Orch8: validate a bounded durable ReAct loop before model or tool calls

The Stack

Steps

1. 1

   Fetch the pinned sequence and prove its bounded control-flow graph

   Download only the reviewed JSON artifact, not the Orch8 installer or binary. The validator rejects a digest mismatch, oversized or malformed input, duplicate/unresolved block IDs, any change to the ten-iteration observe/decide/act spine, a literal tool URL, or an embedded credential field. No model, tool endpoint, engine, or database is contacted.

   curl --proto '=https' --tlsv1.2 --retry 3 --max-filesize 65536 -fsSL \
     https://raw.githubusercontent.com/orch8-io/engine/4895153df3754ac64cef063f789a71632e8ee30c/docs/agent-patterns/react-loop.json \
     -o react-loop.json
   node <<'NODE'
   const crypto = require("crypto");
   const fs = require("fs");
   
   function bad(message) {
     console.error("BAD: " + message);
     process.exit(1);
   }
   
   const raw = fs.readFileSync("react-loop.json");
   if (raw.length > 65536) bad("sequence exceeds 64 KiB review limit");
   const digest = crypto.createHash("sha256").update(raw).digest("hex");
   const expectedDigest = "db156db2b7ac03d882d2f8407eb65034e2853d1b42c5f0631f7a21b7648548b7";
   if (digest !== expectedDigest) bad("pinned source digest changed");
   
   let doc;
   try { doc = JSON.parse(raw.toString("utf8")); }
   catch { bad("sequence is not valid JSON"); }
   if (!Array.isArray(doc.blocks) || doc.blocks.length !== 1) bad("expected one top-level block");
   
   const all = [];
   function walk(blocks) {
     if (!Array.isArray(blocks)) bad("block collection is not an array");
     for (const block of blocks) {
       if (!block || typeof block !== "object" || typeof block.id !== "string") bad("block missing id");
       all.push(block);
       if (block.type === "loop") walk(block.body);
       if (block.type === "router") {
         for (const route of block.routes || []) walk(route.blocks);
         walk(block.default || []);
       }
     }
   }
   walk(doc.blocks);
   const ids = new Set(all.map((block) => block.id));
   if (ids.size !== all.length) bad("duplicate block id");
   
   const serialized = JSON.stringify(doc);
   for (const match of serialized.matchAll(/outputs\.([A-Za-z0-9_-]+)/g)) {
     if (!ids.has(match[1])) bad("unresolved output block id " + match[1]);
   }
   if (/https?:\/\//i.test(serialized)) bad("literal network endpoint embedded in sequence");
   if (/api[_-]?key|authorization|bearer|password|secret/i.test(serialized)) bad("credential field embedded in sequence");
   
   const loop = doc.blocks[0];
   if (loop.type !== "loop" || loop.id !== "react_cycle") bad("root must be react_cycle loop");
   if (loop.max_iterations !== 10) bad("loop must be capped at 10 iterations");
   if (loop.condition !== "context.data.agent_done != true") bad("loop stop condition changed");
   if (!Array.isArray(loop.body) || loop.body.length !== 2) bad("loop body must contain observe then decide");
   
   const [observe, decide] = loop.body;
   if (observe.id !== "observe" || observe.type !== "step" || observe.handler !== "llm_call") bad("observe llm_call missing");
   if (decide.id !== "decide" || decide.type !== "router") bad("decide router missing");
   if (!Array.isArray(decide.routes) || decide.routes.length !== 1) bad("expected one finish route");
   const finish = decide.routes[0];
   if (finish.condition !== "outputs.observe.content.action == finish") bad("finish condition changed");
   if (!Array.isArray(finish.blocks) || finish.blocks.map((b) => b.id).join(",") !== "finalize,mark_done") bad("finish route changed");
   const [finalize, markDone] = finish.blocks;
   if (finalize.handler !== "set_state" || finalize.params?.key !== "final_answer" || finalize.params?.value !== "{{outputs.observe.content.final_answer}}") bad("final answer is not persisted");
   if (markDone.handler !== "transform" || markDone.params?.expression !== "true" || markDone.params?.target !== "context.data.agent_done") bad("finish route does not stop loop");
   
   if (!Array.isArray(decide.default) || decide.default.map((b) => b.id).join(",") !== "act,record_observation") bad("default route changed");
   const [act, record] = decide.default;
   if (act.handler !== "tool_call") bad("act tool_call missing");
   if (act.params?.tool_name !== "{{outputs.observe.content.action}}" || act.params?.arguments !== "{{outputs.observe.content.action_input}}" || act.params?.url !== "{{context.data.tool_dispatch_url}}") bad("tool dispatch bindings changed");
   if (record.handler !== "transform" || record.params?.expression !== "outputs.act" || record.params?.target !== "context.data.observations") bad("tool observation is not recorded");
   
   console.log("Orch8 ReAct spine OK: 1 bounded loop (10 max), observe -> decide -> act/record, finish persists answer and stops");
   NODE

2. 2

   Deploy and exercise the real agent only after the gate passes

   Self-host or connect to Orch8, POST the reviewed sequence, then supply your model credential and a narrowly scoped tool dispatcher. Authenticate the dispatcher, allowlist tool names and destinations, reject private/internal network targets, and cap tool time and output size. Model decisions, external tool effects, and live recovery behavior are fenced and are not represented as CI-verified.