P094 Operator Task Pack Common Contract v1¶
Source schema: doc/schemas/operator-task-common.v1.schema.json
Governing Basis¶
Project Lineage¶
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
Definitions¶
| Definition | Shape | Description |
|---|---|---|
ref |
string | Logical prefix:name reference. Never a POSIX or Windows filesystem path, URL path, or shell text. |
inferenceRef |
string | Bounded model-runtime reference, including existing slash-scoped profile/runtime aliases. Kept distinct from P094 prefix:name artifact identities. The inference owner resolves and authorizes the exact reference; this is not a filesystem path. |
assetRef |
unspecified | An asset's ref as its profile slot names it: a logical ref, or the Flow id of the deliberation Flow (deliberation/inference-flow). |
flowId |
string | Identifier of an orbiplex.json_e_flow.v1 Flow in its owner's grammar: lowercase ASCII letters and digits, with single ., _ or - separators between them. One identifier names the Flow document, its configuration, its P085 registration and an Agent's binding to it; an actor ref derived from it is never another Flow id. |
operatorBindingRef |
unspecified | The exact node-operator-binding.v1 the host verifies as current through the P085 operator-authority check before it commits a binding change. |
digest |
string | |
counter |
integer | |
timestamp |
string | |
name |
string | |
capabilityId |
string | |
exactRef |
object | |
offerTaskProfile |
object | Exact portable task identity covered by an ordinary Service Offer signature. Descriptive data, never a local binding, package capability or execution grant. |
refs |
array | |
assetRefs |
array | |
hilMode |
enum: whole-plan, each-step, each-mutation |
|
runtimeNetwork |
enum: none, isolated |
|
impactClass |
enum: research, experimental, test, production, critical |
|
bindingState |
enum: enabled, paused |
|
stage |
enum: package, binding, environment, deliberation, effects, verification, rollback, publication |
|
refusalStage |
enum: package, binding, environment, deliberation, effects, verification, rollback, publication, run |
|
stageState |
enum: ready, degraded, blocked, not-applicable, not-evaluated |
|
retryClass |
enum: terminal, after-operator-action, after-deferred-operation, after-owner-reconcile, transient |
|
nextAction |
enum: activate-package, create-binding, edit-binding, grant-capability, grant-interface, inspect-attention-budget, inspect-capability, inspect-deliberation, inspect-effects, inspect-environment, inspect-package, inspect-verification, none, prepare-environment, rebind-operator, resolve-binding-sources, resume-binding, retry-verification, review-profile-change, run-conformance, start-new-run |
|
refusalCode |
enum: package/not-active, package/conformance-missing, package/profile-digest-mismatch, operator/binding-lost, local-binding/missing, local-binding/incomplete, local-binding/outside-package-ceiling, local-binding/profile-changed, local-binding/conflict, local-binding/paused, local-binding/revision-stale, environment/image-mismatch, environment/prepared-system-unavailable, environment/runtime-egress-denied, environment/impact-class-exceeded, environment/not-contained, deliberation/flow-unavailable, capability/missing, capability/revoked, workbench/command-profile-missing, workbench/effect-mode-missing, interface/grant-missing, hil/attention-unavailable, verifier/unavailable, verifier/effect-mode-missing, rollback/unavailable, rollback/destroy-unconfirmed, publication/policy-missing, publication/disabled, offer/withdrawal-pending, package/generation-stale, plan/unknown-action-kind, plan/outside-profile, plan/first-step-not-observation, plan/recovery-class-not-admitted, plan/changed-replay, workbench/patch-outside-policy, interface/lease-lost, hil/denied, hil/expired, delegation/missing, delegation/revoked, delegation/expired, delegation/substituted, delegation/outside-scope, verifier/check-missing, verifier/mutation-not-admitted, verifier/timeout, run/cancelled, run/budget-exhausted |
Closed P094 refusal vocabulary; the proposal's refusal table is the source of truth and a drift check keeps them equal. |
stepClass |
enum: observation, contained-mutation |
Version 1 admits only these classes; other effects refuse with plan/recovery-class-not-admitted. |
effectSource |
enum: owner-enforced, missing-source-default |
|
argvAtom |
string | |
arguments |
array | |
deliberationLimits |
object | Bounds of one deliberation, met by min across the portable profile, the local binding and the host. max/experiments bounds admitted runs; max/cycles bounds proposal-review cycles; max/solver-passages and max/reviewer-passages bound passages per role, regenerations included; max/wall-time-ms bounds the whole process, human waiting included. |
candidateStep |
unspecified | |
planStep |
unspecified | Host-validated step. In Version 1 a mutation is always contained and always needs HIL, and only an owner-enforced source can yield observation. |
stageReport |
object | |
| ## Field Semantics |
Definition Semantics¶
$defs.ref¶
- Shape: string
Logical prefix:name reference. Never a POSIX or Windows filesystem path, URL path, or shell text.
$defs.inferenceRef¶
- Shape: string
Bounded model-runtime reference, including existing slash-scoped profile/runtime aliases. Kept distinct from P094 prefix:name artifact identities. The inference owner resolves and authorizes the exact reference; this is not a filesystem path.
$defs.assetRef¶
- Shape: unspecified
An asset's ref as its profile slot names it: a logical ref, or the Flow id of the deliberation Flow (deliberation/inference-flow).
$defs.flowId¶
- Shape: string
Identifier of an orbiplex.json_e_flow.v1 Flow in its owner's grammar: lowercase ASCII letters and digits, with single ., _ or - separators between them. One identifier names the Flow document, its configuration, its P085 registration and an Agent's binding to it; an actor ref derived from it is never another Flow id.
$defs.operatorBindingRef¶
- Shape: unspecified
The exact node-operator-binding.v1 the host verifies as current through the P085 operator-authority check before it commits a binding change.
$defs.digest¶
- Shape: string
$defs.counter¶
- Shape: integer
$defs.timestamp¶
- Shape: string
$defs.name¶
- Shape: string
$defs.capabilityId¶
- Shape: string
$defs.exactRef¶
- Shape: object
$defs.offerTaskProfile¶
- Shape: object
Exact portable task identity covered by an ordinary Service Offer signature. Descriptive data, never a local binding, package capability or execution grant.
$defs.refs¶
- Shape: array
$defs.assetRefs¶
- Shape: array
$defs.hilMode¶
- Shape: enum:
whole-plan,each-step,each-mutation
$defs.runtimeNetwork¶
- Shape: enum:
none,isolated
$defs.impactClass¶
- Shape: enum:
research,experimental,test,production,critical
$defs.bindingState¶
- Shape: enum:
enabled,paused
$defs.stage¶
- Shape: enum:
package,binding,environment,deliberation,effects,verification,rollback,publication
$defs.refusalStage¶
- Shape: enum:
package,binding,environment,deliberation,effects,verification,rollback,publication,run
$defs.stageState¶
- Shape: enum:
ready,degraded,blocked,not-applicable,not-evaluated
$defs.retryClass¶
- Shape: enum:
terminal,after-operator-action,after-deferred-operation,after-owner-reconcile,transient
$defs.nextAction¶
- Shape: enum:
activate-package,create-binding,edit-binding,grant-capability,grant-interface,inspect-attention-budget,inspect-capability,inspect-deliberation,inspect-effects,inspect-environment,inspect-package,inspect-verification,none,prepare-environment,rebind-operator,resolve-binding-sources,resume-binding,retry-verification,review-profile-change,run-conformance,start-new-run
$defs.refusalCode¶
- Shape: enum:
package/not-active,package/conformance-missing,package/profile-digest-mismatch,operator/binding-lost,local-binding/missing,local-binding/incomplete,local-binding/outside-package-ceiling,local-binding/profile-changed,local-binding/conflict,local-binding/paused,local-binding/revision-stale,environment/image-mismatch,environment/prepared-system-unavailable,environment/runtime-egress-denied,environment/impact-class-exceeded,environment/not-contained,deliberation/flow-unavailable,capability/missing,capability/revoked,workbench/command-profile-missing,workbench/effect-mode-missing,interface/grant-missing,hil/attention-unavailable,verifier/unavailable,verifier/effect-mode-missing,rollback/unavailable,rollback/destroy-unconfirmed,publication/policy-missing,publication/disabled,offer/withdrawal-pending,package/generation-stale,plan/unknown-action-kind,plan/outside-profile,plan/first-step-not-observation,plan/recovery-class-not-admitted,plan/changed-replay,workbench/patch-outside-policy,interface/lease-lost,hil/denied,hil/expired,delegation/missing,delegation/revoked,delegation/expired,delegation/substituted,delegation/outside-scope,verifier/check-missing,verifier/mutation-not-admitted,verifier/timeout,run/cancelled,run/budget-exhausted
Closed P094 refusal vocabulary; the proposal's refusal table is the source of truth and a drift check keeps them equal.
$defs.stepClass¶
- Shape: enum:
observation,contained-mutation
Version 1 admits only these classes; other effects refuse with plan/recovery-class-not-admitted.
$defs.effectSource¶
- Shape: enum:
owner-enforced,missing-source-default
$defs.argvAtom¶
- Shape: string
$defs.arguments¶
- Shape: array
$defs.deliberationLimits¶
- Shape: object
Bounds of one deliberation, met by min across the portable profile, the local binding and the host. max/experiments bounds admitted runs; max/cycles bounds proposal-review cycles; max/solver-passages and max/reviewer-passages bound passages per role, regenerations included; max/wall-time-ms bounds the whole process, human waiting included.
$defs.candidateStep¶
- Shape: unspecified
$defs.planStep¶
- Shape: unspecified
Host-validated step. In Version 1 a mutation is always contained and always needs HIL, and only an owner-enforced source can yield observation.
$defs.stageReport¶
- Shape: object