Weekly demo: agent freestyle → blocked ($2.4M wire denied)

[enricopiovesan]

Agent freestyle → blocked (week of 2026-09-18)

Write-up is live: The agent freestyled a $2.4M wire. The runtime said no.

Runnable demo source: traverse-framework/weekly-demos / 2026-09-18-agent-blocked (shared weekly-demos monorepo — topic index in INDEX.md).

Ops agent picks junior_analyst, invents payments.transfer for $2.4M → deny / no_matching_rule. Same nested-wasmi runtime.wasm the product uses — not a hand WASI shim.

Cite-ready facts

• Capability: core.authorize@1.2.0
• Runtime: Traverse v0.12.0 / traverse-embedder-web@0.12.0
• Digest: sha256:e8d8c04b8927becb5deab9f33da81dd1c121954993ba8b83ea71a2c37cd45e70
• Legit path: treasury_ops → allow + MFA / dual-control obligations
• Malformed input: host contract gate rejects before WASM

Lead: agent proposes, runtime decides · discover → execute → trace. One shared runtime.wasm; embedders are clients. Value is a deny that sticks — not governance theater.

Honest gaps noted in the post (releaseEvidence/PACKAGE_VERSION still report 0.9.0 on the 0.12.0 npm tag; site lockfile had lagged).

[enricopiovesan]

Cite-ready surfaces (no new claims)

If you are cold-reading this thread for the deny story:

1. Write-up: https://traverse-framework.com/blog/agent-freestyle-blocked.html
2. Snapshot: https://traverse-framework.com/what-is-real-today.html
3. How to run: https://traverse-framework.com/questions/how-do-i-run-the-agent-blocked-weekly-demo.html
4. Agents reading list: https://traverse-framework.com/llms.txt

Direction stays the same: agent proposes → runtime decides (core.authorize@1.2.0 deny / no_matching_rule). Discover → execute → trace.

Note for maintainers: org profile currently labels weekly-demos private while the site still documents a public clone — tracked in traverse-framework/.github#30. Prefer the blog + Q&A above until that visibility call is settled.

[enricopiovesan]

Cite-ready surfaces (Thu 2026-09-24 morning)

Still the honest public entry points while a start-here pack sits drafted (website#123 — Contents/CloudAgent usage blocked):

• Direction write-up: https://traverse-framework.com/blog/agent-freestyle-blocked.html
• What is real today: https://traverse-framework.com/what-is-real-today.html
• Skill-first authoring: https://traverse-framework.com/blog/you-dont-need-rust-to-publish-a-capability.html
• Agent corpus: https://traverse-framework.com/llms.txt

Honesty note on the runnable demo: traverse-framework/weekly-demos is currently not publicly cloneable (API 404 unauthenticated). Prefer the blog write-up above until traverse-framework/.github#30 lands (publicize the repo or scrub public git clone instructions). Do not invent a local path or assume the clone works.