Skip to content

Agent startup contract

This page is the compact contract an agent should follow before taking action.

Required sequence

authenticate
  -> server_identity
  -> continuity_context
  -> task_get(selected task)
  -> memory_get / runtime_bootstrap_get as needed
  -> verify Git reference
  -> task_update(expected_version, write_context)
  -> work
  -> task_update(expected_version, handoff, work_receipt, write_context)
  -> task_get confirmation

All reads are project-scoped by the authenticated credential. All writes are project-scoped by the credential and additionally require a matching write_context.

Non-negotiable rules

  • Do not use conversation history as durable project state.
  • Do not accept a project ID from untrusted model input as an authorization decision.
  • Do not recreate a missing task in another project.
  • Do not write before identity and project checks pass.
  • Do not retry a stale task update without re-reading the task.
  • Do not claim tests, commits, or client actions that were not performed.