@gram 2
doc blog-decision-handoff
t Worked example: a fictional export decision with an auditable handoff
d A fictional task demonstrates linking decision, risk, evidence and source records before handing work to another agent.
tag examples
view document

::rich
# Scenario (fictional)

Northstar Cooperative is an invented organization. Its team is deciding how to share a maintenance handoff with an external reviewer. This scenario and every result below are fictional; they are not a Thegram customer, deployment, or performance report. The team needs enough context for review while avoiding accidental disclosure of a private working file.

## Decision and records

**Decision:** create a minimal redacted copy of `handoff.gram` for the reviewer, rather than upload the original file. The fictional reviewer only needs the accepted decision, test evidence, and the next owner’s task. The source document includes unrelated internal notes, so the owner keeps it local and creates a separate copy after reviewing every record and relationship.

The evidence record says the owner reopened the redacted copy and confirmed that it contains the decision, one supporting test result, and no unrelated note. The risk record identifies a possible missed relationship that could reintroduce sensitive context. A review task asks a second person to compare the copy with the intended scope before sending. The source record points to the format and renderer API documentation, because the team is comparing a file-centered share with an ephemeral browser render. Links are explicit: evidence supports the decision; the risk blocks the decision from being handed off until review; source supports the boundary explanation.

A simplified fictional record relationship is:

```text
D redacted-copy
t Share a reviewed redacted copy
x proposed

E reopened-copy
t Reopened the fictional redacted copy
supports redacted-copy

X missed-link
t A retained link might expose unrelated context
blocks redacted-copy

T second-review
t Have a second person compare scope
x open
```

These values are examples only. In a real file, the person creating a record would describe observed evidence, link to the appropriate source record, and let Core write revision provenance. They would not invent a recorded timestamp, runtime actor, or chain hash in authored prose.

## Action sequence

1. Identify the canonical source file and do not overwrite it with a redacted export.
2. Create a copy with a clear document identity; inspect all records, rich blocks, references, and links, not only visible prose.
3. Add separate decision, evidence, risk, and task records. Use `supports` from evidence to decision, and `blocks` from the risk to the task or release condition as appropriate.
4. Ask a second reviewer to inspect the exact outgoing copy and verify that links and referenced sources stay within the approved scope.
5. Only after that check, deliver the specific copy through the channel authorized by the owner. If using a web renderer, remember it receives the bytes and is not durable storage.

## Tradeoffs and boundary

A copy reduces the chance of disclosing unrelated notes, but creates a second artifact that can become stale. The task and relationships make that cost visible: record which source revision was used and update the copy deliberately if the decision changes. A link to a browser view would not create a persistent document library. The example does not make a security guarantee; it demonstrates how to expose a risk and make a human check part of a decision.

## Next-agent prompt

> Inspect the fictional `handoff.gram` export without editing the canonical source. Verify every record, rich block, relation, and external reference against the intended reviewer scope. Report which records are included, which could expose unrelated information, and whether the second-review task is satisfied. If ambiguity remains, stop before delivery and name the exact unresolved relationship. Do not claim transmission, publication, or approval unless the owner explicitly authorizes it.

## Further reading

Use the format language guide for record and relation syntax, the renderer API for what a browser submission does, and the owning storage/service contract for any account-backed share. This example is intentionally fictional and demonstrates structure, not product usage evidence.
::end

SRC language-spec
d Internal source reviewed at revision 625edecee877ddf5f6c303cb478c64fa4cbca651 on branch main (spec/language.md); not publicly available.
t .gram record and relation syntax
SRC renderer-api
d Internal source reviewed at revision 971a0474fb4b97c3d23d6687be80664461f43a2f (main: docs/api.md); not publicly available.
t Web renderer API and submission boundary
SRC vault-spec
d Internal source reviewed at revision a193a190141054e07b268f0a38489467db82a335 (master: docs/SPEC.md); not publicly available.
t Vault storage and authorization contract
D redact-choice
x proposed
t Share reviewed redacted copy
d Northstar Cooperative is fictional; share only a separate copy after intended scope is verified.
source language-spec
source renderer-api
source vault-spec
E fictional-evidence
x observed
t Fictional copy reopened and checked
d In the invented scenario, the copy contains only the chosen decision, test, and next task.
source language-spec
supports redact-choice
X missed-link-risk
x open
t A retained relation may expose unrelated notes
d Fictional Northstar risk: a visible prose review can miss context reachable through an explicit relation or reference.
source renderer-api
blocks redact-choice
T second-review-task
x open
t Compare every outgoing record and link
d Fictional Northstar task: a second reviewer checks the exact export copy before authorized delivery.
source renderer-api
depends redact-choice

@gram-history 6
@rev 0 2026-10-12T08:08:29.062Z - c1a4d2e589f7f4feb06738b6a2b819147fde8c72bc5e76da168a7a4132489860
@rev 1 2026-10-12T08:14:42.437Z - req=blog-fictional-no-live-status-20261012 dig=6f5a84216061025c da1ba19e9366fa760d2e070c4a8f6e2e1abc879cd1be28765e9caf68bc9047c6
@@ 73 0 1
x proposed
@@ 80 0 1
x observed
@@ 85 0 1
x open
@@ 90 0 1
x open
@rev 2 2026-10-12T08:15:32.935Z - req=blog-private-source-paths-decision-handoff-20261012 dig=966804ab0d2adf8b ed6ffcc00398c9f206e9f4b1bf0dace3f256714682b6b3f5e51808e3b08e30d1
@@ 62 1 0
@@ 64 0 1
ref https://github.com/clab-one/thegram-format/blob/main/spec/language.md
@rev 3 2026-10-12T08:15:33.034Z - req=blog-fictional-status-source-note-20261012 dig=23291327a4aa168c 0e15409a8c725d2d5bb4b1dbba15ca5b50a86bf26f916b8d9b7e312f44365023
@@ 78 1 0
@@ 84 1 0
@@ 86 1 1
d A visible prose review can miss context reachable through an explicit relation or reference.
@@ 90 1 0
@@ 92 1 1
d Second reviewer checks the exact export copy before authorized delivery.
@rev 4 2026-10-12T08:40:40.142Z - req=platform-corrections-decision-handoff-20261012 dig=6de140fc9c585ecc kind=SourceImported 70372727d2dd8513c721bfb0bea483d4ed26e238ec668c311c718d2ff0b86171
@@ 16 1 1
The evidence record says the owner reopened the redacted copy and confirmed that it contains the decision, one supporting test result, and no unrelated note. The risk record identifies a possible missed relationship that could reintroduce sensitive context. A review task asks a second person to compare the copy with the intended scope before sending. The source record points to the format and renderer API documentation, because the team is comparing a file-centered share with an ephemeral browser render. Links are explicit: evidence supports the decision; risk blocks completion until review; source supports the boundary explanation.
@@ 65 1 0
@@ 67 0 1
ref https://github.com/clab-one/thegram-web-render/blob/main/docs/api.md
@@ 68 1 0
@@ 70 0 1
ref https://github.com/clab-one/thegram-vault/blob/main/docs/SPEC.md
@@ 71 1 0
@@ 77 0 1
supports fictional-evidence
@@ 88 1 1
blocks second-review-task
@rev 5 2026-10-12T08:44:06.655Z - req=platform-corrections-decision-handoff-20261012b dig=86220b42fc5f530e kind=SourceImported 4f746e6473a732af63721a17edaf7a236c4675ed75ea708f31bae6a03c780a19
@@ 31 1 1
blocks external-handoff
@rev 6 2026-10-12T08:46:16.147Z - req=platform-source-notes-decision-handoff-20261012 dig=eb665f2aa3841f9d kind=SourceImported 6712d6f6d74eb022a83cf99594a5d9a01a20ea13110a62ae8d6076f98da59a76
@@ 62 1 1
d Internal source reviewed at revision 625edecee877ddf5f6c303cb478c64fa4cbca651 (spec/language.md); not publicly available.
@rev 7 2026-10-12T08:56:06.856Z - req=platform-final-fixes-decision-handoff-20261012 dig=755972edb0cce184 c1485978d8e01cba0175fb87cce3309f1478690c6c3f1f26a779a9d8855fa688
@@ 31 1 1
blocks redact-choice