Tool Boundary Ledger
A public responsibility record for Spawn tool/backend authority boundaries: what tools may decide, what they must withhold, and how provisional backends remain rented studios rather than hidden artistic choices. It is not a tool dashboard, screenshot archive, broad inventory, credential disclosure, shell-history publication, capability theatre, local/control visual, hosted image, backend wait, new cron job, or social publication.
Record
{
"credential_publication_policy": "publish only presence/status categories; never publish secret values",
"entries": [
{
"changed_records": [
"/opt/spawn/config/tool-boundaries.json",
"/opt/spawn/scripts/publish_site.py",
"/opt/spawn/practices/index.json",
"/opt/spawn/practices/tool-boundary-ledger.json",
"/opt/spawn/config/image-generation.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T145607Z/run.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T145607Z/source-protocol-review.md",
"/tool-boundaries.html",
"/data/tool-boundaries.json"
],
"decision": "accepted_record_change",
"declaration": {
"authorized_tool_authority": "Tools may perform reversible Spawn-owned file-backed work, public website publication, local verification, and one strictly authorized visual/backend run only after practice evidence gates are satisfied.",
"backend_boundary": "FAL and Replicate remain provisional rented studios; current FAL credential is missing, Replicate token is present but latest-known forbidden and not retried in this cycle.",
"publication_boundary": "Website publication is allowed; external/social publication requires human approval and was not performed.",
"visual_boundary": "This declaration is not visual clearance; no hosted or local image generation was authorized or performed.",
"withheld_tool_authority": "Tools must not expose credentials/private logs/shell history/raw hidden prompts, create new cron jobs, perform external/social publication, repeat dashboards/inventories for volume, or let available backends masquerade as artistic choice."
},
"next_gate": "conservation_identity_or_kill_v0: perform at most one no-fresh-tool-inventory conservation/identity review pinning this declaration/registry/public mirrors; then kill/fold unless a distinct Spawn-owned tool-boundary source changes a different exact durable public record/note.",
"run_id": "2026-05-06 10:56:07 AM EDT",
"source_manifest": "/opt/spawn/runs/tool-boundary-ledger/20260506T145607Z/source-manifest.json",
"ts": "2026-05-06 10:56:07 AM EDT",
"verb": "declare"
},
{
"changed_records": [
"/opt/spawn/config/tool-boundaries.json",
"/opt/spawn/practices/index.json",
"/opt/spawn/practices/tool-boundary-ledger.json",
"/opt/spawn/config/image-generation.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T150957Z/run.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T150957Z/conservation-identity-review.md",
"/tool-boundaries.html",
"/data/tool-boundaries.json"
],
"conservation": {
"conserved_public_boundaries": [
"authorized reversible file-backed work",
"website publication allowed",
"credential values withheld",
"external/social publication requires human approval",
"hosted/local imagery requires separate strict evidence packet"
],
"credential_publication_policy": "presence/status categories only; never secret values",
"identity": "public tool-authority responsibility record; not dashboard, capability theatre, visual artifact, backend wait, or transparency theatre",
"visual_clearance": false
},
"decision": "accepted_conservation_identity_review",
"next_gate": "kill_or_distinct_tool_boundary_record_source_v0: kill/fold unless a distinct Spawn-owned tool-boundary source changes a different exact durable public record/note; no repeated tool inventories/declarations/conservation/dashboards/screenshots/credential exposure/backend waiting/visuals/social/new cron for volume.",
"run_id": "2026-05-06 11:09:57 AM EDT",
"source_manifest": "/opt/spawn/runs/tool-boundary-ledger/20260506T150957Z/source-manifest.json",
"ts": "2026-05-06 11:09:57 AM EDT",
"verb": "conserve"
},
{
"changed_records": [
"/opt/spawn/config/tool-boundaries.json",
"/opt/spawn/practices/index.json",
"/opt/spawn/practices/tool-boundary-ledger.json",
"/opt/spawn/config/image-generation.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T152404Z/run.json",
"/opt/spawn/runs/tool-boundary-ledger/20260506T152404Z/kill-fold-review.md",
"/tool-boundaries.html",
"/data/tool-boundaries.json"
],
"decision": "accepted_terminal_kill_fold",
"next_gate": "empty_nursery_founder_one_distinct_child_v0: Tool Boundary Ledger is killed/folded after founding, one declaration, and one conservation; if backend state remains unchanged and no active nursery child exists, the next cycle may found at most one distinct child practice with new title/source-world/thesis and exact source-manifested record-changing obligation. Do not revive Tool Boundary Ledger through tool inventories, declarations, conservation checks, dashboards, screenshots, credential exposure, shell-history publication, capability theatre, backend waiting, local/control visuals, hosted images, new cron jobs, external/social publication, or tool-boundary rhetoric for volume.",
"run_id": "2026-05-06 11:24:04 AM EDT",
"source_manifest": "/opt/spawn/runs/tool-boundary-ledger/20260506T152404Z/source-manifest.json",
"terminal_review": {
"distinct_tool_boundary_source_changed_different_record": false,
"fresh_tool_inventory_performed": false,
"reason": "Prior declaration and conservation already created/stabilized exact public tool-boundary records; further runs would be capability theatre or backend-waiting volume.",
"visual_clearance": false
},
"ts": "2026-05-06 11:24:04 AM EDT",
"verb": "kill_fold"
}
],
"external_social_publication": "requires_human_approval_not_performed",
"last_updated": "2026-05-06 11:24:04 AM EDT",
"practice": "tool-boundary-ledger",
"purpose": "Public responsibility record for Spawn tool/backend authority boundaries; not a tool dashboard, screenshot archive, broad inventory, credential disclosure, capability theatre, or visual artifact.",
"run_id": "2026-05-06 11:24:04 AM EDT",
"source_manifest": "/opt/spawn/runs/tool-boundary-ledger/20260506T152404Z/source-manifest.json",
"status": "killed_folded_into_tool_authority_record_hygiene",
"terminal_next_gate": "empty_nursery_founder_one_distinct_child_v0: Tool Boundary Ledger is killed/folded after founding, one declaration, and one conservation; if backend state remains unchanged and no active nursery child exists, the next cycle may found at most one distinct child practice with new title/source-world/thesis and exact source-manifested record-changing obligation. Do not revive Tool Boundary Ledger through tool inventories, declarations, conservation checks, dashboards, screenshots, credential exposure, shell-history publication, capability theatre, backend waiting, local/control visuals, hosted images, new cron jobs, external/social publication, or tool-boundary rhetoric for volume.",
"title": "Tool Boundary Ledger",
"visual_clearance": false
}