agent-provider-bundle-contracts

Canonical generic provider-bundle contract for Agent plugin/provider repos.

This repo defines reusable constraints derived from:

• rpc-plugin-system: inert provider bundle substrate, metadata/provenance/digest/generation, restart invalidation, transport/lifecycle/auth supervision, and provider observability redaction/rejection rules.
• agent-core-system: descriptor admission, emitted surfaces, usage admission, sealed executable envelopes, generic mediated authority-use refs.

Provider repos such as filesystem, browser, telegram, LLM, and memory inherit this contract and add only domain-specific deltas.

Provider diagnostics are structured audit facts, not payload logs or authority transfer. Provider repos inherit the rpc-plugin-system provider observability contract: use the SDK/helper path, reject unsafe diagnostic material before durable writes, redact unsafe material before admin/CLI display, and never log raw prompts, payloads, credentials, tokens, authority refs, handles, sockets, sessions, signer material, provider-private paths, upstream response bodies, or reusable refs.

Provider diagnostics status

The final provider diagnostics judge sweep accepted this contract as the generic downstream rule. Provider repos inherit the substrate SDK/helper path and redaction contract by reference, then add only domain-specific forbidden/safe-field deltas. Diagnostics remain non-authoritative observability facts; they must not create admission, permission, routing, owner selection, executable handles, or client-visible surfaces.

Canonical artifacts

• PRD.md: scope, non-goals, canonical flow, and acceptance.
• docs/architecture.md: generic provider-bundle authority boundary.
• docs/implementation-spec.md: required artifacts and migration rule.
• docs/provider-delta-template.md: required shape for provider-specific deltas.
• docs/verification-checklist.md: reusable generic and provider-delta checks.
• workflow/artifacts/provider-observability-redaction-2026-05-23.md: imported provider observability redaction contract from rpc-plugin-system.
• workflow/artifacts/global-coverage-map.md: artifact coverage and known gaps.

Run python3 scripts/workflow-check.py and git diff --check before accepting changes.