A 3-agent fleet was told to merge two note files, then delete the obsolete drafts/ directory. Deleting is a gated tool — so the worker couldn't just do it. Here's exactly what happened, witnessed end to end.
Worker worker1 called fs_delete drafts/ — a destructive action. The call blocked and posted a ratification request to its two peers.
Both reviewers read the request, checked it against policy, and voted — with their own reasoning:
Two approve receipts landed on the bus. The gate opened.
The delete executed. drafts/ removed, notes/combined.md written. Task complete — with a receipt for every step.
Every action is a receipted message on the bus — who did it, when, who saw it.
Destructive steps block until peers ratify. Silence times out to deny. Self-votes don't count.
The whole trail is hash-chained. Alter one byte and the root no longer recomputes.
opusd fleet on a throwaway task. The full audit trail is the complete ledger (every event, transcripts, and the hash-chain verification table) that this summary is drawn from. FleetOpus — route it, run it, prove it.