{
  "schema": "project-telos.second-level-flagship-queue/v1",
  "tool": "telos.second_level.queue",
  "generated_at": "2026-06-29T00:00:00.000Z",
  "purpose": "Track public-safe second-level flagship candidates discovered during whole-workstation substrate assessment before promoting them into runtime dependencies or the revival registry.",
  "evidence_basis": [
    "Index MCP map over the operator development root reported 124 repositories: 114 public-class and 10 local-class.",
    "Forum MCP route returned low confidence and escalation with project-telos as the leading lane for second-level candidate assessment.",
    "Parallel read-only explorer passes used metadata, README/package/config/test names, and git metadata only.",
    "README SHA256 values were recorded for public-safe candidates; private/local-only candidate detail remains in ignored local packets."
  ],
  "privacy_boundary": {
    "raw_private_payloads_included": false,
    "private_paths_in_public_records": false,
    "source_body_required_for_interop": false,
    "rule": "Public docs may record lane families, capability summaries, README hashes, risk boundaries, and first actions. Private client data, credentials, operator runbooks, local state payloads, and secret-bearing tool bodies stay outside git."
  },
  "promotion_standard": [
    "public-safe README receipt",
    "explicit flagship host",
    "CLI JSON or adapter roadmap",
    "MCP or protocol-agnostic bridge plan",
    "privacy boundary",
    "risk boundary",
    "first test fixture",
    "Crucible-verifiable claim"
  ],
  "public_candidates": [
    {
      "id": "reconcile",
      "origin": {"repo": "HarperZ9/reconcile", "path": ""},
      "visibility": "public-github-remote",
      "lane": "creative-verification-engine",
      "host_flagships": ["telos.creative.engine", "crucible.measurement_gate", "index.context.envelope"],
      "value": "Creative-verification loop for generated artifacts, criteria, refinement, composition, choreography, and witnessed outputs.",
      "risk_boundary": "Adapters should stay fixture-backed until scene/world packets and generated programs are treated as untrusted inputs.",
      "first_action": "Add a Telos adapter smoke test around the minimal reconcile loop and publish a World/media graph packet mapping.",
      "receipts": [
        {
          "repo": "HarperZ9/reconcile", "commit": null, "path": "README.md",
          "sha256": "8d6ff02e87c548a113dd2bc8b2e540af7bdc611e20979fd181e2b6ea2efc3f62"
        }
      ]
    },
    {
      "id": "studio-engine",
      "origin": {"repo": "HarperZ9/studio-engine", "path": ""},
      "visibility": "public-github-remote",
      "lane": "world-rendering-engine",
      "host_flagships": ["telos.creative.engine", "telos.rendering.capabilities", "crucible.measurement_gate"],
      "value": "Experience frontend and creative-verification engine lineage for witnessed Worlds, GLSL render programs, audio programs, timelines, and receipts.",
      "risk_boundary": "Generated worlds, render programs, and audio programs are untrusted until constrained by packet schemas and tests.",
      "first_action": "Define the Telos World packet schema and one golden minimal render/audio receipt test.",
      "receipts": [
        {
          "repo": "HarperZ9/studio-engine", "commit": null, "path": "README.md",
          "sha256": "f28b076c0ca0b86dbd12a0a6141e292c38d5778de28e6fc0fbb92bd2638f830a"
        }
      ]
    },
    {
      "id": "provenance-sensorium",
      "origin": {"repo": "HarperZ9/provenance-sensorium", "path": ""},
      "visibility": "public-github-remote",
      "lane": "provenance-sensor-layer",
      "host_flagships": ["gather.docs", "index.context.envelope", "telos.action.receipt", "crucible.assess"],
      "value": "Hash-stamped provenance and claim-check sensor layer that can feed evidence-first workflows.",
      "risk_boundary": "Receipts may reference evidence but must not embed secret-bearing evidence or private payload bodies.",
      "first_action": "Define the Telos provenance receipt ingestion contract and one sanitized claim-check fixture.",
      "receipts": [
        {
          "repo": "HarperZ9/provenance-sensorium", "commit": "d3e79f6a9b3e80f114eb661f078b8f923835dd6c", "path": "README.md",
          "sha256": "61949fafd1a07d35785d8cbacdac97aca479a368a558846aecdca619c472d414"
        }
      ]
    },
    {
      "id": "proof-surface",
      "origin": {"repo": "HarperZ9/proof-surface", "path": ""},
      "visibility": "public-github-remote",
      "lane": "proof-packet-surface",
      "host_flagships": ["crucible.report", "index.context.envelope", "forum.ledger.summary"],
      "value": "Evidence packet and witness validation surface for reviewer-facing proof bundles.",
      "risk_boundary": "Witness packets must redact absolute private paths and private artifact labels before public export.",
      "first_action": "Add a sanitized proof-bundle export fixture and a Crucible report join test.",
      "receipts": [
        {
          "repo": "HarperZ9/proof-surface", "commit": "f454fd2215c0951cb7eec14798685da0766f74a8", "path": "README.md",
          "sha256": "9271b21246f886948e2b85cf8dee3d778f3d5102b37583663a592d4ab5dd1464"
        }
      ]
    },
    {
      "id": "model-provenance-validator",
      "origin": {"repo": "HarperZ9/model-provenance-validator", "path": ""},
      "visibility": "public-github-remote",
      "lane": "model-provenance-validation",
      "host_flagships": ["telos.model.foundry", "crucible.assess", "repo-proof-index"],
      "value": "Model and artifact attestation validation candidate for model-foundry promotion gates.",
      "risk_boundary": "Validate attestations and metadata only; do not require model weights, private manifests, or private datasets.",
      "first_action": "Add a Telos model-artifact attestation adapter doc and fixture test.",
      "receipts": [
        {
          "repo": "HarperZ9/model-provenance-validator", "commit": "b597736ff2aa05a355a0c7a95c12270a07ffbc8b", "path": "README.md",
          "sha256": "c79f7e5d291718e622887d3109aab998ce56cec132df51c517451dcbd939ce48"
        }
      ]
    },
    {
      "id": "public-surface-sweeper",
      "origin": {"repo": "HarperZ9/public-surface-sweeper", "path": ""},
      "visibility": "public-github-remote",
      "lane": "public-surface-hygiene",
      "host_flagships": ["crucible.review", "index.map", "telos.workflow"],
      "value": "Public exposure hygiene and release-readiness scanner for repos, docs, and artifacts.",
      "risk_boundary": "Default profiles should scan public metadata and release surfaces, not private clones or local state.",
      "first_action": "Create a Telos public-surface check profile and regression fixture.",
      "receipts": [
        {
          "repo": "HarperZ9/public-surface-sweeper", "commit": "7b76885396fad0fb4b59287effd5fa87987781a5", "path": "README.md",
          "sha256": "2217e9cc4c8cff6041abf0d1c21aa7fd486904bd6c949d1967a75bcae5df0891"
        }
      ]
    },
    {
      "id": "agent-routing-kit",
      "origin": {"repo": "HarperZ9/agent-routing-kit", "path": ""},
      "visibility": "public-github-remote",
      "lane": "deterministic-agent-routing",
      "host_flagships": ["forum.route", "index.context.envelope", "telos.loop.ledger"],
      "value": "Deterministic routing and context-budget helper candidate for Forum and large-workspace workflows.",
      "risk_boundary": "Routing hints are advisory and must not encode hidden policy authority or private tool names.",
      "first_action": "Add a Telos lane-router adapter doc and route classification tests.",
      "receipts": [
        {
          "repo": "HarperZ9/agent-routing-kit", "commit": "c4cb782247f854a8a1741067eca9b6f0faad7685", "path": "README.md",
          "sha256": "f28c1f89cda6626d6f41144330e5201ecf190eb16a26fb9e6d9559e5de5a0830"
        }
      ]
    },
    {
      "id": "agent-hook-pack",
      "origin": {"repo": "HarperZ9/agent-hook-pack", "path": ""},
      "visibility": "public-github-remote",
      "lane": "agent-hook-surface",
      "host_flagships": ["forum.ledger.summary", "telos.action.receipt", "crucible.assess"],
      "value": "Hook and workflow-interception candidate for turning agent actions into receipts and review gates.",
      "risk_boundary": "Hooks must be explicit, local, and reviewable; no hidden automation or private transcript export.",
      "first_action": "Map hook events to Telos action receipts and add a synthetic hook fixture.",
      "receipts": [
        {
          "repo": "HarperZ9/agent-hook-pack", "commit": "3cd44aa52db2f9bfba405db2d8760966985a370a", "path": "README.md",
          "sha256": "c1c6ef713b1f9338c01155d4fe8ea65da45aa9b27370b3ea0e81a9687b5a2e16"
        }
      ]
    },
    {
      "id": "coherence-membrane",
      "origin": {"repo": "HarperZ9/coherence-membrane", "path": ""},
      "visibility": "public-github-remote",
      "lane": "membrane-interface",
      "host_flagships": ["telos.action.receipt", "crucible.measurement_gate", "index.context.envelope"],
      "value": "Membrane substrate for perception, criteria, and evidence separation across agent workflows.",
      "risk_boundary": "Extract interfaces and fixtures only; do not import operator-specific policy corpora as shared defaults.",
      "first_action": "Define a minimal Telos membrane API and run a focused contract test slice.",
      "receipts": [
        {
          "repo": "HarperZ9/coherence-membrane", "commit": "030caaa69c2ba6ec05fb7098a57bf6e478b9cf88", "path": "README.md",
          "sha256": "2507a353c3286d079ae6f24494711442ae69fb4afd690df4178fda0fcd5a0820"
        }
      ]
    },
    {
      "id": "workflow-harness-lite",
      "origin": {"repo": "HarperZ9/workflow-harness-lite", "path": ""},
      "visibility": "public-github-remote",
      "lane": "workflow-harness",
      "host_flagships": ["forum.ledger.summary", "telos.loop.ledger", "crucible.assess"],
      "value": "Small harness candidate for repeatable local workflow sessions, approvals, and result capture.",
      "risk_boundary": "Harness exports should be synthetic or redacted and must not serialize private operator state by default.",
      "first_action": "Add a Telos session-export fixture that joins ledger entries to action receipts.",
      "receipts": [
        {
          "repo": "HarperZ9/workflow-harness-lite", "commit": "96d296f7dbe0d845ec916e9d9b71727f056d0715", "path": "README.md",
          "sha256": "2fa566ef4456fda4e783e4ab7c8399c7730c3cfd3a0a83a9717aad688526d1d8"
        }
      ]
    },
    {
      "id": "accountable-engine",
      "origin": {"repo": "HarperZ9/accountable-engine", "path": ""},
      "visibility": "public-github-remote",
      "lane": "accountability-substrate",
      "host_flagships": ["telos.action.receipt", "telos.loop.ledger", "crucible.assess", "forum.ledger.summary"],
      "value": "Evidence-first accountability substrate for proof-before-trust workflows, human/model calibration, and receipt-gated work claims.",
      "risk_boundary": "Promote mechanisms and fixtures only; do not convert personal reflective prose into runtime policy or hidden authority.",
      "first_action": "Extract a minimal done-claim receipt schema and join it to Telos action receipts plus Crucible verdicts.",
      "receipts": [
        {
          "repo": "HarperZ9/accountable-engine", "commit": "ec11a91a0bb6e1138b612a6bfbe4d5a1aa1aac51", "path": "README.md",
          "sha256": "f00f63cd2087eb4dd743236e4ab5fa552e705db0913895d6fdac58d75ef238dc"
        }
      ]
    },
    {
      "id": "accountable-surface",
      "origin": {"repo": "HarperZ9/accountable-surface", "path": ""},
      "visibility": "public-github-remote",
      "lane": "witnessed-action-surface",
      "host_flagships": ["telos.action.receipt", "telos.loop.ledger", "gather.docs", "crucible.assess"],
      "value": "Witnessed perception, pre-execution gate, durable memory, and verify-after-act surface for accountable model operation.",
      "risk_boundary": "Perception and gates are adapter contracts; hosts must not treat witnessed observations as self-authorization.",
      "first_action": "Map perceive-gate-act-verify-witness records onto Telos proposed/admission/execution/review receipt stages.",
      "receipts": [
        {
          "repo": "HarperZ9/accountable-surface", "commit": "154248f45743fe9e66042d8c9e3ccd15d4d8e189", "path": "README.md",
          "sha256": "efdd2b24cc8fa92e315afe582d8d32c641a3c11ad85fd2153e25a6fa9a1064ec"
        }
      ]
    },
    {
      "id": "anomaly-kernels",
      "origin": {"repo": "HarperZ9/anomaly-kernels", "path": ""},
      "visibility": "public-github-remote",
      "lane": "telemetry-anomaly-kernels",
      "host_flagships": ["telos.objective.monitor", "crucible.measurement_gate", "index.context.envelope"],
      "value": "C++23 anomaly detection kernels for baselines, robust scoring, and temporal alert correlation in telemetry quality gates.",
      "risk_boundary": "Analytics library only; no execution, intrusion, credential, or response automation primitives are exposed through Telos.",
      "first_action": "Add a synthetic objective-monitor fixture that emits baseline and anomaly-score packets for Crucible measurement gates.",
      "receipts": [
        {
          "repo": "HarperZ9/anomaly-kernels", "commit": "9f6efea1b0d83244eb80150507986d8e3aab8f7d", "path": "README.md",
          "sha256": "5f6b9e9a3df55a607cfe0dd995fdb6c86d299c9b83faf7980216dae4b9658132"
        }
      ]
    },
    {
      "id": "signal-kernels",
      "origin": {"repo": "HarperZ9/signal-kernels", "path": ""},
      "visibility": "public-github-remote",
      "lane": "scientific-signal-kernels",
      "host_flagships": ["telos.measurement.layers", "telos.objective.monitor", "crucible.measurement_gate"],
      "value": "Header-only C++23 signal and information-theory library for entropy, transfer information, divergences, forecasting, change-points, and graph curvature.",
      "risk_boundary": "Deterministic analytics only; generated measurements must carry units, input hashes, and bounded fixture data.",
      "first_action": "Define Telos signal-measurement packets for entropy and change-point fixtures before runtime integration.",
      "receipts": [
        {
          "repo": "HarperZ9/signal-kernels", "commit": "d8e29613fb0382426262d48c67841186041ccf57", "path": "README.md",
          "sha256": "d620d0acd9fc50352a2931b82ace9d10e30f86b9ea5317cc41dc956f3241ee99"
        }
      ]
    },
    {
      "id": "rewardspy",
      "origin": {"repo": "HarperZ9/rewardspy", "path": ""},
      "visibility": "public-github-remote",
      "lane": "proxy-objective-observability",
      "host_flagships": ["telos.objective.monitor", "crucible.assess", "forum.ledger.summary"],
      "value": "Reward-function observability concept for catching proxy optimization and reward hacking patterns before they masquerade as progress.",
      "risk_boundary": "Treat as observability inspiration and fork-local code until upstream license, divergence, and attribution are reviewed for each imported primitive.",
      "first_action": "Build a Telos objective-monitor fixture that contrasts proxy score movement with independent quality verdicts.",
      "receipts": [
        {
          "repo": "HarperZ9/rewardspy", "commit": null, "path": "README.md",
          "sha256": "8bc8ebd669407465f4d3961df89eff2f5e4caa0e2276ec1f502d5f1700defd73"
        }
      ]
    }
  ],
  "private_local_tranches": [
    {
      "lane": "io-membrane-and-redaction",
      "value": "Private/local IO guardrails and redaction tools should feed Gather, Index, and Telos safe IO adapters after scrubbed synthetic fixtures exist.",
      "public_boundary": "Do not publish raw IO payloads, transform tables, local policy state, or private paths."
    },
    {
      "lane": "release-proof-and-assurance",
      "value": "Private/local release assurance tools should feed Crucible release gates and Repo Proof Index style proof packets.",
      "public_boundary": "Do not publish private proof artifacts; treat them as attestations and publish only schemas, synthetic fixtures, and redacted receipts."
    },
    {
      "lane": "sensor-event-layer",
      "value": "Private/local sensorium tools should feed Telos measurement and event packet schemas.",
      "public_boundary": "Do not publish raw sensor payloads; emit abstract event schemas and sample synthetic events only."
    },
    {
      "lane": "agent-audit-and-governance",
      "value": "Private/local agent audit tools should feed Forum ledger summaries, Crucible review, and Telos loop ledgers.",
      "public_boundary": "No agent transcript bodies or secret-bearing audit reports in public samples."
    },
    {
      "lane": "graphics-composition-and-assets",
      "value": "Private/local graphics, rendering, and composition repos should feed the creative engine after asset/license provenance checks.",
      "public_boundary": "No third-party assets, purchased fonts, proprietary shader payloads, or unlicensed media may be committed."
    }
  ],
  "next_actions": [
    "Keep the active 13-tool revival registry for candidates with immediate flagship host contracts.",
    "Promote second-level candidates into the registry only after a fixture or adapter contract exists.",
    "Create ignored local packets for private/local candidate details and never publish raw private viability notes.",
    "Use Crucible to turn the first adapter claim for each lane into MATCH, DRIFT, or UNVERIFIABLE."
  ]
}