audrey 0.23.1 → 1.0.0

package/docs/paper/browser-launch-plan.json

@@ -0,0 +1,209 @@
+{
+  "schemaVersion": "1.0.0",
+  "suite": "Audrey browser launch plan",
+  "checkedAt": "2026-05-13",
+  "publicationPack": "docs/paper/publication-pack.json",
+  "sources": [
+    {
+      "id": "arxiv-submission-guidelines",
+      "url": "https://info.arxiv.org/help/submit/index.html",
+      "checkedAt": "2026-05-13",
+      "notes": "Use the registered-author user page to start a new submission; verify uploaded files and metadata before final submit."
+    },
+    {
+      "id": "arxiv-category-taxonomy",
+      "url": "https://arxiv.org/category_taxonomy",
+      "checkedAt": "2026-05-13",
+      "notes": "cs.AI covers artificial intelligence; cs.CR covers cryptography and security. Use cs.AI primary and cs.CR secondary only if the final paper framing still matches both."
+    },
+    {
+      "id": "hacker-news-guidelines",
+      "url": "https://news.ycombinator.com/newsguidelines.html",
+      "checkedAt": "2026-05-13",
+      "notes": "Use a neutral title, submit the original source, avoid promotion-first behavior, do not solicit votes or comments, and keep comments human-written."
+    },
+    {
+      "id": "hacker-news-submit",
+      "url": "https://news.ycombinator.com/submit",
+      "checkedAt": "2026-05-13",
+      "notes": "Submission form for title, URL, and optional text/comment after login."
+    },
+    {
+      "id": "reddit-submit-api",
+      "url": "https://www.reddit.com/dev/api/",
+      "checkedAt": "2026-05-13",
+      "notes": "Reddit submit supports link or self posts, titles up to 300 characters, subreddit selection, and captcha fields."
+    },
+    {
+      "id": "reddit-spam-policy",
+      "url": "https://support.reddithelp.com/hc/en-us/articles/360043504051-What-constitutes-spam",
+      "checkedAt": "2026-05-13",
+      "notes": "Avoid repeated, unsolicited, mass, or automation-assisted posting. Check subreddit rules before any self-promotional post."
+    },
+    {
+      "id": "x-web-intent",
+      "url": "https://developer.x.com/en/docs/twitter-for-websites/tweet-button/guides/web-intent",
+      "checkedAt": "2026-05-13",
+      "notes": "Tweet intent supports prefilled text and enforces the 280-character limit across text, URL, hashtags, and via fields."
+    },
+    {
+      "id": "x-counting-characters",
+      "url": "https://docs.x.com/fundamentals/counting-characters",
+      "checkedAt": "2026-05-13",
+      "notes": "X wraps valid URLs with t.co and counts each detected URL as 23 characters, so the publication pack uses reservedUrlChars: 24 including a separator."
+    },
+    {
+      "id": "linkedin-share-help",
+      "url": "https://www.linkedin.com/help/linkedin/answer/a525301/sharing-articles-or-links",
+      "checkedAt": "2026-05-13",
+      "notes": "Use the LinkedIn home feed share box; posts can include text up to 3000 characters plus a URL preview."
+    }
+  ],
+  "preflightCommands": [
+    "npm run release:gate:paper",
+    "npm run paper:publication-pack",
+    "npm run paper:bundle:verify",
+    "npm run paper:launch-plan"
+  ],
+  "targets": [
+    {
+      "id": "arxiv-preprint",
+      "platform": "arxiv",
+      "label": "arXiv preprint submission",
+      "order": 1,
+      "url": "https://arxiv.org/user/",
+      "status": "blocked-until-login",
+      "authRequired": true,
+      "humanRequired": true,
+      "captchaPossible": false,
+      "manualRuleCheckRequired": true,
+      "contentEntryIds": ["arxiv-title", "arxiv-abstract"],
+      "artifactRefs": [
+        "docs/paper/output/arxiv/",
+        "docs/paper/audrey-paper-v1.md",
+        "docs/paper/references.bib",
+        "docs/paper/output/submission-bundle/"
+      ],
+      "sourceRefs": ["arxiv-submission-guidelines", "arxiv-category-taxonomy"],
+      "operatorChecks": [
+        "Confirm the logged-in account is a registered arXiv author and has endorsement if arXiv requests it.",
+        "Convert the Markdown paper to the chosen arXiv upload format before final submit.",
+        "Use cs.AI as the primary category and cs.CR as secondary only after reviewing the final arXiv category screen.",
+        "Preview the compiled PDF and metadata before pressing the final submit button."
+      ],
+      "postSubmitChecks": [
+        "Record the arXiv identifier or pending submission ID.",
+        "Update launch links in the publication copy before posting to social channels."
+      ]
+    },
+    {
+      "id": "hacker-news-show",
+      "platform": "hacker-news",
+      "label": "Hacker News Show HN submission",
+      "order": 2,
+      "url": "https://news.ycombinator.com/submit",
+      "status": "blocked-until-artifact-url",
+      "authRequired": true,
+      "humanRequired": true,
+      "captchaPossible": false,
+      "manualRuleCheckRequired": true,
+      "contentEntryIds": ["hacker-news-title", "hacker-news-comment"],
+      "artifactRefs": [
+        "docs/paper/publication-pack.json",
+        "README.md",
+        "docs/paper/output/submission-bundle/"
+      ],
+      "sourceRefs": ["hacker-news-guidelines", "hacker-news-submit"],
+      "operatorChecks": [
+        "Use the original public URL after the paper or repo release is live.",
+        "Keep the title neutral and at or below the Hacker News 80-character title target.",
+        "Do not solicit votes, comments, or submissions from anyone.",
+        "Write any follow-up comments manually; do not paste generated replies."
+      ],
+      "postSubmitChecks": [
+        "Record the HN item URL.",
+        "Stay available to answer questions in the thread without marketing language."
+      ]
+    },
+    {
+      "id": "reddit-discussion",
+      "platform": "reddit",
+      "label": "Reddit discussion post",
+      "order": 3,
+      "url": "https://www.reddit.com/submit",
+      "status": "blocked-until-login",
+      "authRequired": true,
+      "humanRequired": true,
+      "captchaPossible": true,
+      "manualRuleCheckRequired": true,
+      "contentEntryIds": ["reddit-title", "reddit-body"],
+      "artifactRefs": [
+        "docs/paper/publication-pack.json",
+        "docs/paper/output/submission-bundle/"
+      ],
+      "sourceRefs": ["reddit-submit-api", "reddit-spam-policy"],
+      "operatorChecks": [
+        "Choose exactly one subreddit after reading that community's current rules and self-promotion policy in the browser.",
+        "Do not cross-post the same launch copy to multiple subreddits.",
+        "Disclose author affiliation plainly if the chosen subreddit allows the post.",
+        "Handle any captcha or subreddit flair requirement manually."
+      ],
+      "postSubmitChecks": [
+        "Record the Reddit post URL and selected subreddit.",
+        "If removed, do not repost without moderator guidance or materially different context."
+      ]
+    },
+    {
+      "id": "x-launch-thread",
+      "platform": "x",
+      "label": "X launch thread",
+      "order": 4,
+      "url": "https://twitter.com/intent/tweet",
+      "status": "blocked-until-artifact-url",
+      "authRequired": true,
+      "humanRequired": true,
+      "captchaPossible": true,
+      "manualRuleCheckRequired": false,
+      "contentEntryIds": ["x-post-1", "x-post-2"],
+      "artifactRefs": [
+        "docs/paper/publication-pack.json"
+      ],
+      "sourceRefs": ["x-web-intent", "x-counting-characters"],
+      "operatorChecks": [
+        "Use the publication-pack URL reserve before appending the public paper or repo URL.",
+        "Post the second entry as a human-authored reply, not as an automated batch.",
+        "Do not claim external Mem0/Zep scores unless strict evidence has passed."
+      ],
+      "postSubmitChecks": [
+        "Record the first post URL.",
+        "Check that the thread links to the final public artifact, not a local path."
+      ]
+    },
+    {
+      "id": "linkedin-launch-post",
+      "platform": "linkedin",
+      "label": "LinkedIn launch post",
+      "order": 5,
+      "url": "https://www.linkedin.com/feed/",
+      "status": "blocked-until-artifact-url",
+      "authRequired": true,
+      "humanRequired": true,
+      "captchaPossible": true,
+      "manualRuleCheckRequired": false,
+      "contentEntryIds": ["linkedin-post"],
+      "artifactRefs": [
+        "docs/paper/publication-pack.json"
+      ],
+      "sourceRefs": ["linkedin-share-help"],
+      "operatorChecks": [
+        "Paste the final public URL into the share box and wait for the link preview.",
+        "Keep the post within LinkedIn's 3000-character text limit.",
+        "Do not claim external Mem0/Zep scores unless strict evidence has passed."
+      ],
+      "postSubmitChecks": [
+        "Record the LinkedIn post URL.",
+        "Verify the preview points at the public paper or repo URL."
+      ]
+    }
+  ]
+}

package/docs/paper/browser-launch-plan.schema.json

@@ -0,0 +1,100 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://audrey-memory.org/schemas/audrey-browser-launch-plan.schema.json",
+  "title": "Audrey Browser Launch Plan",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "suite", "checkedAt", "publicationPack", "sources", "preflightCommands", "targets"],
+  "properties": {
+    "schemaVersion": { "const": "1.0.0" },
+    "suite": { "const": "Audrey browser launch plan" },
+    "checkedAt": { "type": "string", "minLength": 1 },
+    "publicationPack": { "type": "string", "minLength": 1 },
+    "sources": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/source" }
+    },
+    "preflightCommands": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "targets": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/target" }
+    }
+  },
+  "$defs": {
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "url", "checkedAt", "notes"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+        "url": { "type": "string", "pattern": "^https://.+" },
+        "checkedAt": { "type": "string", "minLength": 1 },
+        "notes": { "type": "string", "minLength": 1 }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "platform",
+        "label",
+        "order",
+        "url",
+        "status",
+        "authRequired",
+        "humanRequired",
+        "captchaPossible",
+        "manualRuleCheckRequired",
+        "contentEntryIds",
+        "artifactRefs",
+        "sourceRefs",
+        "operatorChecks",
+        "postSubmitChecks"
+      ],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+        "platform": { "enum": ["arxiv", "hacker-news", "linkedin", "reddit", "x"] },
+        "label": { "type": "string", "minLength": 1 },
+        "order": { "type": "integer", "minimum": 1 },
+        "url": { "type": "string", "pattern": "^https://.+" },
+        "status": { "enum": ["ready-manual", "blocked-until-artifact-url", "blocked-until-login"] },
+        "authRequired": { "type": "boolean" },
+        "humanRequired": { "type": "boolean" },
+        "captchaPossible": { "type": "boolean" },
+        "manualRuleCheckRequired": { "type": "boolean" },
+        "contentEntryIds": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" }
+        },
+        "artifactRefs": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "sourceRefs": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" }
+        },
+        "operatorChecks": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "postSubmitChecks": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  }
+}

package/docs/paper/browser-launch-results.json

@@ -0,0 +1,86 @@
+{
+  "schemaVersion": "1.0.0",
+  "suite": "Audrey browser launch results",
+  "capturedAt": "2026-05-13",
+  "plan": "docs/paper/browser-launch-plan.json",
+  "targets": [
+    {
+      "id": "arxiv-preprint",
+      "platform": "arxiv",
+      "status": "pending",
+      "publicUrl": null,
+      "artifactUrl": "https://paper-site-r3jdakujn-evilanders-projects.vercel.app",
+      "submittedAt": null,
+      "operatorVerified": false,
+      "manualRuleCheckCompleted": true,
+      "postSubmitChecksCompleted": [],
+      "blocker": "arXiv accepted the paper as submit/7591154, but the account page currently shows status on hold, so no public arXiv identifier or public abstract URL has been assigned yet.",
+      "notes": "arXiv support confirmed the active username is Evilands and suspended the duplicate account. The active account was recovered, START NEW SUBMISSION appeared, the verified source package was uploaded, arXiv TeX Live 2025 compiled main.tex to a 34-page PDF successfully, the PDF and HTML previews were opened, metadata was saved with primary category cs.AI and cross-list cs.CR, and the article was submitted on 2026-05-13. A later account refresh still showed submit/7591154 under the active Evilands account with status on hold, so a support follow-up was sent on 2026-05-13 asking whether any author-side action remains or whether it is waiting on arXiv review/moderation. Record the final public arXiv URL after moderation and announcement."
+    },
+    {
+      "id": "hacker-news-show",
+      "platform": "hacker-news",
+      "status": "submitted",
+      "publicUrl": "https://news.ycombinator.com/item?id=48123428",
+      "artifactUrl": "https://paper-site-r3jdakujn-evilanders-projects.vercel.app",
+      "submittedAt": "2026-05-13T10:44:16-05:00",
+      "operatorVerified": true,
+      "manualRuleCheckCompleted": true,
+      "postSubmitChecksCompleted": [
+        "Record the HN item URL.",
+        "Stay available to answer questions in the thread without marketing language.",
+        "Record the follow-up HN source/repo item URL."
+      ],
+      "blocker": null,
+      "notes": "The logged-in Show HN route returned https://news.ycombinator.com/showlim and stated that Show HN submissions are temporarily restricted for this account. A neutral normal HN link submission was made instead through https://news.ycombinator.com/submit with title Audrey: Local-first pre-action memory control for AI agents and URL https://paper-site-r3jdakujn-evilanders-projects.vercel.app/. HN newest showed item 48123428 as 1 point by evilanders with edit/delete controls, confirming account ownership of the submission. The original item exposed no comment box and the HN edit screen only allowed title editing, so a follow-up source submission was posted with title Audrey: local-first memory guard for AI agents (source) and URL https://github.com/Evilander/Audrey at https://news.ycombinator.com/item?id=48123903."
+    },
+    {
+      "id": "reddit-discussion",
+      "platform": "reddit",
+      "status": "submitted",
+      "publicUrl": "https://www.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/",
+      "artifactUrl": "https://paper-site-r3jdakujn-evilanders-projects.vercel.app",
+      "submittedAt": "2026-05-13T10:40:46-05:00",
+      "operatorVerified": true,
+      "manualRuleCheckCompleted": true,
+      "postSubmitChecksCompleted": [
+        "Record the Reddit post URL and selected subreddit.",
+        "If removed, do not repost without moderator guidance or materially different context.",
+        "Verify the original Reddit post body includes the GitHub repo URL.",
+        "Verify every Audrey-specific Reddit marketing post, comment, and reply contains the GitHub repo URL."
+      ],
+      "blocker": null,
+      "notes": "Submitted to r/ClaudeCode with Showcase flair after reading its current rules. The post discloses builder affiliation and cost, links the public paper/artifact preview plus the GitHub repo URL https://github.com/Evilander/Audrey, and avoids unsupported external Mem0/Zep score claims. A question about Audrey versus PreToolUse plus permissions.deny was answered with the explicit split between static deny rules and learned/contextual memory guards; that parent reply was edited to include the GitHub repo URL (https://old.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/olla7zf/). A follow-up question about hook-rule conversion, semantic false positives, and blocked-action UX was answered with local GuardBench scope boundaries and the GitHub repo URL (https://old.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/olln5u3/). Moriarty/Dangerous-Jelly2309's GuardBench expansion comment was answered with the repo URL and a priority order for retry-amplification, wrong-environment mutation, author-contradiction, undo-prior-fix, and schema-evolution-blindness (https://old.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/olloc0z/). A later Moriarty follow-up about MILP timing, asymmetric false-block/false-allow costs, and structural recurrence under disguise was answered with the GitHub repo URL and GuardBench v2 framing (https://old.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/olmj11t/). Earlier r/LocalLLaMA submission was removed by AutoModerator for insufficient subreddit karma (https://www.reddit.com/r/LocalLLaMA/comments/1tc0i6a/audrey_a_localfirst_memory_firewall_for_agents/), so no duplicate LocalLLaMA repost was attempted. Follow-up participation was posted without Audrey links or promo in r/LocalLLaMA (https://old.reddit.com/r/LocalLLaMA/comments/1tc1d3c/is_it_worth_getting_a_5090_for_my_needs/olkulwp/), r/ClaudeAI (https://old.reddit.com/r/ClaudeAI/comments/1tc1o81/i_built_skills_curator_a_contextaware_claude/olkuwsi/), r/ChatGPT (https://old.reddit.com/r/ChatGPT/comments/1tbfzs6/ive_been_customizing_codex_to_do_automated/olkv6fd/), r/codex (https://old.reddit.com/r/codex/comments/1tbyd5c/most_vibecoders_have_poor_project_management/olkvjy3/), r/VibeCodingSaaS (https://old.reddit.com/r/VibeCodingSaaS/comments/1tbf0x7/every_session_ends_with_a_10layer_audit_heres/olkvu31/), r/ClaudeCode memory/guard threads (https://old.reddit.com/r/ClaudeCode/comments/1tc1h7w/are_you_guys_actually_using_memory/olkz22s/ and https://old.reddit.com/r/ClaudeCode/comments/1tc2k1z/one_thumbsdown_stopped_my_claude_code_agent_from/oll34lg/), and an r/artificial agent-security thread (https://old.reddit.com/r/artificial/comments/1tc1570/built_a_tool_that_stops_ai_agents_from_being/oll6eke/). A later r/VibeCodingSaaS memory-freshness discussion explicitly mentioning Audrey was answered with the GitHub repo URL and the same pre-action/staleness framing (https://old.reddit.com/r/VibeCodingSaaS/comments/1tbf0x7/every_session_ends_with_a_10layer_audit_heres/olmj3zt/). An additional VibeCodingSaaS Chrono/time-confidence reply was answered with the GitHub repo URL (https://old.reddit.com/r/VibeCodingSaaS/comments/1tbf0x7/every_session_ends_with_a_10layer_audit_heres/olnft5b/). A later ClaudeCode Moriarty follow-up was answered with the GitHub repo URL (https://old.reddit.com/r/ClaudeCode/comments/1tc3dhb/audrey_localfirst_memory_guard_for_claude_code/olnfzzl/)."
+    },
+    {
+      "id": "x-launch-thread",
+      "platform": "x",
+      "status": "pending",
+      "publicUrl": null,
+      "artifactUrl": "https://paper-site-r3jdakujn-evilanders-projects.vercel.app",
+      "submittedAt": null,
+      "operatorVerified": false,
+      "manualRuleCheckCompleted": false,
+      "postSubmitChecksCompleted": [],
+      "blocker": "Awaiting logged-in X posting; this browser session was confirmed for arXiv, HN, Reddit, and LinkedIn, but an attempt to open X compose redirected to the X login flow instead of a logged-in composer.",
+      "notes": "Public artifact URL is available; shorten the first post before posting because the current publication-pack X first post is 282/280 characters after URL reserve. Browser verification on 2026-05-13 reached https://x.com/i/flow/login?redirect_after_login=%2Fcompose%2Fpost, so no X launch thread was submitted."
+    },
+    {
+      "id": "linkedin-launch-post",
+      "platform": "linkedin",
+      "status": "submitted",
+      "publicUrl": "https://www.linkedin.com/feed/update/urn:li:share:7460326224108638208/",
+      "artifactUrl": "https://paper-site-r3jdakujn-evilanders-projects.vercel.app",
+      "submittedAt": "2026-05-13T08:53:01-05:00",
+      "operatorVerified": true,
+      "manualRuleCheckCompleted": false,
+      "postSubmitChecksCompleted": [
+        "Record the LinkedIn post URL.",
+        "Verify the preview points at the public paper or repo URL.",
+        "Verify the LinkedIn thread includes the GitHub repo URL."
+      ],
+      "blocker": null,
+      "notes": "LinkedIn reported Post successful and exposes the post at the recorded update URL; the published post contains the Audrey launch text and LinkedIn's shortened outbound link for the public paper URL. A follow-up comment was posted on the same LinkedIn update with the GitHub repo URL https://github.com/Evilander/Audrey."
+    }
+  ]
+}

package/docs/paper/browser-launch-results.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://audrey-memory.org/schemas/audrey-browser-launch-results.schema.json",
+  "title": "Audrey Browser Launch Results",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "suite", "capturedAt", "plan", "targets"],
+  "properties": {
+    "schemaVersion": { "const": "1.0.0" },
+    "suite": { "const": "Audrey browser launch results" },
+    "capturedAt": { "type": "string", "minLength": 1 },
+    "plan": { "type": "string", "minLength": 1 },
+    "targets": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/targetResult" }
+    }
+  },
+  "$defs": {
+    "nullableHttpsUrl": {
+      "anyOf": [
+        { "type": "null" },
+        { "type": "string", "pattern": "^https://.+" }
+      ]
+    },
+    "nullableString": {
+      "anyOf": [
+        { "type": "null" },
+        { "type": "string", "minLength": 1 }
+      ]
+    },
+    "targetResult": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "platform",
+        "status",
+        "publicUrl",
+        "artifactUrl",
+        "submittedAt",
+        "operatorVerified",
+        "manualRuleCheckCompleted",
+        "postSubmitChecksCompleted",
+        "blocker",
+        "notes"
+      ],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+        "platform": { "enum": ["arxiv", "hacker-news", "linkedin", "reddit", "x"] },
+        "status": { "enum": ["pending", "submitted", "skipped", "failed"] },
+        "publicUrl": { "$ref": "#/$defs/nullableHttpsUrl" },
+        "artifactUrl": { "$ref": "#/$defs/nullableHttpsUrl" },
+        "submittedAt": { "$ref": "#/$defs/nullableString" },
+        "operatorVerified": { "type": "boolean" },
+        "manualRuleCheckCompleted": { "type": "boolean" },
+        "postSubmitChecksCompleted": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "blocker": { "$ref": "#/$defs/nullableString" },
+        "notes": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}

package/docs/paper/claim-register.json

@@ -0,0 +1,138 @@
+{
+  "schemaVersion": "1.0.0",
+  "suite": "Audrey paper claim register",
+  "claims": [
+    {
+      "id": "C01",
+      "status": "supported",
+      "claim": "Audrey Guard passes the local Stage-A GuardBench comparative suite without leaking seeded secrets in published artifacts.",
+      "evidence": [
+        "benchmarks/output/guardbench-summary.json",
+        "benchmarks/output/guardbench-raw.json",
+        "docs/paper/evidence-ledger.md#E46",
+        "docs/paper/evidence-ledger.md#E65"
+      ],
+      "artifactChecks": [
+        "guardbench-local-passed",
+        "no-published-secret-leaks"
+      ],
+      "requiredText": [
+        {
+          "path": "README.md",
+          "text": "Latest local result in this checkout: 10/10 scenarios passed"
+        },
+        {
+          "path": "docs/paper/audrey-paper-v1.md",
+          "text": "Local comparative GuardBench reports decision accuracy and full-contract pass rate across all ten scenarios"
+        }
+      ],
+      "forbiddenText": []
+    },
+    {
+      "id": "C02",
+      "status": "pending",
+      "claim": "External Mem0 and Zep GuardBench scores are not reported until credentialed live bundles pass strict evidence verification.",
+      "evidence": [
+        "benchmarks/output/external/guardbench-external-evidence.json",
+        "benchmarks/adapters/registry.json",
+        "docs/paper/evidence-ledger.md#E77",
+        "docs/paper/evidence-ledger.md#E81"
+      ],
+      "artifactChecks": [
+        "adapter-registry-has-mem0-zep",
+        "external-evidence-pending",
+        "paper-stage-boundary-excludes-external-scores"
+      ],
+      "requiredText": [
+        {
+          "path": "docs/paper/audrey-paper-v1.md",
+          "text": "this paper does not report external-system GuardBench scores"
+        },
+        {
+          "path": "docs/paper/SUBMISSION_README.md",
+          "text": "live Mem0 run is still pending"
+        },
+        {
+          "path": "docs/paper/SUBMISSION_README.md",
+          "text": "live Zep run is still pending"
+        }
+      ],
+      "forbiddenText": [
+        {
+          "path": "docs/paper/audrey-paper-v1.md",
+          "text": "Mem0 Platform passes 10/10"
+        },
+        {
+          "path": "docs/paper/audrey-paper-v1.md",
+          "text": "Zep Cloud passes 10/10"
+        },
+        {
+          "path": "README.md",
+          "text": "external-system scores are reported"
+        }
+      ]
+    },
+    {
+      "id": "C03",
+      "status": "supported",
+      "claim": "The public GuardBench artifact set has a one-command verifier that covers registry, modules, self-test, artifacts, bundle, external readiness, external evidence, and leaderboard.",
+      "evidence": [
+        "benchmarks/verify-publication-artifacts.mjs",
+        "benchmarks/schemas/guardbench-publication-verification.schema.json",
+        "docs/paper/evidence-ledger.md#E75",
+        "docs/paper/evidence-ledger.md#E80",
+        "docs/paper/evidence-ledger.md#E81"
+      ],
+      "artifactChecks": [
+        "publication-verifier-ok"
+      ],
+      "requiredText": [
+        {
+          "path": "README.md",
+          "text": "bench:guard:publication:verify"
+        },
+        {
+          "path": "docs/paper/audrey-paper-v1.md",
+          "text": "external evidence verification report"
+        }
+      ],
+      "forbiddenText": []
+    },
+    {
+      "id": "C04",
+      "status": "supported",
+      "claim": "Published benchmark artifacts and external evidence reports do not contain seeded raw secrets or runtime credential values.",
+      "evidence": [
+        "benchmarks/output/guardbench-summary.json",
+        "benchmarks/output/guardbench-raw.json",
+        "benchmarks/output/external/guardbench-external-evidence.json",
+        "docs/paper/evidence-ledger.md#E65",
+        "docs/paper/evidence-ledger.md#E81"
+      ],
+      "artifactChecks": [
+        "no-published-secret-leaks",
+        "external-evidence-no-secrets"
+      ],
+      "requiredText": [
+        {
+          "path": "README.md",
+          "text": "0 published artifact leaks"
+        },
+        {
+          "path": "docs/paper/SUBMISSION_README.md",
+          "text": "runtime credential leaks"
+        }
+      ],
+      "forbiddenText": [
+        {
+          "path": "benchmarks/output/guardbench-summary.json",
+          "text": "sk-guardbench-secret-0000000000000000000000000000"
+        },
+        {
+          "path": "benchmarks/output/external/guardbench-external-evidence.json",
+          "text": "runtime-key"
+        }
+      ]
+    }
+  ]
+}