Sites
Demo snapshot — build-time-generated from campgroundops.store via campgroundops.render-html (clojure -M:dev:render-html), regenerated nightly.
| Site | Name | Registered | Verified | Last op status |
|---|---|---|---|---|
| site-1 | Pull-through RV site, 50A/30A/20A hookup, loop A | yes | yes | HARD hold · effect-not-propose |
| site-2 | Tent site, water + fire ring, loop B | yes | yes | HARD hold · scope-excluded |
| site-3 | Trailer site, awaiting utility-hookup inspection, loop C | yes | no | HARD hold · site-unverified |
Committed coordination log
Only auto-committed and human-approved proposals ever reach the SSoT — a HARD hold never writes here.
| Op | Site | Value | Provenance |
|---|---|---|---|
log-site-occupancy-record | site-1 | {:guest "Alvarez family", :check-in "2026-07-20", :nights 4} | auto-committed |
schedule-facility-maintenance | site-2 | {:item "water spigot repair, loop B", :urgency "routine"} | auto-committed |
coordinate-supply-restock | site-1 | {:item "bulk firewood pallet order", :quantity 250, :estimated-cost 940} | approved by op-1 |
flag-guest-safety-concern | site-2 | {:concern "downed tree limb blocking loop B fire lane", :confidence 0.9} | approved by op-1 |
Action gate (CampgroundGovernor)
HARD holds cannot be overridden by a human approver. Site registration/verification, proposal effect, and scope exclusion are independently recomputed, never trusted from the advisor's proposal; guest-safety-concern flagging is always a human campground manager's call, at every rollout phase.
| Op | Gate |
|---|---|
:log-site-occupancy-record | phase-3 auto-commit when clean · site must be independently registered + verified in the store |
:schedule-facility-maintenance | phase-3 auto-commit when clean · proposal only, never a direct maintenance-crew dispatch |
:coordinate-supply-restock | phase-3 auto-commit when clean and estimated cost ≤ $500 · ALWAYS human approval above $500, regardless of confidence |
:flag-guest-safety-concern | ALWAYS human approval, at every rollout phase · never auto-commit-eligible · never itself executes an evacuation order or contacts emergency services |
Audit ledger (this run)
Append-only decision-fact log — every proposal, hold, escalation and commit this scenario produced.
| Fact | Op | Site | Basis |
|---|---|---|---|
| committed | log-site-occupancy-record | site-1 | site-1 |
| committed | schedule-facility-maintenance | site-2 | site-2 |
| committed | coordinate-supply-restock | site-1 | site-1 |
| committed | flag-guest-safety-concern | site-2 | site-2 |
| governor-hold | log-site-occupancy-record | site-3 | site-unverified |
| governor-hold | schedule-facility-maintenance | site-1 | effect-not-propose |
| governor-hold | log-site-occupancy-record | site-2 | scope-excluded |