Reflective tool-use controller
After using a tool, JARVIS checks whether the result was actually verified and revises the plan from receipts.
LIVE-PROVEN , rung 6 of 8 Recorded 23 September 2026. Advanced Systems branch, not merged into production.
Technical
What it is
jarvis/reasoning/judgment.py (jarvis.reasoning.plan-revision/1, tool-use-reflection/1) with an orchestrate.py reflection key.
Truth ladder
Where it stands
Rung 6 of 8: LIVE-PROVEN
A bounded probe ran the real code path on a booted JARVIS on the real machine and recorded evidence. The project treats live evidence as expiring after 24 hours, so every live reading here shows the date it was taken.
Qualified as PARTIAL: part of this capability is not at the rung shown.
Project record: PRODUCTION_REACHABLE + canonical live proof, PARTIAL
- CONCEPT Designed or specified. No working code yet.
- IMPLEMENTED Code exists. Nothing has demonstrated that it behaves correctly.
- TESTED Automated tests exercise it in isolation, often against fixtures.
- INTEGRATED Wired into the rest of JARVIS and tested across component boundaries.
- PRODUCTION-REACHABLE The owner can reach it through the real runtime path, not only through a test harness.
- LIVE-PROVEN A bounded probe ran the real code path on a booted JARVIS on the real machine and recorded evidence. The project treats live evidence as expiring after 24 hours, so every live reading here shows the date it was taken.
- FORMALLY VERIFIED Its critical property is checked by a proof or exhaustive verification.
- RELEASE-QUALIFIED Passed every qualification gate for a named release.
Limits
Limitations
- The plans in the proof were supplied by the test harness, not proposed by a local model: plan proposal still depends on the language model.
- Proven on an isolated diagnostic core with synthetic test fixtures, not on the owner’s everyday runtime.
Record
Status history
- TESTED , rung 3 of 8 Recorded state: IMPLEMENTED/TESTED; lane live proof PASS on an isolated core; INTEGRATED false; matrix UNDISPOSITIONED
- LIVE-PROVEN PARTIAL , rung 6 of 8 Canonical isolated-core proof: after a refused edit the controller diagnosed a changed state (stale target), revised the plan without replaying anything, and revalidated after a restart.
Only states recorded in the public export are listed. Earlier states may exist in the project’s private ledgers.
Connected work
Connected work
- Changelog Reflective controller revises plans from receipts 22 Sept 2026
Neighbours
Related capabilities
- Deixis & pronoun resolution "It", "that" and "the one from earlier" resolve to the right thing.
CAP-CONV-02· IMPLEMENTED · TESTED · as of 2026-07-29 ·docs/ledger/CAPABILITY_TRUTH.json#CAP-CONV-02 - Route selection (deterministic/fast/deep/coding/vision/research) Each request is routed to the right kind of thinking: instant, fast, deep, coding, vision or research.
CAP-CONV-12· IMPLEMENTED · TESTED · as of 2026-08-06 ·docs/ledger/CAPABILITY_TRUTH.json#CAP-CONV-12 - Risk & uncertainty escalation Risky or uncertain requests are escalated instead of guessed.
CAP-CONV-13· IMPLEMENTED · TESTED · as of 2026-08-06 ·docs/ledger/CAPABILITY_TRUTH.json#CAP-CONV-13 - Epistemic marking JARVIS marks how sure it is: confirmed, inferred, incomplete, or unknown.
CAP-CONV-16· NOT_PROBED_THIS_PASS · TESTED · as of 2026-09-08 ·docs/ledger/CAPABILITY_TRUTH.json#CAP-CONV-16