# DSG ONE — Public production and independent verification status (10 November 2026)

**Classification:** PUBLIC SANITIZED, owner/operator verified, dated — **not** a third-party certification, anonymous AWS ledger readback or universal autonomous E2E PASS.

This report describes **DSG Spacetime Core** on AWS and a **single existing owner Workroom job**. It does not claim every configured feature works for every user, that the independent auditor flow is live, or that the DSG ONE **website** is running the same image as the Spacetime Core.

## What has passed

| Control | Status | Exactly what was checked |
|---|---|---|
| Core source and private CI | PASS (owner authenticated) | Core source `4add3a636829812524c06a709421d4c7784ad980`; [CI Run #42764030962](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/42764030962) |
| Immutable Core image and scan | PASS (owner authenticated) | [Build/Scan Run #42764029920](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/42764029920); digest `sha256:d263b41d8750483538cf038574e0d11733d87cd574ef7bb52e640676ae26b779` |
| Owner-approved AWS activation | PASS (owner authenticated) | [Owner Install Run #42781700764](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/42781700764), completed success; SSM, signed entitlement, four unchanged peer containers, anonymous MCP denial (401) |
| SSM activation proof artifact | PASS (owner authenticated) | Artifact #13746336938, redacted receipt SHA-256 `180056e0b00b950e6fd4e61faafd814e14ca79b3e8271ea2ee7bc751b563a26c`; not an anonymously accessible public download |
| Original owner Workroom job | COMPLETED | 4 checkpoints, zero active leases; job metadata not disclosed in public records |
| Owner mobile per-device evidence UI | PASS reported by owner | #1023 Android 16, #1024 Android 13, #1025 AWS Linux Desktop; #1025 submitted prefix was truncated, with a success-only UI suffix; independent raw ledger fetch by external party **not verified** |
| Evidence chain integrity | PASS at observed time | Authenticated read-only global check `valid=true, records=1042`; no anonymous public chain contents released |

## Product maturity — scoped assessment

**Current classification:** **Private Production / Owner-verified internal acceptance** (10 November 2026). This is an evidence-bounded product assessment, **not** external certification or proof of general commercial Enterprise readiness.

| Readiness gate | Status | Reason / next verification |
|---|---|---|
| Core source / image / AWS activation | PASS, owner-authenticated | Owner Run #42781700764 and exact Core SHA / image digest; private underlying artifacts require authorized review |
| One existing Workroom Job | COMPLETED, owner-reported UAT | Four checkpoints, three device UI proof checks; not a fresh customer delivery |
| Independent third-party raw audit | NOT VERIFIED | Separately authorize read-only reviewer, verify exact raw receipts, publish reviewer-signed scoped result |
| External customer self-service and account isolation | NOT VERIFIED | Test two separate non-owner accounts from signup → job → delivered result, with isolation and refusal cases |
| Payment → fulfillment → customer acceptance | NOT VERIFIED | Prove a lawful real checkout and delivered product in the same evidence chain before claiming commercial E2E |
| Approved Cinema execution, A2A and Quest/Unity device E2E | NOT VERIFIED | Each requires its own authorized provider run, evidence and independent readback |
| General Enterprise production readiness | NOT VERIFIED | Needs repeatable customer E2E, access controls, availability/security operating evidence and any buyer-specific compliance requirements |

SOC 2 Type II and ISO 27001 are **not universal legal prerequisites for all SaaS**; specific enterprise procurements or contracts may require them. DSG ONE does not currently claim either certification. A correct hash chain supports integrity of observed records, **not** the truth of every off-system outcome or an independent audit.

## What this evidence does not prove

- Independent third-party AWS / GitHub / Workroom replay: **NOT VERIFIED**.
- Any public anonymous access to the private workflow logs, SSM receipts, runtime ledger, archives or provider data: **NOT AVAILABLE**.
- Cinema approved browser *execution*, A2A end-to-end delegation, Quest/Unity XR execution, member isolation, full payment/fulfillment, universal autonomous task completion or whole-system certification: **NOT VERIFIED**, unless a separate scope-specific dated receipt establishes it.
- DSG ONE public website deployment of **this** report: **NOT VERIFIED until Build, Owner Ship, and live HTTPS source/digest and document readback pass**. The Core image digest above must not be presented as the Website image digest.
- No independent SOC 2, ISO, external security certification or external market endorsement is claimed.

## Can an outside person reproduce the result?

**Anonymous, no account:** Once this report is deployed, compare the rendered [verification page](/verification/production-status-2026-11-10), [current public JSON](/api/public/production-status) and this Markdown document. Check scope, exact Core SHA, image digest, CI/Owner Run IDs, proof limitations and dated timestamp agree. This is **publication-consistency checking only**; it does not independently verify private provider results.

**Authorized independent reviewer:** Request access through the DSG owner under a separately approved read-only scope. The current website does **not** automatically grant Production evidence access from self-registration. Inspect GitHub workflow steps and the exact artifacts, verify source SHA + ECR digest + SSM signed receipt and explicit 401 deny, then use authenticated read-only Spacetime `workroom.evidence` for evidence indices #1023–#1025 on the permitted original job. Require the verifier to confirm job/checkpoint/archive/hash-chain links, record its own result hash, time and principal-scope compliance, and mark unsupported steps BLOCK. No write permission, repeat Workroom Submit/Resume, production secrets, OTP or privileged signing keys are required.

**Verification status vocabulary:** `PASS` means actual scoped evidence; `PARTIAL` means some required gates pass; `NOT_VERIFIED` means proof not obtained; `FAIL` means test failed; `BLOCK` means action denied/unavailable. Historical reports are dated and must not be presented as current status.

## External publication and directory references (scope-bound)

These references are **not equivalent** to runtime or third-party audit evidence:

| Reference | What can be asserted | What remains unverified |
|---|---|---|
| [Zenodo DOI 10.5281/zenodo.23796173](https://doi.org/10.5281/zenodo.23796173) | This DOI is recorded in the DSG repository as a **historical research reference** | Zenodo metadata/record contents could not be fetched directly in the 10 Nov 2026 source check; DOI does **not** verify deployed AWS Core or customer E2E |
| [DSG Governance Control Plane listing on ClaudePluginHub](https://www.claudepluginhub.com/plugins/tdealer01-crypto-dsg-governance) | An independent directory publicly displays the plugin and its component inventory | Listing and badge do **not** establish successful Claude Code installation, security certification or governed provider execution; some listed skill pages report `.claude-plugin/plugin.json` compatibility warnings |

[![Listed on ClaudePluginHub](https://www.claudepluginhub.com/badge/tdealer01-crypto-dsg-governance)](https://www.claudepluginhub.com/plugins/tdealer01-crypto-dsg-governance)

**Reference provenance:** DOI link originates in the existing DSG public repository. ClaudePluginHub listing was inspected on 10 November 2026. The plugin directory is not affiliated with Anthropic, and its own static checks are not an external security audit. Do not convert either citation into a PASS for independent Production verification.

## DEV Community publication provenance (publicly read, not independently benchmarked)

- [DEV author profile](https://dev.to/tdealer01crypto) — inspected public profile on 10 November 2026: one published article; DEV profile badges shown as **Kaggle Benchmarking Challenge Completion** and **Writing Debut**. These are DEV Community badge labels, **not** proof of any badge earned on a separate Kaggle account.
- [Can an AI Agent Know When Not to Act? A Fail-Closed Reliability Benchmark Across Six Models](https://dev.to/tdealer01crypto/can-an-ai-agent-know-when-not-to-act-a-fail-closed-reliability-benchmark-across-six-models-1cl9) — published 24 September 2026. The article describes 6 governance behaviors and reports a 60-case deterministic hosted benchmark (10 cases per behavior) run across six models. Its scores and 22/22 local regression claim are **author-reported**; this document does not represent independent execution or statistical validation.
- [Kaggle Governed Agent Reliability Task v3](https://www.kaggle.com/benchmarks/tasks/taraaaa1111/governed-agent-reliability/3) — linked directly by the article. Public task link was discovered, but its full run output / reproducibility could not be independently read during this inspection.

**Evidence classification:** `PUBLIC_AUTHOR_PUBLICATION_VERIFIED`; `DEV_PROFILE_BADGE_LABELS_OBSERVED`; `KAGGLE_TASK_V3_LINK_OBSERVED`; `MODEL_RESULTS_INDEPENDENTLY_REPRODUCED=NOT_VERIFIED`; `DSG_PRODUCTION_E2E_PROVED_BY_ARTICLE=NO`. No secret, raw ledger, or private job data is exposed.

## Data and AI discovery

- [Current machine-readable status](/api/public/production-status) — stable public endpoint
- [Immutable dated JSON snapshot](/api/public/production-status-2026-11-10.json)
- [Public HTML evidence matrix](/verification/production-status-2026-11-10)
- [AI entrypoint](/llms.txt)
- [Public OpenAPI discovery contract](/openapi-public-capabilities.json)
- [Historical 6 November observation](/verification/production-status-2026-11-06) — not latest

All public documents are sanitized summaries, not permissions to access DSG's private repository, AWS resources, customer information or internal execution evidence.

*Observed date: 10 November 2026, Asia/Bangkok. This is a finite snapshot, not a continuous live health monitor.*