AINA data engine room - Codex - 2026-06-16

Platform Live Boundary v1

Platform-live boundary is ready for local integration planning only: role context, AI Fluency, workflow/practice, evaluator, proof-ref, and next curriculum contracts exist, while public runtime, real-user data, external writes, production telemetry, and runtime embedding authority remain blocked.

The Single Idea

The engine has local contracts the platform can plan against, but every release switch remains off until a future explicit approval receipt exists.

01

Snapshot

platform_boundary_ready_local_onlystatus
9local surfaces ready
6release domains locked
0approved unlocks
0failed checks
Falsepublic runtime allowed
02

Contract Flow

1Assessment seed stays a weak onboarding signal.
2Role context and AI Fluency map assemble local evidence.
3Practice, evaluator, proof refs, and curriculum move stay headless.
4Release receipt remains required before live platform use.
03

Platform Contract Surfaces

SurfaceLocal ReadyConsumer ContractAllowed NowBlocked Use
role_contextyesrole_context_evidence_v1 + role_resolution_decision_v1local role-context lookup and platform adapter planningpublic role runtime without release receipt
capability_mapyesAIFluencyCapabilityMap five-layer mapheadless local AI Fluency map fixtureverified learner score or public badge
workflow_practiceyesworkflow/practice selection from local AI Fluency loopsynthetic/local simulator fixturereal learner assignment without tenant and privacy gates
evaluatoryesdimension-scored evaluator outputlocal evaluator proof over fixture rowsemployment or certification decisioning
proof_refyesprivacy-safe proof artifact refs and hasheshash/ref-only proof index fixtureraw learner artifact storage or telemetry
next_curriculum_moveyescapability gap to next curriculum movelocal next-step recommendation fixtureproduction recommendation authority without rollback proof
assessment_seedyesPlatformAssessmentSeed as weak self-report signalonboarding hint onlycompiler WorkflowFingerprint or proof signal
telemetry_contractyestelemetry_contract_v0 local redaction envelopelocal schema/redaction planningPostHog, Sentry, or external telemetry writes
release_unlockyesproduction_deployment_approval_v1 explicit approval boundaryprove production switches remain offimplicit launch, production telemetry, public runtime, or real-user traffic
04

Release Boundaries

DomainAllowedExplicit Approval RequiredBlocked By
public_runtimeFalseTrueapproval_not_requested
external_writesFalseTrueapproval_not_requested
real_user_dataFalseTrueapproval_not_requested
production_telemetryFalseTrueapproval_not_requested
deployment_promotionFalseTrueapproval_not_requested
runtime_embedding_authorityFalseTrueain_510_promotion_required_before_enable
05

Checks

CheckResult
runtime_contracts_validPASS
runtime_contracts_keep_local_boundariesPASS
runtime_readiness_validPASS
ai_fluency_loop_validPASS
ai_fluency_loop_proves_local_e2ePASS
ai_fluency_loop_keeps_private_boundariesPASS
assessment_seed_remains_onboarding_seed_onlyPASS
api_contract_security_presentPASS
api_runtime_auth_boundary_presentPASS
telemetry_contract_local_onlyPASS
deployment_approval_boundary_validPASS
release_unlocks_all_blockedPASS
deployment_dependencies_remain_local_safePASS
legacy_review_gate_fields_absentPASS
Where to start
Wire against the local contracts only; require a future explicit release receipt before live runtime, telemetry, or real-user data.