{
  "schema": "livingip.leocleanNoSendRuntimeContract.v1",
  "runtime_mode": "gcp_staging_no_send",
  "transport_authority": "absent",
  "service_mode": "gateway_without_platform_adapters",
  "handler_platform": "api_server",
  "plugins": {
    "allowed": [
      {
        "name": "leo-db-context",
        "source": "user",
        "tools": [],
        "hooks": [
          "post_llm_call",
          "pre_llm_call"
        ]
      }
    ]
  },
  "toolset": {
    "name": "livingip-leoclean-nosend",
    "allowed_tools": [
      "skills_list",
      "skill_view",
      "terminal"
    ],
    "terminal_commands": [
      "context",
      "decision-matrix-status",
      "edges",
      "evidence",
      "list-proposals",
      "propose-core-change",
      "propose-edge",
      "search",
      "search-proposals",
      "show",
      "show-proposal",
      "status"
    ],
    "forbidden_tools": [
      "cronjob",
      "delegate_task",
      "memory",
      "process",
      "send_message",
      "skill_manage"
    ]
  },
  "profile": {
    "template_entries": [
      "bin",
      "config.yaml",
      "plugins",
      "skills"
    ],
    "required_runtime_entries": [
      "SOUL.md",
      "identity-lock.json",
      "identity-manifest.json"
    ],
    "allowed_runtime_state": {
      "directories": [
        "cache",
        "cron",
        "logs",
        "memories",
        "platforms",
        "sessions",
        "state"
      ],
      "files": [
        "channel_directory.json",
        "gateway.pid",
        "gateway_state.json",
        "state.db",
        "state.db-shm",
        "state.db-wal"
      ]
    },
    "forbidden_entries": [
      ".env",
      "BOOT.md",
      "auth.json",
      "gateway.json",
      "hooks",
      "processes.json",
      "secrets"
    ],
    "learning_policy": {
      "automatic_memory_review_interval": 0,
      "automatic_skill_review_interval": 0,
      "memory_enabled": false,
      "user_profile_enabled": false
    },
    "routing_policy": {
      "cheap_model": "absent",
      "smart_model_routing": false
    }
  },
  "environment": {
    "allowed_provider_credentials": [
      "OPENROUTER_API_KEY"
    ],
    "allowed_runtime_variables": [
      "HERMES_HOME",
      "PYTHONDONTWRITEBYTECODE",
      "PYTHONNOUSERSITE",
      "PYTHONSAFEPATH"
    ],
    "forbidden_exact": [
      "ALL_PROXY",
      "BASH_ENV",
      "BOT_TOKEN",
      "ENV",
      "GATEWAY_ALLOW_ALL_USERS",
      "GATEWAY_ALLOWED_USERS",
      "GOOGLE_APPLICATION_CREDENTIALS",
      "HERMES_ENABLE_PROJECT_PLUGINS",
      "HERMES_SESSION_PLATFORM",
      "HTTP_PROXY",
      "HTTPS_PROXY",
      "LD_PRELOAD",
      "PYTHONHOME",
      "PYTHONPATH",
      "TELEGRAM_BOT_TOKEN"
    ],
    "forbidden_prefixes": [
      "CLOUDSDK_",
      "DINGTALK_",
      "DISCORD_",
      "EMAIL_",
      "FEISHU_",
      "HERMES_",
      "LD_",
      "MATRIX_",
      "MATTERMOST_",
      "SIGNAL_",
      "SLACK_",
      "SMS_",
      "TELEGRAM_",
      "TWILIO_",
      "WEBCOM_",
      "WEBHOOK_",
      "WHATSAPP_"
    ],
    "forbidden_suffixes": [
      "_PASSWORD",
      "_SECRET",
      "_TOKEN",
      "_API_KEY"
    ]
  },
  "database": {
    "canonical_database": "teleo_canonical",
    "runtime_role": "leoclean_kb_runtime",
    "proposal_function": "kb_stage.stage_leoclean_proposal(text,text,text,text,jsonb)",
    "direct_canonical_writes": "denied",
    "direct_stage_table_writes": "denied",
    "proposal_staging": "function_only",
    "automatic_context_modes": [
      "claim_evidence_challenge",
      "review_only_candidate"
    ],
    "unsupported_context_policy": "fail_closed"
  },
  "claim_ceiling": "This artifact proves reproducible source and a structurally no-send runtime surface. It does not prove live GCP IAM, Cloud SQL identity, model behavior, deployment, restart, parity, Telegram delivery, or production readiness."
}