Phase 3: make the admission demo self-verifying

[johnnygreco]

Objective

Make the real example self-verifying and bring user-facing/architecture documentation and bridge encoding in line with the implemented admission model.

Context

• Tracker: GitHub goal delivery: close Pi attested-admission gaps #50
• Depends on whole-context binding. No mocks or simulated sessions.

Scope

• Demo verify cases: denied prompt/history invariant, redacted prompt, raw provider request without handle, stock Pi without runtime extension, and best-effort tool cases.
• Add content-safe JSON logging sufficient to assert negative-control reason codes.
• Stop exposing readiness metadata to workload.
• Coordinate bridge JSON base64 request/replacement bodies across Research runtime adapter and OpenShell bridge.
• Add Egress Gate admission architecture page and update README/current-scope/limits/denial/lifetime/dedicated-instance docs.
• Correct OpenShell middleware and sandbox architecture docs.
• Non-goals: caller tokens (Phase 4), mock runners, production deployment automation.
• Dependencies: Phase 2.

Acceptance Criteria

• ./demo.sh verify exercises real sandbox/Pi behavior and prints one result per case. Implementation is complete; execution is externally blocked by the absent prepared ignored runtime/CLI, .env, JSON log, and provider credential, as recorded in the completion comment and PR Review Record.
• Number-array bridge bodies are gone.
• Docs describe the actual three checkpoints, limits, reason codes, and residual risks.
• Generated documentation mirror is produced through the staging workflow.

Required Validation

Research make check, docs renderer/build, focused OpenShell bridge tests/docs checks, and a real clean demo run when environment/provider access is available.

PR Expectations

Include sanitized verify output or explicitly record the external credential/runtime blocker. No mock fallback.

[johnnygreco]

Phase 3 started after Phase 2 completed review-clean for its documented POC scope.

Repository ownership:

• Research: real demo.sh verify cases, content-safe assertions/logging, runtime base64 bodies, admission architecture/current-scope docs, and the required generated mirror workflow.
• OpenShell: only matching bridge base64 decoding/encoding plus corrections to existing middleware/sandbox docs.
• Pi: unchanged.

POC ceiling remains binding: no mock fallback, readiness endpoint redesign, caller tokens, deployment automation, generalized logging framework, compatibility for number-array bodies, or unrelated documentation cleanup. Verification cases must exercise the real example and may report an explicit external credential/runtime blocker.

[johnnygreco]

Phase 3 implementation and independent review are complete on the existing draft PRs.

• Research PR feat(egress-gate): add attested Pi prompt admission #38 head: b03c8ea
• OpenShell fork PR Add Reachy Mini OpenShell demo project #1 head: f5212b58
• Pi fork PR Add Reachy Mini OpenShell demo project #1 unchanged at c58c59f00

The real verifier, strict base64 bridge contract, content-safe negative-control reason logging, readiness/metadata removal, and current architecture/example documentation are implemented and review-clean. No mocks, legacy number-array compatibility, caller-token work, deployment automation, or logging framework were added.

The only remaining Phase 3 execution limitation is external: this checkout lacks the prepared ignored fork/runtime, .env, JSON log, and provider credential needed to run ./demo.sh verify. The verifier reports that blocker and no mock result was substituted. All code, focused integration, and docs checks passed.

[johnnygreco]

Implementation and head-matched review are complete at final heads Research 0bf33ca, Pi 177b42723, and OpenShell abf1a625. Final panel review is clean with no blocker/high/medium findings.

This issue remains open only for its real-demo acceptance. The current host lacks the prepared ignored Pi/OpenShell workspaces and runtime plus PI_MODEL_API_KEY, EGRESS_GATE_HOST_IP, and PI_MODELS_PATH. ./demo.sh --print verify is green and prints the exact deny/redact/provider/stock-Pi/bridge/tool commands; no mock result was substituted.

To close: prepare the documented environment, then run ./demo.sh reset && ./demo.sh verify and attach sanitized output.