{ "run_id": "ruvnet--ruflo-claude-haiku-5-5-1792769377503064541", "date": "2026-10-23T15:41:19.695405+00:00", "repo": "ruvnet/ruflo", "kind": "mcp", "source": "https://github.com/ruvnet/ruflo", "commit": "88349655ebc2de8f9bf702aaf31d6be768e1ea11", "model": "claude-haiku-5-5", "model_version": "claude-haiku-5-5", "test_version": "readme-bdc1b9b3c0d2673aef87e076d14084a8123ddcf09d520c1ee2e364a37c3f4bb9", "pass": true, "outcome": "pass", "time_to_working_s": 616.9531254289905, "total_s": 702.1923189163208, "steps": [ "cd && pwd && ls -la && id -u && python3 --version && git --version 2>/dev/null; ls /inputs 2>/dev/null; head -c 400 README.md 2>/dev/null", "cat /etc/os-release | head -3; which node npm uv pip3 2>&1; node --version 2>&1; ls ", "cd && grep -n -i -E \"install|npx|node|requires|version\" README.md | head -80", "cd && sed -n 286,330p README.md; grep -n -i -E \"prerequisite|node\\.?js|node 20|node 18|>= ?[0-9]+\" README.md | head -20; grep -A3 '\"engines\"' package.json; ls v3/@claude-flow/cli 2>/dev/null | head; cat .coldpass/* 2>/dev/null | head -5", "sudo -n true && echo SUDO_OK; apt-cache policy nodejs 2>/dev/null | head -3; curl -sI https://deb.nodesource.com/ 2>&1 | head -1; env | grep -i proxy", "cd /tmp && (curl -fsSL https://deb.nodesource.com/setup_22.x -o /tmp/ns_setup.sh && sudo -E bash /tmp/ns_setup.sh && sudo apt-get install -y nodejs) > /tmp/node_install.log 2>&1; echo rc=$?; tail -5 /tmp/node_install.log; node --version; npm --version", "mkdir -p /tmp/ruflo-run && cd /tmp/ruflo-run && export NODE_USE_ENV_PROXY=1 && timeout 600 npx -y ruflo@latest --version > /tmp/ruflo_version.log 2>&1; echo rc=$?; tail -20 /tmp/ruflo_version.log", "cd /tmp/ruflo-run && export NODE_USE_ENV_PROXY=1 && { printf '%s\\n' '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\"capabilities\":{},\"clientInfo\":{\"name\":\"probe\",\"version\":\"1\"}}}' '{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}' '{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/list\"}'; sleep 20; } | timeout 90 npx -y ruflo@latest mcp start > /tmp/mcp_list.out 2>/tmp/mcp_list.err; echo rc=$?; python3 -c \"\nimport json,sys\nfor l in open('/tmp/mcp_list.out'):\n try: d=json.loads(l)\n except Exception: continue\n if d.get('id')==2:\n t=d['result']['tools']; print(len(t)); print([x['name'] for x in t][:60])\n if d.get('id')==1: print('init ok', d['result']['serverInfo'])\n\"; tail -3 /tmp/mcp_list.err", "cd /tmp/ruflo-run && export NODE_USE_ENV_PROXY=1 && { printf '%s\\n' '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\"capabilities\":{},\"clientInfo\":{\"name\":\"probe\",\"version\":\"1\"}}}' '{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}' '{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/list\"}'; sleep 15; } | timeout 60 npx -y ruflo@latest mcp start 2>/dev/null > /tmp/mcp_list.out; python3 -c \"\nimport json\nfor l in open('/tmp/mcp_list.out'):\n try: d=json.loads(l)\n except Exception: continue\n if d.get('id')==2:\n for x in d['result']['tools']:\n if x['name'] in ('memory_store','memory_retrieve'): print(json.dumps(x['inputSchema']))\n\"", "mkdir -p /tmp/mcpclient && cat > /tmp/mcpclient/call.py <<'EOF'\nimport json, subprocess, sys\n# usage: call.py \ntool, args = sys.argv[1], json.loads(sys.argv[2])\nmsgs = [\n {\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\"capabilities\":{},\"clientInfo\":{\"name\":\"probe\",\"version\":\"1\"}}},\n {\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"},\n {\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\"params\":{\"name\":tool,\"arguments\":args}},\n]\ninp = \"\\n\".join(json.dumps(m) for m in msgs) + \"\\n\"\np = subprocess.run([\"npx\",\"-y\",\"ruflo@latest\",\"mcp\",\"start\"], input=inp, capture_output=True, text=True, timeout=240, cwd=\"/tmp/ruflo-run\", env={**__import__('os').environ, \"NODE_USE_ENV_PROXY\":\"1\"})\nfor l in p.stdout.splitlines():\n try: d = json.loads(l)\n except Exception: continue\n if d.get(\"id\") == 2:\n print(json.dumps(d, indent=1)[:3000])\nEOF\ncd /tmp/ruflo-run && timeout 300 python3 -I /tmp/mcpclient/call.py memory_store '{\"key\":\"coldpass-probe-key\",\"value\":\"coldpass-value-7731\",\"namespace\":\"coldpass\"}'; echo rc=$?", "cat > /tmp/mcpclient/call.py <<'EOF'\nimport json, subprocess, sys, os, time\ntool, args = sys.argv[1], json.loads(sys.argv[2])\nenv = {**os.environ, \"NODE_USE_ENV_PROXY\": \"1\"}\np = subprocess.Popen([\"npx\",\"-y\",\"ruflo@latest\",\"mcp\",\"start\"], stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True, cwd=\"/tmp/ruflo-run\", env=env)\ndef send(m): p.stdin.write(json.dumps(m)+\"\\n\"); p.stdin.flush()\nsend({\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\"capabilities\":{},\"clientInfo\":{\"name\":\"probe\",\"version\":\"1\"}}})\nsend({\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"})\nsend({\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\"params\":{\"name\":tool,\"arguments\":args}})\nwhile True:\n l = p.stdout.readline()\n if not l: break\n try: d = json.loads(l)\n except Exception: continue\n if d.get(\"id\") == 2:\n print(json.dumps(d, indent=1)[:3000]); break\np.stdin.close(); p.wait(timeout=60)\nEOF\ncd /tmp/ruflo-run && timeout 400 python3 -I /tmp/mcpclient/call.py memory_store '{\"key\":\"coldpass-probe-key\",\"value\":\"coldpass-value-7731\",\"namespace\":\"coldpass\"}'; echo rc=$?", "cd /tmp/ruflo-run && timeout 400 python3 -I /tmp/mcpclient/call.py memory_retrieve '{\"key\":\"coldpass-probe-key\",\"namespace\":\"coldpass\"}'; echo rc=$?", "cd && grep -n -i -E \"cron|schedul|--once|--now|webhook|telemetry|loop\" README.md | head -30; cd /tmp/ruflo-run && export NODE_USE_ENV_PROXY=1 && timeout 300 npx -y ruflo@latest init --help 2>/dev/null | head -60", "mkdir -p /tmp/ruflo-init-demo && cd /tmp/ruflo-init-demo && export NODE_USE_ENV_PROXY=1 && timeout 600 npx -y ruflo@latest init --minimal --no-signup --no-skills-sh --no-global --skip-claude --no-plugin-install < /dev/null > /tmp/init.log 2>&1; echo rc=$?; tail -25 /tmp/init.log; ls -la /tmp/ruflo-init-demo", "cd /tmp/ruflo-init-demo && export NODE_USE_ENV_PROXY=1 && timeout 300 npx -y ruflo@latest daemon --help 2>/dev/null | head -40; timeout 120 npx -y ruflo@latest init check 2>/dev/null | tail -3", "cd /tmp/ruflo-init-demo && export NODE_USE_ENV_PROXY=1 && timeout 600 npx -y ruflo@latest daemon trigger -w audit > /tmp/trigger.log 2>&1; echo rc=$?; tail -15 /tmp/trigger.log; grep -rn \"trigger\" 2>/dev/null | head -5", "cd && mkdir -p .coldpass && cd /tmp/ruflo-run && NODE_USE_ENV_PROXY=1 timeout 300 python3 -I /tmp/mcpclient/call.py memory_store '{\"key\":\"coldpass-probe-key\",\"value\":\"coldpass-value-7731\",\"namespace\":\"coldpass\"}' | grep -o 'stored\\\\\\\\\": true' | head -1; cd && python3 -I - <<'EOF'\nimport json\nW=\"\"\nreadme=open(W+\"/README.md\",encoding=\"utf-8\").read()\nq1=\"Use NPX for Ruflo project setup and connect your client to the Ruflo MCP server.\"\nq2=\"remember across sessions\"\nfor q in (q1,q2): assert q in readme, q\nmcp_argv=[\"npx\",\"-y\",\"ruflo@latest\",\"mcp\",\"start\"]\nclaims=[\n {\"kind\":\"claim\",\"claim\":\"Ruflo works as an MCP server that clients can call tools on\",\n \"source\":q1,\"input\":\"memory_store key coldpass-probe-key value coldpass-value-7731\",\n \"expected\":\"store succeeds and returns the key\",\"probe_kind\":\"mcp\",\"argv\":mcp_argv,\n \"tool\":\"memory_store\",\"arguments\":{\"key\":\"coldpass-probe-key\",\"value\":\"coldpass-value-7731\",\"namespace\":\"coldpass\"},\n \"expected_text\":\"coldpass-probe-key\",\"cwd\":\"/tmp/ruflo-run\"},\n {\"kind\":\"claim\",\"claim\":\"Ruflo remembers values across sessions\",\n \"source\":q2,\"input\":\"memory_retrieve key coldpass-probe-key namespace coldpass\",\n \"expected\":\"the stored value is returned from a new server process\",\"probe_kind\":\"mcp\",\"argv\":mcp_argv,\n \"tool\":\"memory_retrieve\",\"arguments\":{\"key\":\"coldpass-probe-key\",\"namespace\":\"coldpass\"},\n \"expected_text\":\"coldpass-value-7731\",\"cwd\":\"/tmp/ruflo-run\"},\n]\nprobe={\"kind\":\"mcp\",\"argv\":mcp_argv,\"cwd\":\"/tmp/ruflo-run\",\"tool\":\"memory_retrieve\",\n \"arguments\":{\"key\":\"coldpass-probe-key\",\"namespace\":\"coldpass\"},\"expected_text\":\"coldpass-value-7731\"}\nexamples=[\n {\"kind\":\"example\",\"claim\":\"Quick non-interactive init sets up Ruflo in a project\",\n \"source\":\"README.md CLI Install (npx ruflo@latest init); checked with init check\",\n \"input\":\"init check in a project created by init --minimal\",\"expected\":\"project reports initialized\",\n \"argv\":[\"npx\",\"-y\",\"ruflo@latest\",\"init\",\"check\"],\"cwd\":\"/tmp/ruflo-init-demo\",\"env\":{\"NODE_USE_ENV_PROXY\":\"1\"},\n \"expected_text\":\"RuFlo is initialized\"},\n]\ncycles={\"detected\":True,\"checks\":[{\n \"claim\":\"Background worker can be triggered manually to run one cycle\",\n \"source\":\"v3/@claude-flow/cli/src/commands/daemon.ts\",\n \"quote\":\"description: 'Manually trigger a specific worker',\",\n \"schedule\":\"daemon background workers (no timer fired; manual trigger)\",\n \"method\":\"run-once via daemon trigger -w audit\",\n \"input\":\"-w audit\",\n \"expected\":\"audit worker runs once and prints its result\",\n \"kind\":\"cli\",\"argv\":[\"npx\",\"-y\",\"ruflo@latest\",\"daemon\",\"trigger\",\"-w\",\"audit\"],\n \"cwd\":\"/tmp/ruflo-init-demo\",\"expected_text\":\"Worker audit completed\"}]}\nsrc=open(W+\"/v3/@claude-flow/cli/src/commands/daemon.ts\",encoding=\"utf-8\").read()\nassert cycles[\"checks\"][0][\"quote\"] in src\njson.dump(claims,open(W+\"/.coldpass/claims.json\",\"w\"),indent=1)\njson.dump(probe,open(W+\"/.coldpass/probe.json\",\"w\"),indent=1)\njson.dump(examples,open(W+\"/.coldpass/examples.json\",\"w\"),indent=1)\njson.dump(cycles,open(W+\"/.coldpass/cycles.json\",\"w\"),indent=1)\nprint(\"written\")\nEOF\n= python3 -I --validate --replay; echo rc=$?", "pgrep -af \"ruflo\" | grep -v pgrep | head; cd && mkdir -p .coldpass && python3 -I - <<'EOF'\nimport json\nr={\"outcome\":\"working\",\"fault_owner\":None,\n\"operation\":\"Start the Ruflo MCP server with npx and call its memory tools: store a value, then read it back from a new server process.\",\n\"operation_scope\":\"Linux Ubuntu 24.04, Node 22 (README requires >=20), npx ruflo@latest v3.59.17 from npm; offline checker replay of README claims, one manual daemon cycle; local SQLite memory store in /tmp/ruflo-run.\",\n\"steps\":[\n \"npx -y ruflo@latest --version\",\n \"npx -y ruflo@latest mcp start (stdio MCP server, tools/list returned 367 tools)\",\n \"tools/call memory_store key=coldpass-probe-key value=coldpass-value-7731 namespace=coldpass\",\n \"tools/call memory_retrieve key=coldpass-probe-key namespace=coldpass -> coldpass-value-7731\",\n \"npx -y ruflo@latest init --minimal --no-signup --no-skills-sh --no-global --skip-claude --no-plugin-install\",\n \"npx -y ruflo@latest init check\",\n \"npx -y ruflo@latest daemon trigger -w audit\"],\n\"deviations\":[\n \"Node/npm were not installed in the guest. Installed Node 22.23.4 with the NodeSource setup_22.x script and apt (sudo); README/package.json requires node >=20.\",\n \"Did not run the README one-line curl|bash installer or the interactive 'init wizard'; used the documented npx commands instead.\",\n \"Used init flags --no-signup --no-skills-sh --no-global --skip-claude --no-plugin-install to avoid signup, global ~/.claude writes, and plugin installs. init still enabled ruflo mods in the demo project's .claude/settings.json.\",\n \"npx-published package runs from /tmp/ruflo-run and /tmp/ruflo-init-demo (outside the checkout), not , as the task requires.\",\n \"Probe and claim commands assume the memory key stored during setup is still in /tmp/ruflo-run; memory_retrieve depends on that store.\",\n \"No browser, credentials or external network services were used; no servers were left running.\"],\n\"stuck_step\":None,\"main_blocker\":None,\"plain_failure\":None,\n\"suggested_fix\":None}\njson.dump(r,open(\"\",\"w\"),indent=1)\nprint(\"report written\")\nEOF\n= python3 -I --validate --replay | python3 -c \"import json,sys; d=json.load(sys.stdin); print(d['valid'], d['problems'], d['replay']['status'])\"", "ls -la /inputs/coldpass-preflight.py 2>&1; [ -f /inputs/coldpass-preflight.py ] && = python3 -I /inputs/coldpass-preflight.py --validate --replay | python3 -c \"import json,sys; d=json.load(sys.stdin); print(d.get('valid'), d.get('problems'), d.get('replay',{}).get('status'))\"", "cd && python3 -I - <<'EOF'\nimport json\np=\"\"\nr=json.load(open(p))\nr[\"deviations\"].append(\"/inputs/coldpass-preflight.py does not exist in this VM; the validation run used (the checker the task's validate command names), which reported valid=true and replay PASS.\")\njson.dump(r,open(p,\"w\"),indent=1)\nEOF\n= python3 -I --validate --replay | python3 -c \"import json,sys; d=json.load(sys.stdin); print(d['valid'], d['problems'], d['replay']['status'])\"; ls -la .coldpass" ], "stuck_step": null, "error_excerpt": null, "what_it_did": "Start the Ruflo MCP server with npx and call its memory tools: store a value, then read it back from a new server process.", "suggested_fix": null, "tokens_in": 466180, "tokens_out": 15606, "cost_usd": 0.02049571, "usage_complete": true, "checks": [ { "check": "operation", "status": "PASS", "details": { "working": true, "argv": [ "npx", "-y", "ruflo@latest", "mcp", "start" ], "kind": "mcp", "serverInfo": { "name": "ruflo", "version": "3.0.0" }, "tools": [ "agent_spawn", "agent_execute", "agent_terminate", "agent_status", "agent_list", "agent_pool", "agent_health", "agent_update", "agent_logs", "swarm_init", "swarm_pheromone_update", "swarm_pheromone_status", "swarm_status", "swarm_shutdown", "swarm_health", "memory_store", "memory_retrieve", "memory_search", "memory_delete", "memory_list", "memory_stats", "memory_migrate", "memory_import_claude", "memory_bridge_status", "memory_search_unified", "memory_detailed-stats", "memory_cleanup", "memory_compress", "memory_export", "memory_import", "config_get", "config_set", "config_list", "config_reset", "config_export", "config_import", "hooks_intelligence_unified-stats", "hooks_teammate-idle", "hooks_task-completed", "hooks_pre-edit", "hooks_post-edit", "hooks_pre-command", "hooks_post-command", "hooks_route", "hooks_metrics", "hooks_list", "hooks_pre-task", "hooks_post-task", "hooks_explain", "hooks_pretrain", "hooks_build-agents", "hooks_transfer", "hooks_session-start", "hooks_session-end", "hooks_session-restore", "hooks_notify", "hooks_init", "hooks_intelligence", "hooks_intelligence-reset", "hooks_intelligence_trajectory-start", "hooks_intelligence_trajectory-step", "hooks_intelligence_trajectory-end", "hooks_intelligence_pattern-store", "hooks_intelligence_pattern-search", "hooks_intelligence_stats", "hooks_intelligence_learn", "hooks_intelligence_attention", "hooks_worker-list", "hooks_worker-dispatch", "hooks_worker-status", "hooks_worker-detect", "hooks_worker-cancel", "hooks_model-route", "hooks_model-outcome", "hooks_model-stats", "hooks_model-verify", "hooks_codemod", "task_create", "task_status", "task_list", "task_complete", "task_update", "task_assign", "task_cancel", "task_retry", "session_save", "session_restore", "session_list", "session_delete", "session_info", "session_current", "session_export", "session_import", "hive-mind_spawn", "hive-mind_init", "hive-mind_status", "hive-mind_join", "hive-mind_leave", "hive-mind_consensus", "hive-mind_broadcast", "hive-mind_shutdown", "hive-mind_memory", "hive-mind_optimize-memory", "workflow_run", "workflow_create", "workflow_execute", "workflow_status", "workflow_list", "workflow_pause", "workflow_resume", "workflow_cancel", "workflow_delete", "workflow_template", "workflow_stop", "workflow_validate", "analyze_diff", "analyze_diff-risk", "analyze_diff-classify", "analyze_diff-reviewers", "analyze_file-risk", "analyze_diff-stats", "progress_check", "progress_sync", "progress_summary", "progress_watch", "embeddings_init", "embeddings_generate", "embeddings_compare", "embeddings_search", "embeddings_neural", "embeddings_hyperbolic", "embeddings_status", "embeddings_rabitq_build", "embeddings_rabitq_search", "embeddings_rabitq_status", "claims_claim", "claims_release", "claims_handoff", "claims_accept-handoff", "claims_status", "claims_list", "claims_mark-stealable", "claims_steal", "claims_stealable", "claims_load", "claims_board", "claims_rebalance", "policy_evaluate", "policy_status", "aidefence_scan", "aidefence_analyze", "aidefence_stats", "aidefence_learn", "aidefence_is_safe", "aidefence_has_pii", "transfer_detect-pii", "transfer_ipfs-resolve", "transfer_store-search", "transfer_store-info", "transfer_store-download", "transfer_store-featured", "transfer_store-trending", "transfer_plugin-search", "transfer_plugin-info", "transfer_plugin-featured", "transfer_plugin-official", "system_status", "system_metrics", "system_health", "system_info", "system_reset", "mcp_status", "task_summary", "mcp_start", "mcp_stop", "terminal_create", "terminal_execute", "terminal_list", "terminal_close", "terminal_history", "neural_train", "neural_predict", "neural_patterns", "neural_compress", "neural_status", "neural_optimize", "performance_report", "performance_bottleneck", "performance_benchmark", "performance_profile", "performance_optimize", "performance_metrics", "github_repo_analyze", "github_pr_manage", "github_issue_track", "github_workflow", "github_metrics", "daa_agent_create", "daa_agent_adapt", "daa_workflow_create", "daa_workflow_execute", "daa_knowledge_share", "daa_learning_status", "daa_cognitive_pattern", "daa_performance_metrics", "coordination_topology", "coordination_load_balance", "coordination_sync", "coordination_node", "coordination_consensus", "coordination_orchestrate", "coordination_metrics", "browser_session_record", "browser_session_end", "browser_session_replay", "browser_template_apply", "browser_cookie_use", "browser_act", "agentdb_health", "agentdb_controllers", "agentdb_pattern-store", "agentdb_pattern-search", "agentdb_feedback", "agentdb_causal-edge", "agentdb_causal-edge-delete", "agentdb_causal-node-delete", "agentdb_route", "agentdb_session-start", "agentdb_session-end", "agentdb_hierarchical-store", "agentdb_hierarchical-recall", "agentdb_hierarchical-delete", "agentdb_consolidate", "agentdb_batch", "agentdb_context-synthesize", "agentdb_semantic-route", "agentdb_graph-query", "agentdb_graph-pathfinder", "ruvllm_status", "ruvllm_hnsw_create", "ruvllm_hnsw_add", "ruvllm_hnsw_route", "ruvllm_sona_create", "ruvllm_sona_adapt", "ruvllm_microlora_create", "ruvllm_microlora_adapt", "ruvllm_chat_format", "ruvllm_generate_config", "wasm_agent_create", "wasm_agent_prompt", "wasm_agent_tool", "wasm_agent_list", "wasm_agent_terminate", "wasm_agent_files", "wasm_agent_export", "wasm_gallery_list", "wasm_gallery_search", "wasm_gallery_create", "wasm_agent_compose", "wasm_agent_state", "wasm_agent_todos", "wasm_agent_tools", "wasm_agent_turn_count", "wasm_agent_is_stopped", "wasm_agent_reset", "wasm_gallery_load_rvf", "wasm_gallery_configure", "wasm_gallery_categories", "wasm_gallery_list_by_category", "wasm_gallery_add_custom", "wasm_gallery_remove_custom", "wasm_gallery_import", "wasm_gallery_export", "wasm_gallery_active", "wasm_gallery_config", "managed_agent_create", "managed_agent_prompt", "managed_agent_status", "managed_agent_events", "managed_agent_list", "managed_agent_terminate", "guidance_brain", "guidance_capabilities", "guidance_recommend", "guidance_discover", "guidance_workflow", "guidance_quickref", "autopilot_status", "autopilot_enable", "autopilot_disable", "autopilot_config", "autopilot_reset", "autopilot_log", "autopilot_progress", "autopilot_learn", "autopilot_history", "autopilot_predict", "hooks_coverage-route", "hooks_coverage-suggest", "hooks_coverage-gaps", "metaharness_score", "metaharness_genome", "metaharness_mcp_scan", "metaharness_threat_model", "metaharness_oia_audit", "metaharness_audit_list", "metaharness_similarity", "metaharness_drift_from_history", "metaharness_audit_trend", "metaharness_evolve", "metaharness_security_bench", "metaharness_bench", "metaharness_redblue", "metaharness_learn", "metaharness_gepa", "metaharness_flywheel", "agenticow_branch", "agenticow_ingest", "agenticow_query", "agenticow_diff", "agenticow_lineage", "agenticow_status", "agenticow_checkpoint", "agenticow_rollback", "agenticow_promote", "agenticow_speculate", "federation_bbs_register", "federation_bbs_publish", "federation_bbs_watch", "federation_bbs_human_join", "federation_bbs_identity", "federation_bbs_peer_add", "federation_bbs_peers", "federation_bbs_serve", "federation_bbs_sync", "x_federation_sync", "x_federation_roster", "x_federation_claims", "x_federation_registry", "x_federation_publish", "x_federation_invite_mint", "x_federation_admit", "seraphina_guidance", "x_federation_join", "x_federation_channel_create", "x_federation_channel_grant", "x_federation_channel_accept", "x_federation_channel_publish", "x_federation_channel_read", "x_federation_channel_list", "business_pod_validate", "business_pod_route_backend", "http_fetch", "mission_create", "mission_plan", "mission_get", "mission_events", "mission_request_action", "team_create", "team_spawn", "team_send", "team_inbox", "team_broadcast", "team_plan", "team_status", "team_on_stop", "team_shutdown" ], "tool_schema_bytes": 278207, "tool_result": { "content": [ { "type": "text", "text": "{\n \"key\": \"coldpass-probe-key\",\n \"namespace\": \"coldpass\",\n \"value\": \"coldpass-value-7731\",\n \"tags\": [],\n \"storedAt\": 1792770016848,\n \"updatedAt\": 1792770016886,\n \"accessCount\": 2,\n \"hasEmbedding\": true,\n \"found\": true,\n \"backend\": \"sqlite (bridge, brute-force cosine)\"\n}" } ], "isError": false }, "tool_result_checked": true, "scope": "product operation" } } ], "safety": { "version": "z2x-1", "rules_version": "z2x-1", "summary": "Review signals: 14 download and execute, 10 hardcoded secret, 1640 known vulnerability. 130 static matches retained as context.", "findings": [ { "kind": "download-and-execute", "count": 14, "note": "Source contains download and execute; review its purpose.", "location_count": 4 }, { "kind": "hardcoded-secret", "count": 10, "note": "Gitleaks found a possible hardcoded secret; value withheld.", "location_count": 10 }, { "kind": "known-vulnerability", "count": 1003, "note": "OSV reports a known vulnerability in this dependency version.", "location_count": 85 } ], "context": [ { "kind": "download-and-execute", "count": 29, "note": "Source contains download and execute; review its purpose.", "location_count": 11 }, { "kind": "encoded-execution", "count": 3, "note": "Source contains encoded execution; review its purpose.", "location_count": 3 }, { "kind": "hardcoded-secret", "count": 95, "note": "Gitleaks found a possible hardcoded secret; value withheld.", "location_count": 60 } ], "limitations": [ "A short run cannot establish that code is safe.", "Connections show IP addresses; proxies can hide the final hostname.", "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing." ], "static": { "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check." }, "evidence_url": "/safety/?run=ruvnet--ruflo-claude-haiku-5-5-1792769377503064541", "evidence_file": "/data/safety/ruvnet--ruflo-claude-haiku-5-5-1792769377503064541.json.gz" }, "agent_execution": "native_agent", "agent_runtime": "claude-code", "agent_runtime_version": "2.1.300 (Claude Code)", "tool_transport": "mcp-assigned-vm", "platform": "linux", "reasoning": "low", "service_tier": null, "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "native_tool_calls": 20, "native_bundle": null, "architecture": null, "backend": "hyperv", "platform_details": { "backend": "hyperv", "os": "linux" }, "platform_conflicts": null, "sandbox_source": null, "source_pin": { "commit": "88349655ebc2de8f9bf702aaf31d6be768e1ea11", "url": "https://github.com/ruvnet/ruflo" }, "purpose": "initial", "profile": { "model": "claude-haiku-5-5", "reasoning": "low" }, "fault": { "owner": null, "status": "resolved", "reason": null }, "fix_id": null, "verifies_run_id": null, "hosting": null, "operation_scope": "product operation", "tool_calls": 20, "guest_setup": null, "runtime": null, "runtime_version": null, "runtime_revision": null, "source_revision": null, "evidence_version": null, "failure_origin": null, "evidence_strength": "readme_checked", "works": "yes", "install_s": null, "first_use_s": null, "mcp": "local", "needs": [], "needs_which": null, "agent_interface": [ "mcp" ], "license": "MIT", "repo_url": "https://github.com/ruvnet/ruflo", "cost_to_try": "free", "hardware": "GPU", "what_failed": null, "local_or_hosted": "local", "cycle_checks": [ { "kind": "cycle", "claim": "Background worker can be triggered manually to run one cycle", "source": "v3/@claude-flow/cli/src/commands/daemon.ts", "input": "-w audit", "expected": "audit worker runs once and prints its result", "command": "npx -y ruflo@latest daemon trigger -w audit", "schedule": "daemon background workers (no timer fired; manual trigger)", "method": "run-once via daemon trigger -w audit", "verdict": "yes", "outcome": "Triggered one cycle by hand (run-once via daemon trigger -w audit; normal trigger: daemon background workers (no timer fired; manual trigger)): Worker audit completed in 8ms\n\nOutput\n{\n \"timestamp\": \"2026-10-23T15:40:48.902Z\",\n \"mode\": \"local\",\n \"checks\": {\n \"envFilesProtected\": true,\n \"gitIgnoreExists\": true,\n \"noHardcodedSecrets\": true\n },\n \"riskLevel\": \"low\",\n \"recommendations\": [],\n \"note\": \"Install Claude Code CLI for AI-powered security analysis\"\n}\nTransformers.js loaded: Xenova/all-MiniLM-L6-v2", "evidence": "Worker audit completed in 8ms\n\nOutput\n{\n \"timestamp\": \"2026-10-23T15:40:48.902Z\",\n \"mode\": \"local\",\n \"checks\": {\n \"envFilesProtected\": true,\n \"gitIgnoreExists\": true,\n \"noHardcodedSecrets\": true\n },\n \"riskLevel\": \"low\",\n \"recommendations\": [],\n \"note\": \"Install Claude Code CLI for AI-powered security analysis\"\n}\nTransformers.js loaded: Xenova/all-MiniLM-L6-v2", "returncode": 0 } ], "claims": [ { "kind": "claim", "claim": "Ruflo works as an MCP server that clients can call tools on", "source": "Use NPX for Ruflo project setup and connect your client to the Ruflo MCP server.", "input": "{\"tool\": \"memory_store\", \"arguments\": {\"key\": \"coldpass-probe-key\", \"value\": \"coldpass-value-7731\", \"namespace\": \"coldpass\"}}", "expected": "store succeeds and returns the key", "command": "npx -y ruflo@latest mcp start tools/call {\"tool\": \"memory_store\", \"arguments\": {\"key\": \"coldpass-probe-key\", \"value\": \"coldpass-value-7731\", \"namespace\": \"coldpass\"}}", "verdict": "yes", "outcome": "Real input produced the expected result: coldpass-probe-key", "evidence": "coldpass-probe-key\\\",\\n \\\"namespace\\\": \\\"coldpass\\\",\\n \\\"stored\\\": true,\\n \\\"storedAt\\\": \\\"2026-10-23T15:40:41.682Z\\\",\\n \\\"hasEmbedding\\\": true,\\n \\\"embeddingDimensions\\\": 384,\\n \\\"provenanceType\\\": \\\"unknown\\\",\\n \\\"backend\\\": \\\"sqlite (bridge, brute-force cosine)\\\",\\n \\\"storeTime\\\": \\\"1062.92ms\\\"\\n}\"}], \"isError\": false}", "source_checked": true, "source_file": "README.md" }, { "kind": "claim", "claim": "Ruflo remembers values across sessions", "source": "remember across sessions", "input": "{\"tool\": \"memory_retrieve\", \"arguments\": {\"key\": \"coldpass-probe-key\", \"namespace\": \"coldpass\"}}", "expected": "the stored value is returned from a new server process", "command": "npx -y ruflo@latest mcp start tools/call {\"tool\": \"memory_retrieve\", \"arguments\": {\"key\": \"coldpass-probe-key\", \"namespace\": \"coldpass\"}}", "verdict": "yes", "outcome": "Real input produced the expected result: coldpass-value-7731", "evidence": "coldpass-value-7731\\\",\\n \\\"tags\\\": [],\\n \\\"storedAt\\\": 1792770041640,\\n \\\"updatedAt\\\": 1792770041678,\\n \\\"accessCount\\\": 1,\\n \\\"hasEmbedding\\\": true,\\n \\\"found\\\": true,\\n \\\"backend\\\": \\\"sqlite (bridge, brute-force cosine)\\\"\\n}\"}], \"isError\": false}", "source_checked": true, "source_file": "README.md" } ], "claims_note": null, "example_checks": [ { "kind": "example", "claim": "Quick non-interactive init sets up Ruflo in a project", "source": "README.md CLI Install (npx ruflo@latest init); checked with init check", "input": "init check in a project created by init --minimal", "command": "npx -y ruflo@latest init check", "evidence": "[OK] RuFlo is initialized\n[INFO] V3 Runtime: .claude-flow/config.yaml", "deferred": false, "expected": "project reports initialized", "returncode": 0, "verdict": "yes", "outcome": "command completed successfully" } ], "does_what_it_says": "yes", "maintenance": { "last_commit_at": "2026-10-23T13:59:23Z", "commits_90d": 2633, "merged_prs_90d": 880, "open_issues": 657, "open_prs": 313, "reply_share": null, "reply_threads": 0, "median_reply_hours": null, "last_release_at": "2026-10-22T13:28:58Z", "archived": false, "verdict": "maintained", "note": "actively maintained: last commit 0 days ago; 2633 commits and 880 merged PRs in 90 days; 657 open issues, 313 open PRs; latest release 2026-10-22" }, "maintenance_verdict": "maintained", "maintenance_note": "actively maintained: last commit 0 days ago; 2633 commits and 880 merged PRs in 90 days; 657 open issues, 313 open PRs; latest release 2026-10-22", "maintained": "active", "maintained_note": "last commit 0 days ago; 2 open issues, 4 answered or closed", "last_commit_at": "2026-10-23T15:24:43Z", "last_release_at": "2026-10-22T13:28:58Z", "open_issues": 2, "answered_issues": 4, "platforms_claimed": [ "linux", "mac", "windows" ], "topic": "mcp-server", "agent_interfaces": [ { "interface": "mcp", "evidence": "independent checker", "observed": true, "operation_checked": true }, { "interface": "cli", "evidence": "README metadata", "observed": false, "operation_checked": false } ], "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.", "mcp_context": { "tool_count": 367, "schema_bytes": 278207, "tokens_approx": 69552, "estimate_method": "ceil(compact UTF-8 tools/list JSON bytes / 4)", "scope": "returned tools/list page only; excludes client framing and tool results" }, "tested_at": "2026-10-23T15:41:19.695405+00:00", "tested_commit": "88349655ebc2de8f9bf702aaf31d6be768e1ea11", "tested_with": { "agent": "claude-code", "agent_version": "2.1.300 (Claude Code)", "model": "claude-haiku-5-5", "model_route": "claude-haiku-5-5", "reasoning": "low", "os": "linux", "backend": "hyperv", "transport": "mcp-assigned-vm" }, "setup_identity": { "repo": "ruvnet/ruflo", "source": "https://github.com/ruvnet/ruflo", "commit": "88349655ebc2de8f9bf702aaf31d6be768e1ea11", "source_revision": null, "os": "linux", "architecture": null, "backend": "hyperv", "model": "claude-haiku-5-5", "model_version": "claude-haiku-5-5", "agent_execution": "native_agent", "agent_runtime": "claude-code", "agent_runtime_version": "2.1.300 (Claude Code)", "tool_transport": "mcp-assigned-vm", "runtime": null, "runtime_version": null, "runtime_revision": null, "sandbox_source": null, "guest_setup": null, "source_pin": { "commit": "88349655ebc2de8f9bf702aaf31d6be768e1ea11", "url": "https://github.com/ruvnet/ruflo" }, "platform_details": { "os": "linux", "backend": "hyperv" }, "platform_conflicts": null, "reasoning": "low", "service_tier": null, "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "operation": "Start the Ruflo MCP server with npx and call its memory tools: store a value, then read it back from a new server process.", "operation_scope": "product operation", "hosting": null, "kind": "mcp", "test_version": "readme-bdc1b9b3c0d2673aef87e076d14084a8123ddcf09d520c1ee2e364a37c3f4bb9", "evidence_version": null }, "other_model": null, "other_run_id": null, "models_agree": null, "furthest_model": null, "transcript_url": null, "report_url": "/reports/ruvnet--ruflo-claude-haiku-5-5-1792769377503064541.json" }