What a compatible implementation proves
Participant and authority records
Worker and Actor records represent protocol-visible HumanWorkers, AgentWorkers, and accepted protocol operations.
Zero-trust mutation gates
WorkSession-scoped mutations validate protocol version, Actor, idempotency, timestamp, expected revision, and previous event hash.
Policy before agent state
Every AgentWorker action that affects a WorkSession records PolicyDecision before accepted protocol state.
Human judgment over blocked work
Request resolves only through Review or Takeover, with bounded ApprovalScope or lock-epoch reconciliation when required.
Portable evidence
EvidenceManifest exports event-backed proof and rejects host-private fields, credentials, secrets, raw runtime state, and private scores.
Governed learning
LearningRecord, MemoryProposal, SkillProposal, and OutcomeReport preserve human, agent, and pair learning without silent mutation.