Complete Operation Red campaign orchestration

[nativ3ai]

Outcome

Connects Operation Red to the existing paid H3RETIK worker contract and makes Sibyl the durable evidence system of record.

What changed

• derives and integrity-checks an immutable campaign scope and worker plan
• creates one scoped H3RETIK receipt/worker per module
• accepts funding only after H3RETIK verifies the exact Base USDC receipt
• keeps paid bearer credentials process-local and out of SQLite/Sibyl
• enforces the authorized execution window before dispatch
• runs operational modules before verification and reporting
• binds each worker/session/action to the AttackGraph workspace
• records executor completion as verified telemetry while keeping model findings asserted
• parses structured findings and artifacts into readable Sibyl events
• tracks per-worker job/evidence/failure and report delivery state
• adds an AgentMail delivery adapter and only marks reports sent after a provider message ID
• documents the trust boundary and end-to-end flow

Verification

• 58 passed
• ruff check . passes
• sdist and wheel build successfully
• fresh production H3RETIK read-only quote: 38 tools, all worker calls present, 7 USDC micro quote, openai/gpt-5.6-sol, terminal,file, blockrun-x402

The multi-worker E2E uses a deterministic H3RETIK transport and the real local Sibyl database, so it proves orchestration without spending funds or touching a target. The already-recorded paid live worker proof remains separate.