Specify durable external-action request and settlement protocol

[flyingrobots]

Claim

Echo can coordinate a typed external operation without granting ambient authority to Edict or the compiler/provider seam.

Responsibility boundary

• Edict constructs a deterministic request value whose operation identity is declared in the package closure.
• Echo admits REQUESTED before an adapter acts, records bounded CLAIMED attempts, and admits a settlement before program resumption.
• Operation-specific adapters alone possess filesystem, process, network, Git, GitHub, timer, or model authority.
• Settlements are witnessed ingress bound to the exact request, attempt, adapter, basis, and schema.

Acceptance

• canonical request identity, operation identity, authority scope, basis, budget, and input digest;
• request commit before adapter execution;
• attempt identity, lease evidence, idempotency key, and reconciliation law;
• typed succeeded, rejected, failed, and outcome_unknown settlements;
• settlement commit before deterministic resumption;
• duplicate, conflicting, stale-basis, unauthorized-adapter, and malformed settlements fail closed;
• recovery covers unclaimed, claimed, settled, and ambiguous requests;
• replay consumes admitted settlements and never reissues settled effects;
• a deliberate current-world consultation creates a new worldline and request;
• an ADR records the durable authority boundary.

First proof

The first adapter profile is bounded read-only workspace observation. Basis-bound patch application follows only after that proof.

Non-goals

• callable provider imports;
• language-level stack suspension or native callbacks;
• generic shell, process, filesystem, or network capabilities;
• Git or GitHub adapters;
• model invocation;
• the autonomous delivery loop;
• Graft migration.

[coderabbitai]

🔗 Related PRs

#670 - Add trusted causal anchor admission [merged]
#673 - Implement the Echo Target IR semantic verifier [merged]
#683 - Execute admitted data-only operations in Echo [merged]
#686 - feat(warp-core): add anchored-node create-if-absent program [merged]
#688 - Route executable-operation Actions through scheduler-owned Ticks [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!