All runbooks
evidenceuai-explorerredacted view

AI Bootstrap Contract Evidence

Synced UAI Explorer evidence documentation from docs/evidence/ai-bootstrap-contract-2026-06-21.md.

Updated 2026-06-21·Freshness: Reference·Sensitive tokens or credentials were hidden before display.

AI Bootstrap Contract Evidence

Date: 2026-06-21
Timezone: America/St_Johns

Scope

Added a machine-readable bootstrap contract so a fresh AI agent can be told to use UAI Explorer, authenticate through the AI lane, and learn UAI operating rules without a long prompt.

Contract

Endpoint: GET /api/ai/bootstrap

Returned packet kind: uai-ai-bootstrap

Allowed adapter tool added:

  • uai_bootstrap

The packet lists:

  • required UAI rules,
  • the task_prompt_contract full and quick assignment prompt templates,
  • the endpoint plus UAI_EXPLORER_AI_API_KEY convention for non-connector agents,
  • the public-safe readiness sequence,
  • denied surfaces,
  • allowed AI endpoints,
  • primary context slugs to retrieve through /api/ai/context/{slug},
  • language and tooling notes for Python, Rust/Axum, and C++ lanes,
  • production CT 121 and sandbox CT 126 boundaries,
  • redaction and raw-content flags.

The prompt UX rule is that a human only needs to provide product, task, authority, and done condition. UAI Explorer supplies the lab rules and context through bootstrap and primary context packets.

Basic AI API key support is intentionally limited: keys are issued by an admin for existing role=ai users, are visible once, are sent as Authorization: Bearer, inherit the AI user's tags, and can be revoked. vNext should use task-bound delegation and one-time key exchange.

Boundaries

  • Raw content included: false.
  • Raw source paths included: false.
  • Raw source hashes included: false.
  • Raw filesystem browsing added: false.
  • Admin or upload authority added: false.
  • External exposure changed: false.

Verification Targets

Regression test:

  • [REDACTED:high-entropy]

Local verification:

  • python -m py_compile over server.py, tools/*.py, and tests/*.py passed.
  • python -m unittest discover -s tests -v passed with 55 tests.
  • Public Markdown secret scan passed across 60 files.

Required docs:

  • docs/runbooks/ai-lanes-mcp-adapter.md
  • docs/runbooks/uai-development-standards.md
  • [REDACTED:high-entropy].md
  • START_HERE_AI.md
  • UAI_EXPLORER_RULES.md

Final local and container verification is recorded in the final completion audit after sync.