Invited developer preview · Implementation access is required. Request reviewed access.
Owner setup and restart inspection
Agentic Agreements Protocol · existing synthetic bilateral /0.2 custody · explicit owner commands.
The owner can recover the exact role commands and inspect missing or changed setup after restart. The inspector reads private files inside the owner process and returns only public identities, checked settings and fixed diagnostic codes. Give the agent this status output; keep signing configurations private.
Inspect the retained demo
Use the original absolute directory recorded at creation. Paths containing symbolic links are refused, including parent components. The directory must belong to the current user and exclude group/other access; custody, manifest and database files must be private regular files with one hard link.
python -m covenant_agent.demo_setup --inspect \ --directory /OWNER_SELECTED_EXISTING_DEMO
To compare with an authority pin separately retained by the owner, add --expected-authority OWNER_RETAINED_64_CHARACTER_HEX_PIN. The local manifest alone checks consistency; it is not an independent trust credential.
Successful inspection exits zero and returns READY_FOR_SYNTHETIC_HOST_LAUNCH, the exact currently installed interpreter and separate host arguments. A blocked inspection exits one and returns OWNER_ACTION_REQUIRED with named components, fixed error codes and next steps. Both return JSON on standard output. Inspection does not launch hosts, sign an agreement, create files, install a provider, migrate storage, restore funds or clean up unknown files.
Read the evidence
| Component | What is checked | Owner response to a blocker |
|---|---|---|
| Directory and manifest | Current owner, private permissions, no symlink traversal, generated demo format, exact location and distinct role identities. | Use the original directory and original retained manifest. A moved directory requires explicit owner reconciliation of its absolute paths. Do not replace missing custody by rerunning creation into existing state. |
| Buyer, seller, resolver and appeal hosts | Private one-key files; key-derived identity matches the role; current host version; /0.2 profile; sandbox mode; original reference database path and clock. Extra configuration fields are refused. | Codes identify missing files, permissions, configuration fields/version/profile/provider path, identity or clock mismatch. Inspect the named private file locally. Restore only from retained custody; an intentionally customized host needs its own owner review. |
| Reference authority | Private SQLite snapshot, expected storage shape, metadata authority pin and optional separately retained pin. No balance or receipt observation is performed. | Close active writers and retry. Active journal/WAL files, malformed storage and databases over 32 MiB are refused. Retain unknown files for owner review. Inspection does not reconstruct or migrate them. |
| Snapshot | Files and directory are checked again for changes during inspection. | Stop writers and inspect again. This is point-in-time local evidence; files can change later. |
Launch only the selected role hosts from a successful response, then discover their actual tool schemas. host_liveness=NOT_CHECKED and payment_verified=false remain explicit. Use the recipient host to observe a retained settlement independently. Preserve original envelopes and requests when recovering a lost reply.
SANDBOX_FIXED means the configured clock does not advance after restart. REAL_LOCAL_TIME uses local time. Inspection compares the manifest and all four configurations; changing a clock is an owner decision that can affect deadlines and requires separate review.
Start a new synthetic example
python -m covenant_agent.demo_setup \ --directory /OWNER_SELECTED_NEW_DIRECTORY --balance 1000
This separate creation command requires a new directory under a trusted existing parent. It creates four one-key private configurations and one funded local reference authority, publishes a key-free manifest, and signs no agreement. All actors and USDC-labelled units are synthetic. The owner controls all four keys in unencrypted private test files. Creation refuses existing directories; it never resets an earlier demo.
Agent handoff and real owner decisions
covenant_agent.owner_setup.handoff() returns a static typed request schema, explicit owner command, checked components and unresolved owner choices. It reads no local paths. The directory is an owner CLI input; an agent discovery request cannot use it to read custody.
Real parties still install their own custody and explicitly adopt their payment provider and authority pins. Production readiness is not assessed by this inspector. It supports the generated synthetic demo only; it is not a general private-purchase launcher, custody importer, permission repairer or production provider installer.
The native principal-policy system needs its own configured native host, current scoped live grant, policy and adopted execution providers. A principal template or native grant does not authorize the separate bilateral work-order host. Bilateral buyer/seller/reviewer roles must still adopt the exact order and use the authority checks of that host. Setup status grants neither mandate authority nor payment permission.
Signed work and recipient observation. No real money, external identity, running service or production deployment is established by these local checks.
Delegated native authority
Use the installed task guide with --task principal-authority, then call covenant_principal with {"action":"describe","parameters":{}}. It supplies complete drafting and snapshot-review schemas. The owner must supply the actual confirmed GIVE and PERMIT identifiers and sign the exact policy. The new review action checks supplied state; it does not verify snapshot provenance or freshness. The older authorize action is a missing-grant demonstration, and kill returns a plan. None submit a transaction or authorize the separate bilateral host.