
RUBICON is a rollback-fidelity and effect-boundary verification layer for IBM Bob. Problem: AI coding agents can execute tool calls across files, Git, databases, networks, processes and other state domains. Bob can roll back its workspace, but a clean workspace does not necessarily mean every consequence of an action was undone. A remote Git update, external request, database mutation or persistent process may survive outside that boundary. Solution: RUBICON determines what an agent action can affect before execution. Its deterministic classifier maps each action to 12 state domains and evaluates those effects against Bob’s documented rollback boundary. Safe, covered actions can proceed automatically; boundary-crossing or unknown actions fail closed and require a human-authorized, one-use Ed25519 permit. After execution and Bob Rollback, RUBICON independently reconciles the affected state domains instead of trusting the agent or the rollback status alone. It records whether each domain was restored, remained changed, was never covered, was not observable, or was contradicted. The result is sealed into a tamper-evident Reversibility Receipt containing the evidence and cryptographic signature. Target users: Platform engineers, DevEx teams, security engineers and engineering leads deploying AI coding agents with autonomous or unattended execution. Interaction: A developer runs IBM Bob with RUBICON’s lifecycle hooks configured. Bob proposes a tool action, RUBICON evaluates its effect boundary, blocks or permits it, and later verifies the actual post-rollback state. Developers can inspect the decision, evidence manifests, verification results and signed receipt through the web console. What makes RUBICON unique: It does not ask only whether an AI action was authorized. It asks whether the action was actually reversible across every affected state domain—and produces independently verifiable evidence of what remained. RUBICON combines IBM Bob lifecycle hooks and rollback with deterministic policy enforcement, cross-domain state reconciliation, cryptographic permits, signed evidence and an interactive proof console.
27 Sep 2026