built, published for transparency", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Authority boundary (this ADR)", "source_quote": "This ADR is public -- it documents a process decision that affects how the artifact stack is built, and is published for transparency.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD4-012", "page": "docs/adr/ADR-004-single-branch-workflow.md", "claim": "The ADR provides 5 verification commands for readers to confirm the single-branch workflow is in effect", "source": "docs/adr/ADR-004-single-branch-workflow.md ?Verification (this ADR)", "source_quote": "A reader can verify this ADR is in effect by: 1. git log on wave branch (no cherry-pick messages), 2. git log on fix branch (no wave 4+ commits), 3. P7 validation, 4. P11 validation, 5. KRINEIA chain intact.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-001", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The agent onboarding playbook defines a 6-step protocol: identity registration, guardrail definition, bus identity approval, model tier assignment, first-task assignment, 30-day review", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?3 (this playbook)", "source_quote": "Step 1: Identity registration. Step 2: Guardrail definition. Step 3: Bus identity approval. Step 4: Model tier assignment. Step 5: First-task assignment. Step 6: 30-day review.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-002", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The playbook defines 5 roles: Principal Agent, onboarding steward, agent roster steward, bus steward, reviewer", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?2 (this playbook)", "source_quote": "Principal Agent (Reuben Bowlby, final authority), onboarding steward (Devin or delegated), agent roster steward (Nexus or delegated), bus steward (founder-mode bus_writer), reviewer (Principal Agent + 1 other agent).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-003", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "Every agent has 7 registry fields: name, role, runtime, bus_id, model_tier, trust_level, autonomy_tier", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?3 Step 1 + AGENTS.md ?1.3", "source_quote": "Fields: name (canonical identity), role (function), runtime (where it runs), bus_id (coordination bus identity), model_tier (T1-BYOK/T2-ZEN/T3-FREE), trust_level (TRUSTED/MEDIUM-HIGH/MEDIUM/PROBATIONARY), autonomy_tier (0-3).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-004", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The guardrail document defines 7 fields: identity, bus rules, permissions, limitations, escalation, commit cadence, prohibited actions", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?3 Step 2 (this playbook)", "source_quote": "Fields: identity, bus rules, permissions, limitations, escalation, commit cadence, prohibited actions.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-005", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "There are 3 model tiers: T1-BYOK (bring-your-own-key, sensitive data OK), T2-ZEN (zero-egress, sensitive data OK), T3-FREE (free-tier, NO sensitive data)", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?3 Step 4 + .agents/rules/model-tier-policy.md", "source_quote": "T1-BYOK: bring-your-own-key, may process sensitive data. T2-ZEN: zero-egress no-network, may process sensitive data. T3-FREE: free-tier/cloud, may NOT process sensitive data (data may be used for provider training).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-006", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The 30-day review has 5 possible outcomes: CONTINUE, PROMOTE, DEMOTE, PROBATION, RETIRE", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?3 Step 6 (this playbook)", "source_quote": "Outcomes: CONTINUE (agent continues as-is), PROMOTE (trust level or autonomy tier increased), DEMOTE (trust level or autonomy tier decreased), PROBATION (requires remediation), RETIRE (use retirement checklist).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-007", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The playbook documents 6 common mistakes: onboarding without guardrail, bus identity not approved, model tier mismatch, skipping 30-day review, onboarding a retired identity, promote without review", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?5 (this playbook)", "source_quote": "M1: Onboarding without a guardrail. M2: Bus identity not approved. M3: Model tier mismatch. M4: Skipping the 30-day review. M5: Onboarding a retired identity. M6: Promote without review.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-008", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The onboarding packet has 6 artifacts: registry entry, guardrail document, bus identity approval, model tier assignment, first task assignment, 30-day review", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?4 (this playbook)", "source_quote": "The onboarding packet is the collection of artifacts produced during onboarding: agent registry entry, guardrail document, bus identity approval, model tier assignment, first task assignment, 30-day review.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-009", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The retirement checklist has 6 steps: post retirement notice, archive guardrail, mark registry entry retired, do NOT reuse bus_id, conduct final review, emit KRINEIA receipt", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?7 (this playbook)", "source_quote": "1. Post a retirement notice. 2. Archive the guardrail. 3. Mark the registry entry as retired. 4. Do NOT reuse the bus_id. 5. Conduct a final review. 6. Emit a KRINEIA receipt.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-010", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The playbook provides 6 verification commands for confirming an agent is properly onboarded", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?6 (this playbook)", "source_quote": "1. Agent is in the registry. 2. Guardrail exists. 3. Bus identity is approved. 4. Model tier is assigned. 5. Agent has posted to the bus. 6. 30-day review conducted.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-011", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "An agent with a missing onboarding packet item is 'provisional' -- it may operate but its outputs are subject to additional review", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?4 (this playbook)", "source_quote": "The packet must be complete before the agent is considered active. An agent with a missing packet item is provisional -- it may operate but its outputs are subject to additional review.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AO-012", "page": "docs/artifacts/PLAYBOOK_agent_onboarding.md", "claim": "The playbook is the operational counterpart to the doctrine (item 11) and charter (item 12)", "source": "docs/artifacts/PLAYBOOK_agent_onboarding.md ?TL;DR + ?9 References (this playbook)", "source_quote": "It is the operational counterpart to the doctrine (item 11) and charter (item 12).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-001", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL is structurally ready for SOC 2 Type II; the gap is operational (no external audit yet conducted)", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?1.4 + ?3 (this paper)", "source_quote": "HUMMBL's governance infrastructure maps cleanly to the SOC 2 Trust Service Criteria. The artifact stack provides the evidence an auditor would inspect. The gap is not HUMMBL lacks controls -- the gap is HUMMBL has not engaged an auditor to attest to the controls.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-002", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "SOC 2 Type II is a customer requirement, not a legal requirement -- enterprise buyers require it as a precondition for procurement", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?1.1 (this paper)", "source_quote": "SOC 2 is not a legal requirement. It is a customer requirement: enterprise buyers require their vendors to demonstrate SOC 2 Type II compliance as a precondition for procurement.", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on AICPA SOC 2 framework documentation and enterprise procurement practice." }, { "id": "SO2-003", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL maps to 4 of 5 SOC 2 Trust Service Criteria: Common (CC1-CC9), Security (SC1-SC7), Availability (A1-A3), Confidentiality (C1-C2); Processing Integrity partial; Privacy not applicable", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?2 (this paper)", "source_quote": "HUMMBL maps to 4 of the 5 (Processing Integrity and Privacy are application-specific). Privacy: HUMMBL does not process personal data (the library runs in the buyer's environment).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-004", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL has controls for all 9 Common Criteria (CC1-CC9) mapped to specific artifacts and primitives", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?2.1 (this paper)", "source_quote": "CC1: Doctrine + Charter + Board. CC2: Coordination bus + KRINEIA + claims manifest. CC3: Risk register + SWOT + Board risk reviews. CC4: Health endpoint + CI checks + retrospectives. CC5: KillSwitch + CircuitBreaker + DelegationToken + CapabilityFence. CC6: Agent identity + model tier + GPG. CC7: Deployment checklist + runbook. CC8: Claims change playbook + ADR process. CC9: Risk register + mitigation + Board.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-005", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "There are 6 operational gaps: no external audit, SC6 not formalized, no penetration test, no formal IR plan, no vendor management program, no formal data classification policy", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?3.2 (this paper)", "source_quote": "No external audit conducted. SC6 (Data disposal) not formalized. No penetration test conducted. No formal incident response plan. No vendor management program. No formal data classification policy.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-006", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "The readiness plan has 4 phases: Q3 2026 formalize gaps, Q4 2026 prepare for audit, Q1 2027 conduct audit, Q2 2027+ maintain", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?4 (this paper)", "source_quote": "Phase 1: Q3 2026 -- Formalize the gaps. Phase 2: Q4 2026 -- Prepare for audit. Phase 3: Q1 2027 -- Conduct the audit. Phase 4: Q2 2027+ -- Maintain.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-007", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "SOC 2 Type II audits cost $20,000-$80,000; HUMMBL estimated at $20,000-$40,000 for first audit due to low complexity, documented controls, in-process architecture, machine-verifiable evidence", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?5 (this paper)", "source_quote": "SOC 2 Type II audits cost $20,000-$80,000. HUMMBL's cost will be at the lower end because: single-founder company, controls already documented, in-process architecture, machine-verifiable evidence. Estimated cost: $20,000-$40,000 for the first audit.", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate, tier C. Actual cost depends on CPA firm selection and scope." }, { "id": "SO2-008", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL is behind established competitors (Credo AI, Arthur AI, Fiddler AI, IBM) on SOC 2; this is expected for a pre-revenue company", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?6 (this paper) + docs/artifacts/COMPETITIVE_ANALYSIS_ai_governance.md", "source_quote": "HUMMBL is behind established competitors on SOC 2. This is expected -- HUMMBL is pre-revenue and pre-audit. The readiness plan closes this gap by Q1 2027.", "verified_date": "2026-06-23", "tier": "B", "status": "validated", "notes": "Based on 19-vendor competitive analysis. Refresh quarterly." }, { "id": "SO2-009", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL should pursue SOC 2 Type II in Q4 2026/Q1 2027, after the first pilot integration, funded from pilot revenue or operating budget", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?7 (this paper)", "source_quote": "HUMMBL should: 1. Pursue SOC 2 Type II readiness in Q4 2026/Q1 2027. 2. Fund the audit from first pilot integration revenue or operating budget. 3. Use the audit as a market-entry enabler. 4. Not delay the first pilot integration for the audit.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-010", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL should NOT pursue SOC 2 before the first pilot integration, should NOT use it as a marketing tool, should NOT pursue ISO 27001/42001 before SOC 2", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?7 (this paper)", "source_quote": "HUMMBL should NOT: 1. Pursue SOC 2 before the first pilot integration. 2. Pursue SOC 2 as a marketing tool. 3. Pursue ISO 27001 or ISO 42001 before SOC 2.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-011", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "HUMMBL's in-process architecture is a structural differentiator for SOC 2: the buyer's data does not flow to HUMMBL, reducing audit scope", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?1.2 + ?5 (this paper) + docs/artifacts/WHITE_PAPER_governance_infrastructure.md", "source_quote": "The library runs in the buyer's environment, not in HUMMBL's cloud. The buyer's data does not flow to HUMMBL. This is a structural differentiator: HUMMBL is not a SaaS that processes customer data.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "SO2-012", "page": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md", "claim": "The paper provides 10 verification commands for readers to independently verify HUMMBL's SOC 2 readiness claims", "source": "docs/artifacts/POSITION_PAPER_soc2_type_ii_readiness.md ?8 (this paper)", "source_quote": "A reader can re-verify this paper's claims by: 1. artifact stack, 2. risk register, 3. doctrine, 4. charter, 5. evidence pack, 6. claims manifest (307 claims), 7. KRINEIA chain (16+ receipts), 8. health endpoint, 9. agent identity registry, 10. model tier policy.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-001", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "ADR-005 adopts P17: run scripts/validate_krineia_chain.py as a CI check on every push/PR that touches the KRINEIA chain or the validator", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Decision (this ADR)", "source_quote": "Adopt P17: run scripts/validate_krineia_chain.py as a CI check on every push/PR that touches the KRINEIA chain or the validator.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-002", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "The KRINEIA receipt chain is HUMMBL's audit trail: every governance event emits a receipt with id, prev_hash, hash, state, and time", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Context (this ADR) + _receipts/krineia/primary.jsonl", "source_quote": "The KRINEIA receipt chain is HUMMBL's audit trail. Every governance event emits a receipt with: a unique id (UUID), a prev_hash linking to the prior receipt, a hash (SHA-256 of the canonical JSON, excluding the hash field), a state (event name + payload), a time (ISO 8601 timestamp).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-003", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "The validator checks 6 things: valid JSON, required fields, hash chain intact, hash correctly computed, genesis prev_hash all zeros, no duplicate IDs", "source": "docs/adr/ADR-005-krineia-chain-ci.md §What P17 does (this ADR)", "source_quote": "Parses every line as JSON. Checks every receipt has the 5 required fields. Verifies the hash chain: each receipt's prev_hash matches the prior receipt's hash. Recomputes each receipt's hash and verifies it matches. Checks the genesis receipt's prev_hash is all zeros. Checks for duplicate receipt IDs.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-004", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "The validator has 14 tests, all passing, covering valid chain, missing file, empty file, invalid JSON, missing fields, broken prev_hash, tampered hash, genesis, duplicates, unexpected fields, hash determinism, hash exclusion, key-order independence, and the real chain", "source": "scripts/test_validate_krineia_chain.py (this repo)", "source_quote": "14 tests: test_valid_chain_passes, test_missing_file_returns_error, test_empty_file_returns_error, test_invalid_json_returns_error, test_missing_required_field_returns_error, test_broken_prev_hash_link_returns_error, test_tampered_hash_returns_error, test_genesis_with_nonzero_prev_hash_returns_error, test_duplicate_id_returns_error, test_unexpected_field_returns_error, test_compute_hash_deterministic, test_compute_hash_excludes_hash_field, test_compute_hash_key_order_independent, test_real_chain_passes.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-005", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "3 alternatives were considered and rejected: manual verification on demand, GPG-sign each receipt, use a blockchain/distributed ledger", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Alternatives considered (this ADR)", "source_quote": "Alternative 1: Manual verification on demand. Alternative 2: GPG-sign each receipt. Alternative 3: Use a blockchain / distributed ledger.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-006", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "GPG signing was rejected because it requires the operator's passphrase for every receipt emission, blocking automated emission; the hash chain already provides tamper detection", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Alternative 2 (this ADR)", "source_quote": "GPG signing requires the operator's passphrase for every receipt emission. This blocks automated receipt emission. The hash chain already provides tamper detection. GPG signing adds non-repudiation, but that is a higher bar than HUMMBL currently needs.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-007", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "Blockchain was rejected because HUMMBL's chain is internal and single-party; a blockchain adds cost, complexity, and external dependencies for no benefit", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Alternative 3 (this ADR)", "source_quote": "HUMMBL's chain is internal. A blockchain adds cost, complexity, and external dependencies for no benefit. The hash chain + CI verification provides sufficient tamper detection for an internal audit trail. A blockchain is appropriate for multi-party audit trails where no single party is trusted.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-008", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "P17 enables tamper detection at push time (before merge), chain integrity verification, audit readiness, and defense in depth", "source": "docs/adr/ADR-005-krineia-chain-ci.md §What this enables (this ADR)", "source_quote": "Tamper detection: Any modification to a receipt is caught at push time. Chain integrity: A broken prev_hash link is caught at push time. Audit readiness: An auditor can run the same validator. Defense in depth: structural + operational integrity.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-009", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "The validator does not check payload correctness (e.g., that a governance.artifact_promoted receipt has the right payload fields); this is a future extension (P19 candidate)", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Negative (this ADR)", "source_quote": "The validator does not check payload correctness (e.g., that a governance.artifact_promoted receipt has the right payload fields). This is a future extension (P19 candidate).", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-010", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "CI adds ~10 seconds per run (Python startup + chain parse + hash computation)", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Negative (this ADR)", "source_quote": "CI adds ~10 seconds per run (Python startup + chain parse + hash computation).", "verified_date": "2026-06-23", "tier": "C", "status": "unproven", "notes": "Internal estimate, tier C. Actual time depends on chain length and CI runner speed." }, { "id": "AD5-011", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "The real KRINEIA chain has 18 receipts and passes validation (all hashes verified, all prev_hash links intact)", "source": "_receipts/krineia/primary.jsonl (this repo) + scripts/validate_krineia_chain.py output", "source_quote": "OK: _receipts/krineia/primary.jsonl. Total receipts: 18. Genesis receipt: 092c5567. Latest receipt: 1564bc06. Latest event: governance.artifact_promoted.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" }, { "id": "AD5-012", "page": "docs/adr/ADR-005-krineia-chain-ci.md", "claim": "ADR-005 is public — it documents a CI check that affects how the KRINEIA chain is verified, published for transparency", "source": "docs/adr/ADR-005-krineia-chain-ci.md §Authority boundary (this ADR)", "source_quote": "This ADR is public — it documents a CI check that affects how the KRINEIA chain is verified, and is published for transparency.", "verified_date": "2026-06-23", "tier": "A", "status": "validated" } ], "step4_actions_required": [ "INVALIDATED (9 claims) — MUST fix or remove:", " HP-007: '25 Modules' → change to '26 Primitives' or '49 Modules'", " HP-010: '<50ms API Latency' → change to '<100ms' or 'local package <50ms'", " HP-014: dtm.issue() → add .issue() method or update snippet (PA chose add method)", " HP-015: bus.append() → add .append() method or update snippet (PA chose add method)", " PRIM-002: bus.write() → add .write() method or update snippet", " PRIM-005: DCT.issue() → add DCT alias + .issue() or update snippet", " PRIM-006: DCTX() → add DCTX alias or update snippet", " PRIM-007: b120.get() → add b120 alias or update snippet", " PRIM-008: attest.verify() → implement module or remove section", " OWASP-002: '1032 Tests' → update to 1207", " VAL-001: '1032 passing' → update to 1207", " VAL-005: manifest/hummbl-public-namespace.json → create file or remove link", " VAL-006: manifest/public-boundaries.json → create file or remove link", " RDY-006: '1032 dedicated governance tests' → update to 1207", "", "MISLEADING (6 claims) — MUST soften or add context:", " HP-006: '15,600+ Aggregate' → add '(aggregate, includes internal)'", " PRIM-001: 'Each one is a Python package' → 'Seven primitives in one package'", " RDY-003: '6 Production Primitives' → reconcile with primitives page (7)", " OWASP-001: '10/10 Risks Covered' → '10/10 Risks Addressed' + disclaimer", "", "UNPROVEN (16 claims) — MUST prove or remove:", " HP-016: OWASP 10/10 Coverage (judgment claim)", " HP-017: Governance Tuple paper (verify DOI resolves)", " OWASP-005 through OWASP-013: per-primitive test counts (8 claims)", " VAL-002: Arbiter audit score 99.5/100", " VAL-003: Cloudflare Pages hosting", " VAL-004: hummbl-base120 148 tests", " RDY-001: 5 Frameworks Mapped", " RDY-002: 15 Governance Capabilities", " RDY-004: 70-90% Cost Savings", " RDY-005: 14 CI workflows", " CMP-001: 30+ enforcement dates", " CMP-002: US/EU/APAC coverage", " MCP-003: 140 chaos tests 100% pass", "", "NOT CHECKED (6 claims) — need additional audit time:", " STS-002 through STS-004: 3 status page endpoints", " MCP-001, MCP-002: MCP server tools/resources", "", "VALIDATED (18 claims) — no action needed:", " HP-001, HP-002, HP-003, HP-004, HP-005, HP-008, HP-009, HP-011, HP-012, HP-013", " PRIM-003, PRIM-004", " OWASP-003, OWASP-004", " STS-001" ], "verification_notes": { "p0_release_state_2026_07_01": { "method": "PyPI project page/file metadata plus local source and package-status inspection", "result": "hummbl-governance latest PyPI version is 1.2.0; v1.2.0 sdist and wheel were not uploaded through the PyPI trusted-publisher path; base120 and hummbl-base120 PyPI JSON endpoints returned 404.", "verdict": "P0 release-state manifest created; base120 demoted to source-install-only; trusted-publisher upload status not claimed outside the release-state manifest." } }, "public_release_state": "web/manifest/public-release-state.json" }