Watch

No description

Python 100%

Find a file

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Linus f3e237888f docs: make authority field names exact		2026-10-28 02:20:21 -05:00
docs	docs: make authority field names exact	2026-10-28 02:20:21 -05:00
scripts	tests: cover reciprocal authority applicability	2026-10-28 02:16:06 -05:00
testdata	tests: cover reciprocal authority applicability	2026-10-28 02:16:06 -05:00
workflow	docs: make authority field names exact	2026-10-28 02:20:21 -05:00
.gitignore	docs: define generic provider bundle contracts	2026-05-15 13:23:59 -05:00
LICENSE	docs: prepare v1.0.0 source release candidate	2026-10-28 00:31:11 -05:00
PRD.md	docs: expand generic session authority contract	2026-05-15 13:57:56 -05:00
README.md	contracts: make digest ordering and evidence strict	2026-10-28 01:28:36 -05:00
workflow.toml	docs: make authority field names exact	2026-10-28 02:20:21 -05:00

README.md

agent-provider-bundle-contracts

Canonical generic provider-bundle contract for Agent plugin/provider repos.

This repo defines reusable constraints derived from:

rpc-plugin-system: inert provider bundle substrate, metadata/provenance/digest/generation, restart invalidation, transport/lifecycle/auth supervision, and provider observability redaction/rejection rules.
agent-core-system: descriptor admission, emitted surfaces, usage admission, sealed executable envelopes, generic mediated authority-use refs.

Provider repos such as filesystem, browser, telegram, LLM, and memory inherit this contract and add only domain-specific deltas.

Provider diagnostics are structured audit facts, not payload logs or authority transfer. Provider repos inherit the rpc-plugin-system provider observability contract: use the SDK/helper path, reject unsafe diagnostic material before durable writes, redact unsafe material before admin/CLI display, and never log raw prompts, payloads, credentials, tokens, authority refs, handles, sockets, sessions, signer material, provider-private paths, upstream response bodies, or reusable refs.

Provider diagnostics contract

Provider repos inherit the substrate SDK/helper path and redaction contract by reference, then add only domain-specific forbidden/safe-field deltas. Diagnostics remain non-authoritative observability facts; they must not create admission, permission, routing, owner selection, executable handles, or client-visible surfaces.

Canonical artifacts

PRD.md: scope, non-goals, canonical flow, and acceptance.
docs/architecture.md: generic provider-bundle authority boundary.
docs/implementation-spec.md: required artifacts and migration rule.
docs/provider-delta-template.md: required shape for provider-specific deltas.
docs/verification-checklist.md: reusable generic and provider-delta checks.
testdata/semantic-digest-vectors.json: normative RFC 8785 canonical-byte/SHA-256, ordering/escaping edge, and classified negative vectors.
workflow/artifacts/provider-observability-redaction-2026-05-23.md: imported provider observability redaction contract from rpc-plugin-system.
workflow/artifacts/global-coverage-map.md: artifact coverage and known gaps.

Run python3 scripts/workflow-check.py, python3 scripts/verify-semantic-digest-vectors.py, and git diff --check before accepting changes.

Version 1.0.0

This source contains version 1.0.0 of the generic provider-bundle contract, its reusable provider-delta and verification templates, and the workflow evidence supporting the contract.

License

Licensed under the MIT License.