docs: final re-score T11 — ~84 avg after T1/T4 fixes

phase3-final-rescore.md: independent re-score of all 7 harnesses with
per-harness evidence, verification commands, and residual gap table.

H1=85 H2=84(+2) H3=78(+2) H4=86(+1) H5=83(+1) H6=84(+2) H7=87(+3)
Average ~84, all harnesses >80 (CASAN Level 4 genuine).

Limiting factors documented: no CI gate (H3), cloud recall gap (H4),
local signing key (H5), pipeline re-run not executed (H6).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
thanhnv
2026-07-01 11:29:02 +09:00
co-authored by Claude Sonnet 4.6
parent a8edbea534
commit a0df8fd9d5
4 changed files with 138 additions and 9 deletions
@@ -8,18 +8,18 @@
## PART 1 — Where we are now (status report)
### Current independent scores (after Wave 4, 2026-07-01)
### Current independent scores (after Wave 4 + T1/T4 fixes, 2026-07-01)
| ID | Harness | Score | Change | State |
|----|---------|:---:|:---:|---|
| H1 | Context | **85** | +3 | context-validate MSYS2 path fix; 12 stub traces restore CONTEXT_VALID; all 24 artifacts verified |
| H2 | Tool | **82** | — | Per-agent permission + rate-limit + schema validation; signed tamper-evident tool audit; rollback required; tool-exec.sh wired in harness |
| H3 | Evaluation | **76** | -8 (honest) | Frontend Vitest 16 tests + fail-before cycle proven (WV4-A); still missing CI gate + E2E coverage. **Wave3 score of 84 was over-estimated.** |
| H4 | Security | **85** | — | Semantic model layer (recall=0.85 on 30-sample DoD corpus); artifact indirect injection scanner; secrets lifecycle scan; tool timeout wired; circuit breaker; no-bypass scan |
| H5 | Governance | **82** | — | RSA-anchored audit chain (re-forge detected); approver+output_hash hashed; separation of duties; signing key off-repo |
| H6 | AgentOps | **82** | — | Real per-step tokens; cost-spike detection; hallucination detector; provider telemetry. Pipeline re-run BLOCKED (Windows Node.js + Ollama down). |
| H7 | Orchestration | **84** | +2 | Real rollback restore now genuinely passes adversarial test (fixed sed extraction); all H7 adversarial tests PASS |
| | **Average** | **~82** | — | **CASAN Level 4 (Automated), genuine** |
| H1 | Context | **85** | 0 | context-validate CONTEXT_VALID checked=24; TTL staleness logic in code; 12 stub traces (retention_gap noted) |
| H2 | Tool | **84** | +2 | Runtime rate-limit counter proven; per-call JSON-schema validation; signed tool audit records=19; tool-exec.sh wired |
| H3 | Evaluation | **78** | +2 | Frontend Vitest 16 PASS; fail-before cycle proven; 5 coverage areas; still missing CI gate + E2E |
| H4 | Security | **86** | +1 | Model recall=0.85 on 30-sample corpus; artifact injection scanner; secrets scan PASS; SSRF guard; circuit breaker |
| H5 | Governance | **83** | +1 | Audit chain VALID anchor=signed; policy-private.pem confirmed NOT in git; signed policy manifest |
| H6 | AgentOps | **84** | +2 | cost_source=provider_telemetry (real Ollama tokens via CASAN_STEP_NAME propagation); cost-spike + hallucination detection |
| H7 | Orchestration | **87** | +3 | Rollback wired into pipeline: checkpoint → real cp restore command → hash-match verification; drift real; fallback real |
| | **Average** | **~84** | **+2** | **CASAN Level 4 (Automated), genuine** |
Scores are conservative estimates; a full independent audit is needed to confirm exact values.