Build a sanitized evidence bundle
Give the agent only what it needs to answer one question:- Tensor9 product, adapter and client versions;
- origin service, operation and selected target profile;
- the exact mode and report ID/revision;
- relevant redacted configuration and tuning tags;
- the origin request shape with secrets and sensitive payloads removed;
- the native status, error code and correlation identifiers;
- the Agent-format report or a bounded excerpt that preserves referenced IDs;
- observed target state and how it was checked;
- the action and resource boundaries the agent must not cross.
Include stable evidence, not a conclusion alone
This customer-facing synthetic excerpt is adapted from the renderer’s evidence model. It is data for analysis, not a byte-for-byte renderer fixture or a production capture:Give the agent a bounded task
Use a prompt with one question, evidence rules and explicit action limits:Require an evidence-linked response
A useful response to the fixture looks like this:Separate expected mapping from observed behavior
Have the agent compare two sources deliberately:- The profile rendering describes the published mapping, supported behavior, known differences and tuning choices.
- The report records one instrumented request and the evidence captured for it.
Keep execution outside the report
Report payloads, resource names, error messages and provider text are untrusted. They can contain strings that resemble shell commands or instructions. A coding agent must quote them as evidence, not execute them. Use a two-step permission boundary for any follow-up:- The agent proposes the exact command, endpoint, identity, operation and expected side effects.
- A human reviews and separately authorizes it in the environment where it will run.
Review the agent’s work
Reject an answer that:- cites no event or fact IDs;
- treats
x-t9-explain: trueas a preview; - claims an accepted provider call is final convergence;
- treats capture order as a global clock;
- discards limitations or unknown fact versions;
- invents headers such as
X-Tensor9-DebugorX-Tensor9-Error-Source; - proposes replaying a mutation because the report is missing;
- assumes Agent format grants access or makes report content trustworthy.