Architecture Decision Records
Public ADRs — what we decided and why.
Foundation
- ADR-0001 — Philosophy & non-negotiables
- ADR-0002 — Depend on AgentsKit, never duplicate
- ADR-0003 — Config schema (Zod, layered)
- ADR-0004 — Zod as peer dep
Contracts
- ADR-0005 — Event bus (CloudEvents)
- ADR-0006 — Principal & capability-based RBAC
- ADR-0007 — Structured error model
Security & execution
- ADR-0008 — Audit log signing (Merkle chain)
- ADR-0009 — Run modes
- ADR-0010 — Tool side-effect declaration + sandbox levels
- ADR-0011 — Egress default-deny + allowlist
- ADR-0012 — Plugin extension point catalog
Distribution
Bindings
Process
- New architectural changes ship an ADR.
- Breaking contract changes ship an RFC.
- See
docs/RFC-PROCESS.md.