@@ -11,25 +11,37 @@ Run outcomes: https://docs.openadapt.ai/reference/run-outcomes/
 
 ## How to call
 
+Walkthrough for agents: https://docs.openadapt.ai/get-started/agent-mcp/
+
+```
+claude mcp add openadapt -- uvx --python 3.12 openadapt-agent serve
+```
+
+That is the sandbox. To have the real engine drive the synthetic MockMed app:
+
 ```
-claude mcp add openadapt -- \
-  uvx --from 'openadapt-agent[tutorial]' openadapt-agent \
-  serve --allow-run
+claude mcp add openadapt -- uvx --python 3.12 --from 'openadapt-agent[tutorial]' openadapt-agent serve
 ```
 
+Your own compiled workflows: `openadapt-agent serve --mode production --bundles DIR --runs-dir RUNS`. `--allow-run` is the older form of `--mode production`.
+
+The engine on its own:
+
 ```
 python -m pip install --upgrade openadapt
 openadapt flow tutorial
 openadapt quickstart --break-it
 ```
 
-`--allow-run` is an explicit opt-in. Never summarize halt as success.
+Never summarize halt as success.
 
 ## Outcome vocabulary
 
-`VERIFIED` | `HALTED` | `RECONCILIATION_REQUIRED` | `REFUSED` | `TIMEOUT` | `ERROR`
+MCP `outcome`: `done` | `needs_review` | `not_sure_if_saved` | `did_not_run`, and `running` while a run is in progress. Branch on `outcome` and `safe_to_retry`.
+
+Engine `transaction_outcome`: `VERIFIED` | `HALTED_BEFORE_EFFECT` | `RECONCILIATION_REQUIRED` | `REJECTED_POLICY` | `CANCELED` | `FAILED_PLATFORM` | `COMPLETED_UNVERIFIED` | `ROLLED_BACK`. Engine `execution_outcome`: `VERIFIED` | `COMPLETED_UNVERIFIED` | `HALTED` | `FAILED` | `ROLLED_BACK`.
 
-`VERIFIED` means the independent check passed. Halt is not success. If delivery is uncertain after an action may have been dispatched, the outcome is `RECONCILIATION_REQUIRED`. Do not blindly retry.
+`VERIFIED` (`done`) means the declared result checks passed through a read independent of the acting screen. Halt is not success. If delivery is uncertain after an action may have been dispatched, the outcome is `RECONCILIATION_REQUIRED` (`not_sure_if_saved`). Do not retry it; a person checks the record.
 
 Read `report.json` and the seal. `REPORT.md` is for humans.
 
 
@@ -120,3 +120,10 @@ seal-certificate-mobile.png
   OpenAdaptAI/openadapt-web `public/seals/certificate-mobile.png`, copied
   from the same worktree. SHA-256:
   7d2c83d1e178b4f42ab55f3ff7f4c9dc875f0ad13b6ee051a9c1ba0b8b278116.
+
+tutorial-receipt.webp
+  The receipt.png that `uvx --python 3.12 openadapt flow tutorial` wrote for a
+  VERIFIED run of the synthetic MockMed tutorial (openadapt 1.17.0,
+  2026-10-17), re-encoded as lossless WebP with `cwebp -lossless -z 9`.
+  Unedited otherwise. Used on get-started/cli.md. SHA-256:
+  7f9e55e7eb10499138b75d18bba004abb1b7d5a9826f348921e8f5eef4ab9e6a.
@@ -392,6 +392,28 @@
           "share_percent": 1.5
         }
       ]
+    },
+    "screenshots/tutorial-receipt.webp": {
+      "source_repository": "OpenAdaptAI/openadapt-flow",
+      "source_path": null,
+      "note": "receipt.png written by `uvx --python 3.12 openadapt flow tutorial` (openadapt 1.17.0) on 2026-10-17, re-encoded as lossless WebP. Generated by the product, not captured from a page; the receipt renders on a dark ground.",
+      "sha256": "7f9e55e7eb10499138b75d18bba004abb1b7d5a9826f348921e8f5eef4ab9e6a",
+      "width": 620,
+      "height": 566,
+      "dominant_colors": [
+        {
+          "hex": "#101216",
+          "share_percent": 86.8
+        },
+        {
+          "hex": "#56cc84",
+          "share_percent": 0.76
+        },
+        {
+          "hex": "#0f1115",
+          "share_percent": 0.7
+        }
+      ]
     }
   }
 }
@@ -54,28 +54,13 @@ failure signal (schema `openadapt.automation-failure-signal/v1`):
 
 ## Hosted retention and deletion
 
-The hosted service applies a **versioned, explicitly configured retention
-policy**; there is no implicit retention duration. The policy names its
-version and sets explicit windows for recordings, reports, and run metadata
-(run metadata is never retained shorter than reports), plus a backup recovery
-window and a maximum restore-drill age.
-
-Current behavior:
-
-- **Scheduled deletion is fail-closed.** Destructive scheduled retention
-  refuses to run without a recent receipt proving a complete database **and**
-  private object storage restore into an isolated scratch environment.
-- **Legal holds pause eligible deletion** for the held organization.
-- **Tenant erasure is organization-scoped** and produces an append-only,
-  PHI/PII-free receipt with identifiers, counts, and digests, never deleted
-  payloads.
-- The public [readiness endpoint](https://app.openadapt.ai/api/health/ready)
-  reports the configured retention component separately from the
-  destructive-operation gate.
-
-The concrete day windows are deployment configuration, reviewed with the
-policy version; request the current policy version and its windows directly
-rather than citing this page.
+The hosted service applies a versioned, explicitly configured retention policy
+with no implicit retention duration. Scheduled deletion is fail-closed until a
+complete restore drill has passed, legal holds pause deletion, and tenant
+erasure is organization-scoped with a PHI/PII-free receipt. The concrete day
+windows are deployment configuration: request the current policy version and
+its windows directly. The full description is in
+[Hosted retention, deletion, and recovery](../guides/security-and-data-handling.md#hosted-retention-deletion-and-recovery).
 
 ## Data-flow summary
 
 
@@ -53,3 +53,8 @@ browser can, in principle, retarget to a desktop or RDP backend by recompiling
 the same semantic transitions to whatever rung that surface supports, each
 satisfying the same contract. The [workflow-program IR](workflow-ir.md) is the
 schema that makes one meaning, many implementations, expressible.
+
+## Try it
+
+- [Record your own app](../guides/record-your-app.md): record with the structural evidence the ladder uses.
+- [Troubleshooting over-halting](../guides/troubleshooting.md#it-halts-too-much-over-halting-on-citrix-pixel-only): when a pixel-only surface halts too often.
@@ -94,3 +94,8 @@ cannot express conditionals, loops, or the failure branch it never took. The
 [workflow-program IR](workflow-ir.md) and
 [multi-trace induction](multi-trace-induction.md) are how OpenAdapt recovers the
 intended program from more than one trace.
+
+## Try it
+
+- [Get started on the command line](../get-started/cli.md): record, compile, and verify the bundled tutorial.
+- [Record your own app](../guides/record-your-app.md): compile a demonstration of your own web app.
@@ -199,3 +199,8 @@ pixels before delivery.
 Review [Qualification evidence](../get-started/what-works-today.md) and the engine's
 [published limits](https://github.com/OpenAdaptAI/openadapt-flow/blob/main/docs/LIMITS.md)
 before selecting a workflow.
+
+## Try it
+
+- [Deploy on-prem](../guides/deploy-on-prem.md): keep runtime data in your network.
+- [The hosted option](../guides/hosted.md): the managed browser subscription.
@@ -113,3 +113,7 @@ engine re-verifies live state, is the
 See the [Run a deployment](../guides/run-a-deployment.md) guide for a worked
 durable run, and the [CLI reference](../reference/cli.md#resume) for `resume` /
 `approve` exit codes.
+
+## Try it
+
+- [Durable runs pause and resume](../guides/run-a-deployment.md#durable-runs-pause-and-resume): a worked durable run.
@@ -116,3 +116,8 @@ success banner must halt and the store must stay unchanged. `qualify propose`
 and `qualify accept` run the proposed oracle against the same kind of fault on
 their own. See [The Seal](../commercial/seal.md). A tier-2 read is also the
 only thing that earns a training reward: [Seal as an RL reward](../commercial/seal-reward.md).
+
+## Try it
+
+- [Make the tutorial stop on purpose](../get-started/cli.md#make-it-stop-on-purpose): watch a refuted write halt.
+- [Verify writes against the system of record](../guides/run-a-deployment.md#verify-writes-against-the-system-of-record): wire a verifier in a deployment.
Original file line number	Diff line number	Diff line change
`@@ -392,6 +392,28 @@`
`392`	`392`	`"share_percent": 1.5`
`393`	`393`	`}`
`394`	`394`	`]`
	`395`	`+ },`
	`396`	`+ "screenshots/tutorial-receipt.webp": {`
	`397`	`+ "source_repository": "OpenAdaptAI/openadapt-flow",`
	`398`	`+ "source_path": null,`
	`399`	+ "note": "receipt.png written by `uvx --python 3.12 openadapt flow tutorial` (openadapt 1.17.0) on 2026-10-17, re-encoded as lossless WebP. Generated by the product, not captured from a page; the receipt renders on a dark ground.",
	`400`	`+ "sha256": "7f9e55e7eb10499138b75d18bba004abb1b7d5a9826f348921e8f5eef4ab9e6a",`
	`401`	`+ "width": 620,`
	`402`	`+ "height": 566,`
	`403`	`+ "dominant_colors": [`
	`404`	`+ {`
	`405`	`+ "hex": "#101216",`
	`406`	`+ "share_percent": 86.8`
	`407`	`+ },`
	`408`	`+ {`
	`409`	`+ "hex": "#56cc84",`
	`410`	`+ "share_percent": 0.76`
	`411`	`+ },`
	`412`	`+ {`
	`413`	`+ "hex": "#0f1115",`
	`414`	`+ "share_percent": 0.7`
	`415`	`+ }`
	`416`	`+ ]`
`395`	`417`	`}`
`396`	`418`	`}`
`397`	`419`	`}`