Manifest · identity · capability · C1
External agent intake
Synthetic and manifest-only intake surface. Trust defaults to ZERO per run. Credentials must be brokered. No live write pilot on this route.
Status: AGENT_INTAKE_REFERENCE_C1
Evidence class: INTAKE_UI_C1 · Claim ceiling C1 · no promotion
BODYTWIN_VALIDATED=NO · LIVE_FIREWALL=NO · TAGMATA=SOURCE_GAP
Intake gates
G0 → G3 (force SFT)
G0 Intake→G1 Identity→G2 Capability→G3 Force SFT
- Provider neutrality required
- Untrusted external content ≠ system instruction
- max_tool_class attested; T5 default HOLD/DENY
- TASK_ADAPTATION ≠ TRUST_ADAPTATION
- No thought policing
- LIVE_WRITE = HOLD
Machine: /research/agents/state.json