STATUS / OCTOBER 17, 2026

Implemented locally. Not production validated.

Eventus Engine is in development. The reviewed checkout contains versioned contracts and local governance components. No capability in its readiness matrix is classified as production ready.

Development reference

Engine revision 7897a80

26 scoped checks passed

Foundation and state test modules

Production boundary open

No deployment validation in this review

CURRENT IMPLEMENTATION

What the source supports today.

Versioned contracts

Implemented

Run, workflow, context, approval, knowledge, and related records have JSON Schema validation. The documented schema version is 1.0.0.

Namespace authorization

Tested locally

In-process principals require exact namespace grants. The scoped state checks exercise authorized access and denial boundaries.

Reference orchestration

Tested locally

The local Python orchestrator defaults to dry-run. Foundation checks cover missing principal, missing production idempotency, and mismatched approval.

Governed state and learning

Tested locally

SQLite reference tests cover transitions, duplicate triggers, bounded work attempts, artifact/feedback linkage, and human artifact-bound knowledge promotion.

Task aliases

Contract only

Workflow routing names remain independent of model vendors. Live provider routing and fallback are not validated.

Hermes boundary

Proposed integration

Hermes is the reference orchestrator. A general core adapter and end-to-end integration are not verified in this checkout.

VALIDATION / RERUN OCTOBER 17, 2026

Specific checks. Specific conclusions.

Foundation checks passed

Dry-run default, principal requirement, production idempotency, and approval identity mismatch.

tests/test_foundation.py

State checks passed

Contract validation, exact namespace authorization, idempotency, work claims, lifecycle, and provenance.

tests/test_state.py

Full-suite environment errors

The complete suite ran 144 tests. Missing cryptography caused 24 downstream errors. The complete suite did not pass.

ModuleNotFoundError: cryptography

The downloadable website reference also passed locally: one schema-valid dry-run envelope, a pure in-memory handler, and rejection of a parent namespace grant. These results establish local behavior only.

Inspect and repeat the local checks

PRODUCTION READINESS

The remaining boundary is infrastructure.

The current local adapters do not establish production identity, managed secrets, multi-tenant storage, distributed reliability, or safe external execution. Before a production workflow, its implementation and operating environment need independent validation.

Production identity, workload authentication, MFA, revocation, and policy administration.
Managed secrets, retention controls, encrypted durable storage, and signed or immutable audit export.
Real integration adapters, scoped credentials, effect executors, and compensation or recovery tests.
Live provider policy, sensitivity restrictions, and fallback that preserves authorization.
Distributed queue and storage behavior, load and outage testing, backup recovery, and operational ownership.

These are readiness gates, not available product features. The website documents the boundaries; it does not enforce them.

FUTURE WORK / NO RELEASE DATES COMMITTED

Validate before expanding autonomy.

Connect the runtime

Translate portable governance contracts into a replaceable orchestrator adapter, with complete authorization and state reconciliation.

Prove one bounded effect

Validate the identity, scope, idempotency, audit, retry, timeout, and recovery boundary of an external action.

Productize validated paths

Expose usable access and operating interfaces only after their capabilities and support boundaries are established.

EVIDENCE AND LIMITS

An inspectable reference, with a dated scope.

The implementation summary is based on engine source revision 7897a809df51a5e5c37fbc40338fb4cd68aa01ef, its schema files, tests, and readiness matrix. It is not a verification of a remote deployment or a newer repository snapshot.

Source access and licensing are not granted by this website. Private repository links, tenant records, and operational logs are intentionally excluded. A sanitized validation summary and synthetic run envelope are available for inspection.

Return to the architecture