# Agent i Frontier — runtime readiness

## Implemented in this workspace

- Accessible responsive Frontier page, high contrast, text scaling, explicit read-aloud, keyboard focus shortcut and textual node selection.
- Private persistent proposals, never authorized or dispatched.
- Authenticated same-origin SSE status route; HOLD until an actual producer is connected.
- Strict observation parser; missing metrics remain null, malformed/stale data clears the view, only expert nodes count as experts, edges must refer to reported nodes.
- Schema-valid observations do not establish H1 or independent verification.

## Source review

Uploaded source: Pasted markdown(20260828-202527).md, preserved in docs/frontier-source-requirements.md.
STRMKRD/i PR #16 was open, unmerged, head 053049012597ba8634a481944cabe7b553f31206 when inspected 2026-08-28. No upstream repository was changed or merged.

The supplied snippets contain fixed cluster counts, fixed energy values, generated mock output, absent-value-to-zero conversions, localhost production URLs, malformed JSX/YAML and an invalid container image reference. These were not installed as runtime code.

## Actual binding prerequisites — BLOCKED

Provide the deployed Agent i service identity and authenticated endpoint, its pinned implementation revision, model manifest/checkpoint location, independently trusted verifier key and execution receipt contract. The current Site has no such binding. Uploaded model-manifest files and promotion_gate=true are declarations, not trusted promotion evidence.

Verify the full checkpoint and manifest, parent/child lineage, held-out evaluation and parameter-change gates; bind each observation to a specific run and checkpoint. Require source authentication, timestamps, sequence/replay checks, bounded frames, tenant isolation and explicit metric units. Stream connection opening alone must never establish LIVE or H1.

## Deployment branches from the request

| Branch | Required work before activation | Current state |
|---|---|---|
| Native shared-memory producer | Real runtime writes, atomic snapshots, file permissions, freshness, schema and checkpoint binding | Not connected |
| FastAPI / SSE gateway | Scoped authentication, bounded streams, cancellation, tenant separation and private transport | Not deployed |
| Crash diagnostics | Structured redacted logs, rotation and bounded disk usage | Not installed |
| Systemd services | Dedicated unprivileged user, constrained filesystem, restart limits; no root realtime priority 99 | Not installed |
| Triton / CUDA kernels | Actual GPU, matching runtime, numerical reference, odd-shape tests, gradients if training, profiling | Not compiled or benchmarked |
| Container / DOCR delivery | Real registry/image, pinned build inputs, secret configuration and approved target | Not configured |
| GitHub Actions | Valid runs-on, pinned actions, least privilege, review-gated deployment | No workflow activated |
| Prometheus / Grafana | Real exporter, source-labelled metrics, alert thresholds and authenticated access | Not configured |
| NVMe / CUDA allocator | Device inventory, capacity guardrails, recoverability and measured workload | No partitions or host memory changed |
| Independent proof | Trusted signature verifier, anti-replay ledger and complete authorization evidence | HOLD |

Tests exercise software behavior, not physical GPU capacity, native model inference or infrastructure activation. I_SYSTEM_LIVE remains false.