[Pavilion-devs]

What this ships

GlassBox RC1 turns AI-agent decisions into signed, raw-free evidence that is bound to DataHub's governed graph, then closes the loop when governed metadata changes.

• admits real OTLP traces and compiles signed decision receipts
• publishes curated receipt Documents into DataHub and verifies them by direct readback
• calculates deterministic blast radius from DataHub metadata changes
• persists findings, quarantine, recovery, and append-only supersession
• exposes the same evidence through the operator console and six read-only MCP tools
• adds a production control plane, authenticated self-hosted deployment, public landing page, documentation, and interactive architecture route
• adds a one-command DataHub flagship demonstration plus the benchmark and ablation proof
• regenerates reproducible release evidence, SBOM, checksums, and the upstream contribution packet

Review paths

• Live product: https://glassboxhq.xyz
• Demo: https://youtu.be/g-j9zD5cxLk
• Architecture: https://glassboxhq.xyz/docs/architecture
• Devpost: https://devpost.com/software/glassbox-yr49mu
• DataHub Agent Forensics Skill: feat(agent-forensics): add decision investigation skill datahub-project/datahub-skills#120
• DataHub Core pgQueue proof: test(pgqueue): cover worker loss on the migrated PostgreSQL schema datahub-project/datahub#19004

Validation

• 747 passed in the full PostgreSQL-backed GitHub Actions suite
• global branch coverage: 90.32% against the existing 90% quality gate
• control-plane contract and failure-path coverage: 99%
• Ruff format and lint: passed
• mypy across 94 source files: passed
• console lint, typecheck, production build, and 6 rendered-route tests: passed
• release evidence, upstream packet, and production-edge tests: 37 passed
• production Compose configuration: valid
• strict clean-tree repository preflight: valid, 416 files, 6.88 MB, raw-free
• staged credential-pattern audit: clear

Notes

Demo recordings, local render caches, deployment credentials, production environment files, and trusted signer material remain excluded from the repository.

This is intentionally a draft while the public-host / authenticated-console DNS cutover is completed and the final hosted smoke test is recorded.