Promoted
Act
Bounded work survives its oracle and earns a scoped promotion decision.
Custody for consequential agent work
Let agents attempt consequential work.Make proof decide what survives.
Krucible contains the attempt, exposes it to real rejection authority, and preserves a record precise enough for a stranger to inspect what was promoted, refused, held, or quarantined.
Evidence chamberOracle live
authoritybounded
worldrecorded
attemptcontained
criticindependent
DISPOSITION
Promotion is earned, narrow, and revocable.
One boundary. Four honest outcomes.
A green summary is not the product.
The product is separation: what may advance, what must stop, what still belongs to a human, and what cannot leave containment. Failure remains visible because a system that never refuses has not proved that its boundary works.
Rejected
Refuse
An independent oracle catches the defect and the system gives authority back.
Human-gated
Hold
Policy, access, or ambiguity stays with an accountable person by design.
Quarantined
Contain
A dirty environment or unsafe attempt is preserved without entering the trusted lane.
How authority gets earned
Capability can move quickly. Trust still needs custody.
01
Bound the attempt
Name the authority envelope, target world, mission class, budget, and prohibited actions before execution.
02
Strike a real oracle
Compilers, tests, deployments, reviewers, and accountable humans get the power to say no.
03
Preserve the record
Claims remain attached to attempts, evidence, costs, refusals, critics, and the world state that made them true.
04
Earn narrow standing
Repeated proof widens a revocable lane. A later rejection can close it immediately.
What the first proof showed
Refusal is evidence that the boundary is real.
In a synthetic Salesforce laboratory proof, Krucible kept three materially different outcomes separate. The claim is bounded to that demonstration—not generalized autonomy or production trust.
PROVED
A bounded Apex change survived independent review
The promoted result remained attached to its run, oracle evidence, and promotion decision.
PROVED
A planted defect was refused and contained
The rejection immediately revoked the earned automation lane instead of hiding the failure.
PROVED
A permission expansion stayed human-gated
Standing in one automation lane did not confer authority over security or policy.
The operating thesis