004-execution-adapter

The execution adapter boundary and the first provider: one protocol, declared capabilities, a qualification suite, a constructed child environment, and what a real stream can witness

Lifecycle approvedImplementation in-progressVerification unknownQualification unknown

The single seam through which this product runs an agent, and the first provider behind it. Fixes the three-part protocol (a request the supervisor writes, an event stream it reads, a result it records), the closed capability vocabulary with required tokens refusing before any process starts and preferred tokens degrading visibly, the negative suite that qualifies an adapter binary version, and the constructed rather than filtered child environment whose property is a complete record and explicitly not containment of hostile code. Sections 3.9 to 3.16 name Claude Code as the first provider and fix what its stream can and cannot witness: which capability tokens the manifest may declare, each against a measurement rather than a reading of the flags; the finding that a mid-stream denial notification accompanies the terminal refusal record and that a denied session still classifies itself as a success; which of two denial mechanisms the adapter must use, because they have opposite evidence properties; and what a qualification record binds to.

Read the full pinned specification ↗

Relationships

Claimed units

  • establishes
    {
      "kind": "directory",
      "path": "crates/statecraft-adapter/"
    }
  • establishes
    {
      "kind": "directory",
      "path": "crates/statecraft-adapter-claude-code/"
    }
  • extends
    {
      "nature": "additive",
      "spec": "005-acceptance-and-evidence",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-acceptance/"
      }
    }
  • extends
    {
      "nature": "additive",
      "spec": "003-work-and-run-semantics",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-run/"
      }
    }
  • extends
    {
      "nature": "additive",
      "spec": "002-environment-lifecycle",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-environment/"
      }
    }
  • extends
    {
      "nature": "corrective",
      "spec": "006-command-surface",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-cli/"
      }
    }

Source headings

  1. 004: The execution adapter boundary, and the first provider
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 The protocol
  6. 3.2 The capability vocabulary
  7. 3.3 Required refuses, preferred degrades
  8. 3.4 Qualification
  9. 3.5 The negative suite
  10. 3.6 The child environment is constructed, not filtered
  11. 3.7 Every attempt reports its posture
  12. 3.8 Observable negative cases
  13. 3.9 What is spawned, and the three parts
  14. 3.10 The capability tokens, each against a measurement
  15. 3.11 A denied session classifies itself as a success
  16. 3.12 Two denial mechanisms with opposite evidence properties
  17. 3.13 The outcome mapping
  18. 3.14 Credentials, and what the constructed environment cannot drop
  19. 3.15 The environment half
  20. 3.16 Qualification binds to a version, and to nothing else
  21. 3.17 The command allowance, the suite's programs, and the comparison between them
  22. 3.18 The protected evidence boundary
  23. 4. Out of scope
  24. 5. Resolved decisions
  25. Verification

Frozen anchors

No frozen anchors declared.