# AIOS V2R1C0 RC1 Acceptance

## Tenant Isolation

- cross tenant memory access: DENY
- cross cell context: DENY
- cross tenant secret scope: DENY
- cross tenant queue claim: DENY

## Message Safety

- unsafe numeric message id: DENY
- exact reply resolution only: PASS
- quote text separate from command body: PASS
- heartbeat side effects: DENY
- cron side effects: DENY
- assistant output execution: DENY

## Hermes

- profile HOME isolation: PASS
- workspace escape: DENY
- tenant queue partition: PASS

## OpenClaw

- plugin manifest validation: PASS
- runtime hook registration: REQUIRED
- side effect approval: REQUIRED

## Release Gate

No production deployment until executable tests and runtime evidence pass.