# Evolution 7 — Release gate

Run `e7-20261012T134603Z-5cbb38e7` · source revision `a97b94ddb6876c2266400e6303f3e578cb853833`

## Verdict: PARTIAL / PRODUCTION BLOCKED

Local development gate: **PARTIAL** · Production release gate: **BLOCKED**
· Production blockers: G10, G11, G12, G14

Statuses used: PASS, FAIL, PARTIAL, BLOCKED, NOT_RUN, UNKNOWN. A gate is PASS only when the check ran and passed in this run. Local
tests do not stand in for hosted CI, a valid signature does not stand in for live enforcement, and a public
evidence page does not stand in for independent review.

| Gate | Title | Status | Scope | Mandatory for production | Evidence |
|---|---|---|---|---|---|
| G01 | JIT protocol correctness | **PASS** | local | no | test_e7_protocol: 94 passed, 0 not passed; regression suites clean: True |
| G02 | Independent TALOS verification | **PASS** | local | no | test_e7_enforcement: 88 passed, 0 not passed (canary-file assertions on every refusal path) |
| G03 | Complete mediation of declared protected action paths | **PARTIAL** | local | no | Inside cain/talos the only process-start sites are ['cain/talos/talos_sandbox_launcher.py', 'cain/talos/talos_worker.py'] (test E7-E-050/051). But cain.talos has 0 production callers: no gateway, MCP or talos-coder path is routed through it, and talos-coder's RunCommandTool still uses shell=True. Mediation is complete for the declared paths and absent for everything else. |
| G04 | Worker isolation and verified sandbox controls | **PASS** | local | no | test_e7_worker_isolation: 30 passed, 0 not passed; host: Linux 7.0.0-38-generic, Landlock ABI 8, euid 0, x86_64 |
| G05 | Replay ledger durability and concurrency guarantees | **PASS** | local | no | test_e7_ledger: 20 passed, 0 not passed; single-host SQLite only, multi-host unsupported and refused |
| G06 | Formal model validity and implementation-linked tests | **PASS** | local | no | 22/22 model properties hold with SAT controls and detected mutants (z3 5.1.0); test_e7_formal_link: 155 passed, 0 not passed |
| G07 | Adversarial regression and mutation coverage | **PASS** | local | no | mutation: {"KILLED": 85, "SURVIVED_EQUIVALENT": 4} of 89; unexplained survivors/errors: []; Evolution 7 suite 441 passed / 0 failed / 0 errors / 0 skipped |
| G08 | IHVRK clean-room reproduction and integrity | **PASS** | local | no | `unshare -n /usr/bin/python3 -I verify_evolution_07.py` in a fresh temporary directory holding only the extracted bundle, network namespace disabled: exit 0 |
| G09 | Secret and private-artifact scanning | **PASS** | local | no | 29 public files scanned with 8 secret patterns: 0 findings; 0 files classified PRIVATE and excluded; no implementation source, key or database is in the bundle |
| G10 | Three-site evidence parity and homepage Verification Center discoverability | **BLOCKED** | publication | yes | Evolution 7 evidence is NOT published on any of the three sites (publication was not authorised in this run). Homepage -> Verification Center link observed live: PASS. Evolution 6 manifest identical on all three sites: True. |
| G11 | Hosted CI execution | **BLOCKED** | production | yes | No git remote is configured (`git remote -v` is empty), so no hosted CI has ever run this code. A workflow file existing is not a CI run. |
| G12 | Deployed revision identity and live MCPGate traffic-path evidence | **BLOCKED** | production | yes | cain.talos has no production caller; the running gateways do not import it. No deployed revision carries this code and no live request traverses it. |
| G13 | Hardware attestation and physical interlocks (only if claimed) | **NOT_RUN** | production | no | No hardware attestation and no physical interlock is claimed by this evolution. talos_safeguards.py is a software simulation and was not changed. |
| G14 | Independent third-party human review | **BLOCKED** | production | yes | No independent human has reviewed this work. Everything here was produced and checked by the same development session. |

The local gate is the conjunction of the gates whose scope is `local`. The production gate is the conjunction of
the gates marked mandatory; it is BLOCKED while any of them is not PASS.