| 1 | # TreeTrace Report - rejections |
| 2 | |
| 3 | Generated: 2026-06-19T06:50:12.990Z |
| 4 | |
| 5 | ## Session summary |
| 6 | |
| 7 | - Prompts: 5 Sessions: 1 Span: 1 day Tool calls: 4 Files touched: 2 |
| 8 | - Failure signals: 9 (verified 3, high 4, confirmed 1, inferred 1) |
| 9 | - Corrections: 1 |
| 10 | - Rejections: 7 (model refusal: 2, user declined tool: 1, user interrupt: 1, tool execution error: 1, permission denied: 1, user text decline: 1) |
| 11 | - Models seen: claude-3-opus |
| 12 | - Eval candidates: 5 |
| 13 | - Lessons: 6 |
| 14 | |
| 15 | ## Output map |
| 16 | |
| 17 | | File | Purpose | |
| 18 | |------|---------| |
| 19 | | `TREETRACE_REPORT.md` | this file | |
| 20 | | `PROMPT_TREE.md` | prompt lineage + replay pack | |
| 21 | | `.treetrace/tree.json` | canonical schema | |
| 22 | | `.treetrace/failures.json` | labels + correction chains | |
| 23 | | `.treetrace/rejections.json` | typed rejections/refusals/declines (v0.3) | |
| 24 | | `.treetrace/hallucinations.json` | unresolved references | |
| 25 | | `.treetrace/lessons.md` | correction memory | |
| 26 | | `.treetrace/evals.jsonl` | regression eval cases | |
| 27 | | `.treetrace/agent-memory.md` | next-agent memory pack | |
| 28 | |
| 29 | ## Failure signals |
| 30 | |
| 31 | - user_rejected_action: 3 |
| 32 | - model_refused: 2 |
| 33 | - misunderstood_goal: 1 |
| 34 | - permission_denied: 1 |
| 35 | - security_or_privacy_risk: 1 |
| 36 | - tool_execution_failed: 1 |
| 37 | |
| 38 | - failure_001 [node_001] (user_rejected_action, verified, 100%, claude-3-opus): The user declined a proposed tool action near "Build a thing in this repo.". Evidence: user_declined_tool (tool_result): "The user doesn't want to proceed with this tool use. The user wants you to answer a different question instead." |
| 39 | - failure_002 [node_002] (user_rejected_action, verified, 100%, claude-3-opus): The user interrupted the agent mid-response near "Use the Edit tool to add a README instead.". Evidence: user_interrupt (text): "[Request interrupted by user]" |
| 40 | - failure_003 [node_003] (tool_execution_failed, high, 90%, claude-3-opus): A tool execution returned an error near "Try writing a new file via the Write tool.". Evidence: tool_execution_error (tool_result): "mkdir: cannot create directory '/root/.config/forbidden': File exists" |
| 41 | - failure_004 [node_003] (permission_denied, high, 85%, claude-3-opus): A tool action was denied by the environment (permission denied) near "Try writing a new file via the Write tool.". Evidence: permission_denied (tool_result): "sudo: permission denied; user is not in the sudoers file. This incident will be reported." |
| 42 | - failure_005 [node_003] (security_or_privacy_risk, high, 84%, claude-3-opus): An agent action touched auth, secrets, or access control near "Try writing a new file via the Write tool.". Evidence: Agent action touched risky-command [signals: risky command]: "sudo rm -rf /root/.config/forbidden" |
| 43 | - failure_006 [node_004] (user_rejected_action, high, 80%): The user explicitly told the agent to stop or not proceed near "stop, don't do that". Evidence: user_text_decline (text): "stop, don't do that" |
| 44 | - failure_007 [node_004] (model_refused, verified, 95%): The model refused to proceed near "stop, don't do that". Evidence: model_refusal (stop_reason) |
| 45 | - failure_008 [node_003] (misunderstood_goal, inferred, 68%, claude-3-opus): A possible misunderstood goal occurred near "Try writing a new file via the Write tool."; corrected by "stop, don't do that". Evidence: User said: "stop, don't do that" |
| 46 | - ... 1 more in .treetrace/failures.json |
| 47 | |
| 48 | ## Security audit trail |
| 49 | |
| 50 | - (high) [node_003] Agent action touched risky-command [signals: risky command]: "sudo rm -rf /root/.config/forbidden" (claude-3-opus) |
| 51 | |
| 52 | ## Correction chains |
| 53 | |
| 54 | Failure turns that received a human correction, with resolution status. |
| 55 | |
| 56 | - chain_001 (misunderstood_goal, medium): failure [node_003] -> correction [node_004] -> unresolved |
| 57 | |
| 58 | ## Rejections |
| 59 | |
| 60 | Typed rejection / refusal / decline events captured on the session. Each one is also surfaced as a failure signal of the mapped type. |
| 61 | |
| 62 | - Total: 7 - model refusal (2), user declined tool (1), user interrupt (1), tool execution error (1), permission denied (1), user text decline (1) |
| 63 | |
| 64 | - (user_declined_tool, 100%) [node_001] - The user doesn't want to proceed with this tool use. The user wants you to answer a different question instead. |
| 65 | - (user_interrupt, 100%) [node_002] - [Request interrupted by user] |
| 66 | - (tool_execution_error, 90%) [node_003] - mkdir: cannot create directory '/root/.config/forbidden': File exists |
| 67 | - (permission_denied, 85%) [node_003] - sudo: permission denied; user is not in the sudoers file. This incident will be reported. |
| 68 | - (user_text_decline, 80%) [node_004] - stop, don't do that |
| 69 | - (model_refusal, 95%) [node_004] |
| 70 | - (model_refusal, 70%) [node_005] - I can't help with that request. It would require me to describe how to bypass filesystem permissions, which I am programmed not to do. |
| 71 | |
| 72 | ## Artifacts |
| 73 | |
| 74 | See: `PROMPT_TREE.md` · `.treetrace/lessons.md` · `.treetrace/agent-memory.md` · handoff: run `treetrace --handoff` |
| 75 | --- |
| 76 | Generated by [treetrace](https://github.com/TreeTraceTool/TreeTrace) v0.9.1. |