AINA Data Engine Room · Handoff · 2026-06-13

Sensitive Source Authority Triage

The remaining top-band abstains are now risk-bucketed with guardrail requirements, but none were promoted.

Ali Mehdi Mukadam · co-authored with Codex · Repo: /srv/aina/aina-data-engine-room

The Single Idea

This slice turned the remaining 25 top-band runtime abstains into a risk-aware source-authority triage ledger. It did not promote runtime bridges, embedding candidates, public runtime behavior, or production authority. The point was to stop title-only repair for sensitive roles and name the guardrails each row needs first.

01 · What Changed

A Guardrail Ledger, Not A Bridge

The new top_band_sensitive_source_authority_triage_v1 lane reads the current runtime-route repair queue, classifies each remaining abstain by risk bucket, emits guardrail requirements, and keeps every row abstained until evaluator checks and source-backed caveats exist.

Inputtop_band_runtime_route_repair_queue_v1
Triagerisk buckets plus guardrails
Outputabstain-only ledger, no bridge
02 · Triage Result

All 25 Stay Held

The ledger identifies which rows can become candidates later, but it does not let any sensitive role move into runtime fallback or embeddings yet.

25remaining rows
13top-500 rows
22candidate after guardrails
3held or repair-first
TitleRankDecisionReason
case manager122hold_for_learner_or_source_confirmationAmbiguous healthcare/social-services context needs subtype confirmation.
teacher special education91hold_for_context_resolutionSource depth and context are too thin for sensitive education routing.
paralegal corporate documentation402repair_labels_before_sensitive_guardrailExisting JD embedding eligibility remains repair_first.
03 · Risk Buckets

The Rows Are Sensitive In Predictable Ways

Rows can carry more than one bucket. Every row also requires source references, a runtime caveat, and an evaluator guardrail before any later promotion.

BucketRowsRequired Guardrail Shape
legal_compliance17No legal-advice claim, attorney/policy checkpoint, citation and jurisdiction caveat.
people_hr_sensitive17Employment decision boundary, bias/adverse-impact check, manager or HR checkpoint.
education_minors10Minor-safety boundary, educator final judgment, policy caveat.
finance_regulatory9No financial-advice claim, licensed-professional checkpoint, compliance disclaimer.
public_sector4Public-policy boundary and records/procurement caveat.
customer_data3Privacy boundary, customer-data redaction, escalation path.
healthcare_privacy3No clinical decision claim, PHI redaction, licensed-professional checkpoint.
04 · Validation

Current Gates Are Green

uv run pytest tests/test_top_band_sensitive_source_authority_triage.py tests/test_top_band_source_evidence_completion_bridge.py tests/test_production_runtime_contracts.py -q
uv run ruff check src/aina_data_engine/top_band_sensitive_source_authority_triage.py src/aina_data_engine/cli.py src/aina_data_engine/reports.py tests/test_top_band_sensitive_source_authority_triage.py
uv run aina-data-engine --root /srv/aina/aina-data-engine-room top-band-sensitive-source-authority-triage
uv run aina-data-engine --root /srv/aina/aina-data-engine-room validate
uv run aina-data-engine --root /srv/aina/aina-data-engine-room ain-506-p0-gate
uv run aina-data-engine --root /srv/aina/aina-data-engine-room ain-510-retrieval-promotion-gate
uv run aina-data-engine --root /srv/aina/aina-data-engine-room production-runtime-readiness

Results: focused pytest 11 passed, ruff passed, triage passed, validation passed, AIN-506 passed, AIN-510 returned promotion_ready, and runtime readiness returned ready_to_harden_headless_production_runtime.

6510valid vectors
500top-500 vectors
1000top-1,000 vectors
0.190463known-pair gap
05 · Boundaries

No Production Authority Was Expanded

No live Gemini call, no embedding manifest, no batch manifest, no runtime bridge, no public runtime unlock, no real-user data, no external writes, no production telemetry, no runtime embedding authority promotion, and no donor repo mutation.

Build Guardrail Packs First

The next slice should generate one guardrail and evaluator mismatch fixture pack per risk bucket. Only after that lane passes should the 22 candidate rows be considered for fallback bridging or embedding. case manager stays held for subtype confirmation, and paralegal corporate documentation stays repair-first.

Where To Start

Resume by building sensitive-role guardrail packs, not by trying to squeeze more title-only coverage out of the remaining abstains.