Published repair
Not loaded
GitLab merge request evidence
/Release assurance
LOCAL CONTROL ROOM
BEYOND THE GREEN PIPELINE
Ship with evidence.
Recover with
confidence.
A passing build is a starting point. Catch broken business outcomes, inspect the agent’s repair, and make the final call with proof.
RECOVERY PROTOCOL01 — 04
THE TRUST LAYERProof before promotion.Agent prepares. You decide.
01 Detect02 Investigate03 Verify04 Review
SUPERVISED BY DESIGN◈
Independent validation
Not loaded
Read-only Docker stages
Production deployment
Checking environment…
Deployment environment
02 / THE ACTUAL AGENT RUN
Every repair. Receipts included.
Verification has not been started from this dashboard.
No repair evidence yet. Start a verification to collect and inspect the published repair.
Repair candidate
Draft- Commit
- Source → target
- Collected
Evidence gates
INDEPENDENT CHECKS
HUMAN REVIEW
Review this exact evidence bundle
This records a local decision. It does not approve the GitLab MR, merge code, or deploy.
YOUR INPUT. REAL HTTP RESULTS.
NO SIGN-IN NEEDEDChallenge the repair. Try to break it.
Enter your own values. Compare the running application with an independent browser calculation and a deliberately wrong rounding rule.
A separate calculation using the stated rounding rule.
Returned by a fresh HTTP request to this service.
Rounds half cents to even. This comparison does not run an agent.
Calculation checks use synthetic amounts only. Inspect the real Duo repair and CI evidence separately. One passing input is not proof of correctness.
CONNECTED EVIDENCE
DATED RECORDFollow the incident. Inspect the proof.
03 / THE TRUST LAYER
SNAPSHOT
Don’t trust the patch. Try to break it.
Canaries catch the silent failure, Duo proposes the fix, an adversarial verifier tries to break it, and only evidence-backed patches reach a human.
No trust report has been generated for this build.
A plausible fix meets a counterexample.
Controlled local experiment. These patches are prepared by this repository, not claimed as live Duo output.
04 / INTERACTIVE LOCAL LAB
SYNTHETIC TRANSACTIONS
Break the checkout. See the difference.
Evaluate a candidate
Choose a fixture to exercise the local controller. This does not launch CI, invoke Duo, or route cloud traffic.
Local active revision
Loading…
Customer checkout
LIVE LOCAL REQUEST
Subtotal
$100.00
Loyalty discount
20%
Tax on discounted subtotal
10%
Charged by active checkout
—
Independent contract: $88.00
Candidate contract results
Run a candidate to inspect observed and expected amounts.
05 / EXPLAIN EVERY DECISION