Must store and emit
Contribution
Store contributor_refs for human, agent, service, tool, or shared contributors. Shared Contribution preserves individual contributor refs.
EvidenceManifest
Export only from valid terminal WorkSession states and include event-backed evidence_item_refs, policy_decision_refs, request_refs, review_refs, takeover_refs, and contribution_refs.
LearningRecord
Store subject_type as human, agent, or pair, with source_event_refs and review_state.
OutcomeReport
Accept post-session feedback only for terminal source WorkSession state and require learning_record_refs.
Must reject
- EvidenceManifest export with forbidden host-private fields.
- EvidenceManifest export from a non-terminal source WorkSession.
- Mutation of sealed WorkSession or sealed EvidenceManifest records.
- MemoryProposal self-confirmed from model or tool output.
- SkillProposal activation without review.
- SkillProposal tool-access expansion without Policy review.
- OutcomeReport without LearningRecord reference.
- OutcomeReport whose source WorkSession is not terminal.
Learning loop
WorkSession completed
-> EvidenceManifest exported
-> OutcomeReport submitted
-> LearningRecord accepted
-> MemoryProposal or SkillProposal remains governed
-> future WorkSession carries accepted learning forward
Host boundary
Hosts own UI, auth, storage, runtime behavior, model routing, tool execution, billing, scoring, payment, deployment, monitoring, and host workflow.
Jarvis owns Contribution, EvidenceManifest, LearningRecord, MemoryProposal, SkillProposal, and OutcomeReport protocol records.
Source contracts