This example starts with the AICR PyTorch training runtime already committed in the catalog. The request is to increase the runtime to eight H100 nodes and update its image.
The unchecked proposal does three concrete things: asks for more nodes than the recorded target has, replaces a digest-pinned image with latest, and leaves the API key as confighubplaceholder. The proposal is rejected before apply.
The reviewed candidate stays within the four-node target limit, keeps the pinned image, and reads the API key from the existing training-provider-credentials Secret. This local receipt stops before ConfigHub. A separate live proof stores this same reviewed object and exercises the approval boundary.
This is a deterministic example of an agent-produced change. It is not a transcript from a named model.
What changed
| Check | Unchecked proposal | Reviewed candidate |
|---|---|---|
| Requested training nodes | 8; target limit is 4 | 4; target limit is 4 |
| Image | mutable tag; warning | digest pinned; pass |
| API key | unresolved placeholder; block | existing Secret reference; pass |
| ConfigHub checks | not run in this local receipt | see the live proof |
| Production approval | not reached | see the live proof |
| Kubernetes apply and observation | not run | not run |
Open the evidence
- Unchecked proposal
- Reviewed candidate
- Receipt
- Live ConfigHub approval proof
- Maintained scenario
- AICR source object
- Standard apply policy
Run:
npm run ai-change-review:verify
npm run ai-change-review:self-test
npm run ai-change-review:live:verify