Skip to content

M6 evaluation record

Current verdict

VERIFIED on 2026-07-27.

Positive paths

  • Complete second-organization answers create a schema-valid candidate profile with no gaps and no core changes.
  • Partial answers create explicit blocking gaps.
  • Permission-filtered export/import preserves identity, version, authority, privacy, provenance, relationships, and content.
  • The Northstar preparation canary uses Linear/GitLab evidence and portable core metadata without loading Hector's corpus.
  • A delegated subject changes without changing organization, Initiative, or pack identity.

Adversarial paths

  • Secret-value fields and cross-organization adapter bindings are rejected.
  • CamelCase secret fields, credential-like values, local instruction paths, and AGENTS.md material are rejected before storage.
  • Forged access contexts and missing capabilities are rejected.
  • Organization A cannot read, write, export, or import Organization B.
  • Private resources do not appear in public search or export.
  • Tampered bundles, mismatched organizations, incompatible core versions, and non-monotonic profile versions fail closed.
  • Recomputed unkeyed digests fail HMAC authentication; malformed resources and conflicting stable-ID replay are rejected transactionally.
  • M5 experiences and candidates cannot deduplicate or disclose across organizations.
  • Candidate profiles cannot modify core or activate policy.

Repository checks

  • 19 focused M6 tests pass.
  • 157 complete service tests pass.
  • Profile, adapter, and export schemas execute.
  • M2 corpus validation and corpus/docs coverage pass.
  • Strict MkDocs and diff checks pass.

Independent review reproduced every positive and adversarial path. Its first two passes found forgeable integrity, incomplete validation/exclusion, provider-specific preparation, and organization-binding gaps. Remediations a413aa3 and 07f59c1 closed them; final review passed.