Application decision
Verification gate
HANDOFF_REQUIRED
A structured handoff must be committed before verification can run.
Required next action
Read the authoritative incident and commit the investigator capsule.
Arrastra Relay
Verified work survives the agent.
One agent hands off the work; the application refuses closure until the successor proves the human-owned check passed.
Arrastra Relay is driven entirely by agent tool calls, so the incident workflow needs a WebMCP-capable client. Either of these works:
Everything below stays readable without tools: the closure policy, the evidence sources, committed receipts, and the full audit record.
Arrastra Relay exposes five tools to an external agent. The page records the results; it does not contain or impersonate the agent.
Live WebMCP choreography
Seven workflow beats come from the application’s authoritative event log. The audit beat begins only when a human opens the full audit. The mill has no playback clock and cannot advance the incident.
The synthetic checkout requirement is fixed before the relay begins. Agents can satisfy it, but cannot rewrite it.
Application decision
HANDOFF_REQUIRED
A structured handoff must be committed before verification can run.
Required next action
Read the authoritative incident and commit the investigator capsule.
Recorded by the application