invariant.algebra.type-or-boot-proof | primitive.kernel.defineProductTool, primitive.kernel.EffectClaim, primitive.kernel.ExecutionDomain, primitive.kernel.ExecutionDomainDeclaration, primitive.kernel.ExecutionDomainRegistry, primitive.kernel.ExecutionDomainReplayLaw, primitive.kernel.LivedClaim, primitive.kernel.PreClaim, primitive.kernel.RejectedClaim, primitive.kernel.Tool, primitive.kernel.ToolAdmitInput, primitive.kernel.ToolExecution, primitive.kernel.ToolExecutionContext | agent_os.invalid_resource_amount, agent_os.sandbox_policy_denied | boundary-contract.md, tool-execution-domain.md, resource-carrier.md, sandbox.md, README.md | packages/kernel/test/effect-claim.test.ts, packages/kernel/test/tools.test.ts |
invariant.ledger.single-commit-source | primitive.runtime.Ledger, primitive.runtime.LedgerCommitEventSpec | agent_os.durable_trigger_acquire_cancelled, agent_os.durable_trigger_commit_returned_thenable, agent_os.durable_trigger_drain_limit_exceeded, agent_os.invalid_schedule_at, agent_os.json_stringify_error, agent_os.resource_insufficient, agent_os.resource_reservation_closed, agent_os.resource_reservation_not_found, agent_os.sql_error, agent_os.trigger_factory_error, agent_os.unregistered_durable_trigger_kind | durable-process-algebra.md, durable-truth.md, resource-carrier.md | packages/backends/cloudflare-do/test/ledger-commit-contract.test.ts, packages/backends/in-memory/test/commit-fanout-contract.test.ts |
invariant.algebra.single-code-source | primitive.ag-ui-svelte.agUiProjectionReadable, primitive.ag-ui.projectAgUiFrames, primitive.ag-ui.projectAgUiFramesToActivities, primitive.kernel.AgentSchema, primitive.kernel.AgentSchemaProjections, primitive.kernel.projectAgentSchema | agent_os.effect_ai_json_encode_failed, agent_os.effect_ai_missing_usage, agent_os.effect_ai_provider_executed_tool_rejected, agent_os.effect_ai_tool_handler_called, agent_os.effect_ai_unsupported_output_part, agent_os.provider_output_decode_error | ag-ui-wire-adapter.md, agent-schema.md, llm-transport-effect-ai.md, verification.md | packages/runtime-protocol/test/runtime-events.test.ts, scripts/check-public-api.mjs |
invariant.boundary.runtime-validation-external-only | primitive.kernel.EffectClaim, primitive.llm_protocol.LlmTransport | agent_os.backend_protocol_parse_failure, agent_os.cloudflare_worker_bundle_resolution_failure, agent_os.cloudflare_worker_deploy_resolution_failure, agent_os.dispatch_payload_parse_failure, agent_os.dynamic_worker_failure, agent_os.dynamic_worker_policy_denied, agent_os.dynamic_worker_policy_violation, agent_os.dynamic_worker_provider_failure, agent_os.effect_ai_aborted, agent_os.effect_ai_prompt_error, agent_os.effect_ai_unsupported_route, agent_os.invalid_trace_context, agent_os.llm_call_timed_out, agent_os.llm_call_timeout, agent_os.postgres_harness_error, agent_os.provider_http_failure, agent_os.ref_resolution_failed, agent_os.sandbox_failure, agent_os.tenant_credential_resolver_configuration_error | boundary-contract.md, agent-schema.md, carriers-and-material.md, backend-node-postgres.md, backend-protocol.md, deploy-cloudflare.md, dynamic-worker.md, llm-protocol.md, llm-transport-effect-ai.md, runtime.md, sandbox.md, tenant-material.md, README.md | packages/kernel/test/effect-claim.test.ts, packages/runtime-protocol/test/runtime-events.test.ts |
invariant.boundary.owner-owned-safe-projection | primitive.ag-ui.projectLedgerEventToAgUiEnvelope, primitive.ag-ui.projectLedgerSseToAgUiSse, primitive.kernel.SafeLedgerEvent | | ag-ui-wire-adapter.md, durable-truth.md | packages/wire-adapters/ag-ui/test/ag-ui.test.ts, packages/wire-adapters/ag-ui/test/workspace-agui-integration.test.ts |
invariant.d10.truth-identity | primitive.kernel.AuthorityRef, primitive.kernel.BoundaryContract, primitive.kernel.BoundaryProjectionContract, primitive.kernel.EffectAuthorityContract, primitive.kernel.LedgerEvent, primitive.kernel.MaterialRef, primitive.kernel.ScopeRef, primitive.kernel.ToolContract, primitive.runtime.defineProjection, primitive.runtime.Ledger, primitive.runtime.LedgerTruthIdentity, primitive.runtime.MaterializedProjectionDefinition, primitive.runtime.MaterializedProjections, primitive.runtime.projectFailureDiagnostics, primitive.runtime.ProjectionIdentifyResult, primitive.runtime.ProjectionReduceContext, primitive.runtime.ProjectionReduceResult, primitive.runtime.projectRunStatus, primitive.runtime.projectRunTrace, primitive.runtime.projectSubmitResult, primitive.runtime.SubmitResult, primitive.runtime.SubmitSpec, primitive.runtime.waitForProjection | agent_os.boundary_commit_rejected, agent_os.dispatch_binding_ref_malformed, agent_os.dispatch_scope_mismatch, agent_os.dispatch_target_not_found, agent_os.legacy_ledger_schema, agent_os.projection_application_error, agent_os.projection_reducer_returned_thenable, agent_os.projection_registry_error, agent_os.projection_wait_timed_out, agent_os.scope_missing, agent_os.stream_identity_error, agent_os.unregistered_projection_kind, agent_os.unsupported_scope_ref | boundary-contract.md, carriers-and-material.md, durable-truth.md, materialized-projections.md, tool-execution-domain.md, backend-cloudflare-do.md, streaming-chatbot.md | packages/backends/protocol/test/contract/runtime-backend-contract.ts, packages/backends/cloudflare-do/test/backend-protocol-contract.test.ts, packages/backends/in-memory/test/backend-protocol-contract.test.ts |
invariant.d10.namespace-integrity | primitive.kernel.BoundaryContract, primitive.kernel.FactOwnerRef, primitive.kernel.LedgerEvent | agent_os.boundary_commit_rejected, agent_os.capability_rejected, agent_os.extension_capability_conflict | boundary-contract.md, durable-truth.md | packages/runtime/test/boundary-commit.test.ts, packages/backends/cloudflare-do/test/extension-capability.worker.test.ts |
invariant.docs.agent-projection | | | verification.md | scripts/generate-docs.mjs, scripts/check-doc-structure.mjs, scripts/check-public-api.mjs |
invariant.ag-ui.sse-axis | primitive.cloudflare-do.createCloudflareLedgerAgUiHistorySseResponse, primitive.cloudflare-do.createCloudflareLedgerAgUiSseResponse | | ag-ui-wire-adapter.md, backend-cloudflare-do.md | scripts/check-ag-ui-sse-axis.mjs, packages/backends/cloudflare-do/test/workspace-host-helpers.test.ts |
invariant.workspace-op.carrier-single-writer | primitive.cloudflare-do.installCloudflareWorkspaceOperationProvider | | backend-cloudflare-do.md, workspace-op.md | packages/carriers/workspace-op/test/workspace-op.test.ts, packages/backends/cloudflare-do/test/workspace-host-helpers.test.ts |
invariant.workspace-job.host-workspace-lifecycle | primitive.cloudflare-do.createCloudflareSandboxWorkspaceEnvResolver, primitive.cloudflare-do.createCloudflareWorkspaceEnvResolver | | backend-cloudflare-do.md | packages/backends/cloudflare-do/test/workspace-host-helpers.test.ts |
invariant.workspace-job.verified-terminal | primitive.cloudflare-do.createCloudflareWorkspaceJobResponse, primitive.runtime.runWorkspaceJobEffect | agent_os.workspace_job_candidate_missing, agent_os.workspace_job_data_plane_failed, agent_os.workspace_job_run_id_mismatch, agent_os.workspace_job_verifier_failed | backend-cloudflare-do.md, workspace-job.md | packages/carriers/workspace-job/test/workspace-job.test.ts, packages/runtime/test/workspace-job.test.ts, packages/backends/cloudflare-do/test/workspace-host-helpers.test.ts |
invariant.workspace-job.failure-observability-join | primitive.cloudflare-do.installCloudflareWorkspaceJobProfile, primitive.runtime.projectWorkspaceJobObservability | | backend-cloudflare-do.md, workspace-job.md | packages/carriers/workspace-job/test/workspace-job.test.ts, packages/runtime/test/workspace-job.test.ts, packages/backends/cloudflare-do/test/workspace-host-helpers.test.ts |