The accepted path proves the full collaboration loop.

Required proof

• HumanWorker and AgentWorker are represented by Worker and Actor records.
• WorkSession records objective, Policy, revision, and event hash state.
• Every WorkSession-scoped mutation validates required headers.
• Every actor-bearing mutation body matches Jarvis-Actor-Id.
• Every accepted state change records Actor authority, expected revision, and previous event hash.
• AgentWorker action records PolicyDecision before accepted protocol state.
• Policy-denied or review-required action creates scoped Request.
• Request resolves only through Review or Takeover.
• Review approve or narrow produces bounded ApprovalScope.
• Stale Takeover rejection is covered by the stale Takeover fixture.
• Contribution records attributable human, agent, shared, service, or tool work.
• EvidenceManifest exports portable proof without host-private fields.
• LearningRecord, MemoryProposal, and SkillProposal keep durable learning governed.
• OutcomeReport references LearningRecord without mutating sealed records.

Required object path

Export boundary

EvidenceManifest export excludes credentials, secrets, raw auth tokens, session cookies, provider keys, raw runtime state, host-only database ids, deployment details, billing data, private scores, UI state, and private keys.

Source contract