004-execution-adapter
The execution adapter boundary and the first provider: one protocol, declared capabilities, a qualification suite, a constructed child environment, and what a real stream can witness
The single seam through which this product runs an agent, and the first provider behind it. Fixes the three-part protocol (a request the supervisor writes, an event stream it reads, a result it records), the closed capability vocabulary with required tokens refusing before any process starts and preferred tokens degrading visibly, the negative suite that qualifies an adapter binary version, and the constructed rather than filtered child environment whose property is a complete record and explicitly not containment of hostile code. Sections 3.9 to 3.16 name Claude Code as the first provider and fix what its stream can and cannot witness: which capability tokens the manifest may declare, each against a measurement rather than a reading of the flags; the finding that a mid-stream denial notification accompanies the terminal refusal record and that a denied session still classifies itself as a success; which of two denial mechanisms the adapter must use, because they have opposite evidence properties; and what a qualification record binds to.
Read the full pinned specification ↗Relationships
depends on
depended on by
Claimed units
- establishes
{ "kind": "directory", "path": "crates/statecraft-adapter/" } - establishes
{ "kind": "directory", "path": "crates/statecraft-adapter-claude-code/" } - extends
{ "nature": "additive", "spec": "005-acceptance-and-evidence", "unit": { "kind": "directory", "path": "crates/statecraft-acceptance/" } } - extends
{ "nature": "additive", "spec": "003-work-and-run-semantics", "unit": { "kind": "directory", "path": "crates/statecraft-run/" } } - extends
{ "nature": "additive", "spec": "002-environment-lifecycle", "unit": { "kind": "directory", "path": "crates/statecraft-environment/" } } - extends
{ "nature": "corrective", "spec": "006-command-surface", "unit": { "kind": "directory", "path": "crates/statecraft-cli/" } }
Source headings
- 004: The execution adapter boundary, and the first provider
- 1. Purpose
- 2. Territory
- 3. Behavior
- 3.1 The protocol
- 3.2 The capability vocabulary
- 3.3 Required refuses, preferred degrades
- 3.4 Qualification
- 3.5 The negative suite
- 3.6 The child environment is constructed, not filtered
- 3.7 Every attempt reports its posture
- 3.8 Observable negative cases
- 3.9 What is spawned, and the three parts
- 3.10 The capability tokens, each against a measurement
- 3.11 A denied session classifies itself as a success
- 3.12 Two denial mechanisms with opposite evidence properties
- 3.13 The outcome mapping
- 3.14 Credentials, and what the constructed environment cannot drop
- 3.15 The environment half
- 3.16 Qualification binds to a version, and to nothing else
- 3.17 The command allowance, the suite's programs, and the comparison between them
- 3.18 The protected evidence boundary
- 4. Out of scope
- 5. Resolved decisions
- Verification
Frozen anchors
No frozen anchors declared.