OpenWOP openwop.dev

Proposals

OpenWOP RFCs

231 proposals that change the protocol. Each one moves from Draft to Active to Accepted; some end Withdrawn or Superseded.

Within a major version every RFC is additive or a labelled safety fix. Breaking changes wait for the next major.

How an RFC is decided →The RFC template →

Draft
1open for comment
Active
3agreed, being built
Accepted
226implemented and tested
Superseded
1replaced by a later RFC
No.RFCTopicStatus
0001 The RFC Process Governance Accepted
0002 Agent Identity and Reasoning Events Agent Accepted
0003 Agent Packs Agent Accepted
0004 Memory Layer Agent Accepted
0005 Multi-Turn Conversation Agent Accepted
0006 Run Orchestrator Agent Accepted
0007 Dispatch (core.dispatch Node Pattern) Agent Accepted
0008 WASM ABI for Cross-Language Node Packs Other Accepted
0009 Production-Profile Conformance Conformance Accepted
0010 Auth-Profile Conformance Auth Accepted
0011 Auth-Scoped Discovery Advertisement Auth Accepted
0012 Memory Compaction Profile Agent Accepted
0013 Workflow-chain packs Composition Accepted
0014 host.fs capability Host capability Accepted
0015 host.kvStorage capability Host capability Accepted
0016 host.tableStorage capability Host capability Accepted
0017 host.queueBus capability Host capability Accepted
0018 host.sql + host.vectorStore + host.searchIndex capabilities Host capability Accepted
0019 host.blobStorage + host.cache capabilities Host capability Accepted
0020 host-side MCP server composition Composition Accepted
0021 AI Envelope Primitive Envelope Accepted
0022 core.dispatch + core.subWorkflow runtime variable mapping Agent Accepted
0023 Conformance Agent-Event Emitters Agent Accepted
0024 Streaming agent.reasoned Deltas Agent Accepted
0025 Test-mode Registry Namespace Composition Accepted
0026 provider.usage Event Other Accepted
0027 Prompt Templates Other Accepted
0028 Prompt Library Endpoints + Prompt Pack Kind Composition Accepted
0029 Prompt Override Hierarchy + agent.promptResolved event Agent Accepted
0030 Envelope reasoning field + Tier 1 Structured-Output Subset (informative) Agent Accepted
0031 Envelope variant discrimination + model-capability declarations Envelope Accepted
0032 Envelope-reliability run-event vocabulary Envelope Accepted
0033 Envelope-completion contract (truncation vs schema-violation distinction) Envelope Accepted
0034 OTel collector test seam + secret-leakage invariant promotion Auth Accepted
0035 Sandbox execution contract for pack-loaded typeIds Composition Superseded
0036 Multi-region idempotency + cross-engine append-ordering guarantees Other Accepted
0037 Multi-agent execution model + replay determinism under nondeterministic models Agent Accepted
0038 OpenWOP Working Group charter Other Draft
0039 Multi-agent execution model version: 2 Agent Accepted
0040 Multi-agent execution model version: 3 Agent Accepted
0041 Multi-agent execution model version: 4 Agent Accepted
0042 Experimental capability tier Other Accepted
0043 Registry and extension-policy Composition Accepted
0044 Confidence-escalation interrupt-kind advertisement (clarification to RFC 0039 §A) Interrupt Accepted
0045 Connector pack manifest & action model Composition Accepted
0046 host.credentials capability Other Accepted
0047 host.oauth — OAuth 2.0 authorization flows for connectors Auth Accepted
0048 Tenant · Workspace · Principal identity model Other Accepted
0049 RBAC scopes & authorization decisions Other Accepted
0050 SAML / SCIM (and optional LDAP) enterprise identity profiles Other Accepted
0051 Approval & deployment-gate primitive Other Accepted
0052 Scheduling & time-based triggers (promote + extend RFC 0017) Other Accepted
0053 Dead-letter routing & failure sinks Other Accepted
0054 Run diff & execution comparison Other Accepted
0055 Multimodal envelope variants & rendering hints (extend RFC 0031) Envelope Accepted
0056 Run feedback & annotation event (run.annotated) Other Accepted
0057 Memory write-attribution event (memory.written) Agent Accepted
0058 Run execution bounds (runTimeoutMs + maxLoopIterations) Other Accepted
0059 Agent workspace (host.workspace) Agent Accepted
0060 Host heartbeat capability (host.heartbeat) Other Accepted
0061 Stateful agent-loop lifecycle (multiAgent.executionModel.version: 5) Agent Accepted
0062 Scheduled memory distillation Agent Accepted
0063 Sub-run output attestation & merge gating (core.subWorkflow.outputAttestation) Other Accepted
0064 Tool invocation hooks & per-tool authorization (host.toolHooks) Other Accepted
0065 Workflow node primary-output annotation Composition Accepted
0066 x-openwop-form Vendor Extension on Pack configSchema Composition Accepted
0067 Provider-catalog conventions Auth Accepted
0068 Memory consolidation + standing commitments Agent Accepted
0069 Host-extension safety contract for exec-class tools Other Accepted
0070 Agent Manifest Runtime Capability (agents.manifestRuntime) Agent Accepted
0071 Artifact-Type Packs and AI Chat Card Packs Other Accepted
0072 Agent Inventory + Dispatch Normative Surface (amends RFC 0070) Agent Accepted
0073 Capability families are document-root properties of /.well-known/openwop Other Accepted
0074 Tenant-Scoped Manifest-Agent Inventory (amends RFC 0072) Agent Accepted
0075 Artifact-Type Packs Other Accepted
0076 Pack runtime-requirements declaration + host-provided safe-fetch Composition Accepted
0077 Agent Run Lifecycle + Live Manifest Dispatch Agent Accepted
0078 Portable Tool Catalog + Tool Session Contract Other Accepted
0079 Credential Provenance + Egress Policy Other Accepted
0080 Agent Memory Capability Reconciliation Agent Accepted
0081 Agent Evaluation, Scorecards, and Promotion Gates Agent Accepted
0082 Agent Deployment Lifecycle Agent Accepted
0083 Durable Trigger + Channel Bridge Profile Other Accepted
0084 Budget, Quota, and Cost Policy Other Accepted
0085 openwop-agent-platform Meta-Profile Agent Accepted
0086 Standing Agent Roster + Workflow Portfolio Agent Accepted
0087 Agent Org-Chart Agent Accepted
0088 openwop-core-standard Other Accepted
0089 Conformance certification bundle Conformance Accepted
0090 Agent verifier turn + convergence criteria (multi-agent execution version: 6) Agent Accepted
0091 Multimodal perception input on ctx.callAI (typed content parts) Other Accepted
0092 Agent-level capability requirements (AgentManifest.requiresCapabilities) Agent Accepted
0093 Protocol hardening Auth Accepted
0094 Wire-shape reconciliation Envelope Accepted
0095 Connection packs Other Accepted
0096 Reviewable Learning Other Accepted
0097 Standing Goals and Judge-Based Continuation Other Accepted
0098 Agent Platform Portability Agent Accepted
0099 External-Event Trigger Ingestion (webhook / email / form sources) Transport Accepted
0100 Async / Durable A2A Tasks Other Accepted
0101 Multi-party group conversation (shared transcript, speaker attribution) Agent Accepted
0102 A2UI agent-authored interface surfaces Agent Accepted
0103 Localized Content Surface Other Accepted
0104 Portable HITL approver routing Interrupt Accepted
0105 Speech synthesis adapter (ctx.callSpeechSynthesizer) Other Accepted
0106 Real-time voice session profile Other Accepted
0107 Publishable declarative pack kinds (registry version manifest) Composition Accepted
0108 Self-hosted / OpenAI-compatible provider class (aiProviders.selfHosted[]) Other Accepted
0109 Conversation-turn model provenance (agent.model) Agent Accepted
0110 Channel presence (online + typing) Other Accepted
0111 Context Economy Auth Accepted
0112 Compact Tool Projection Other Accepted
0113 Memory Injection Budget Agent Accepted
0114 A2UI Surface Deltas Other Accepted
0115 Run Transport Economy Transport Accepted
0116 Portable Prompt-Prefix Cache Other Accepted
0117 Front-End Plugin Packs (Sandboxed UI Extensions) Other Accepted
0118 Parallel Sub-Workflow Fan-Out and Join Composition Accepted
0119 Front-End Plugin Isolation as a Mechanism-Neutral Property (amends RFC 0117) Other Accepted
0120 Connection-pack provider apiHosts Composition Accepted
0121 Subscription-reuse provider auth mode (aiProviders.authModes: "subscription") Auth Active
0122 Self-hosted runner (remote-driven local execution) Other Accepted
0123 Connection-pack provider vendor Composition Accepted
0124 Portable per-run parameter deferral for workflow-chain packs Composition Accepted
0125 Chain-pack FragmentEdge.triggerRule (fan-in / error-routing for workflow-chain packs) Composition Accepted
0126 Data-parallel core.dispatch Agent Accepted
0127 Streaming & CDC trigger sources Other Accepted
0128 Purpose-propagation Other Accepted
0129 Data-residency Other Accepted
0130 Canvas Preview Plugin Surface (amends RFC 0117) Other Accepted
0131 Agent-manifest role and the Skill profile Agent Accepted
0132 Anonymous-actor authorization for public agent surfaces Agent Accepted
0133 Workflow-chain composition Composition Accepted
0134 Edge conditions Other Accepted
0135 Workflow-chain gallery visibility Composition Accepted
0136 WorkflowVariable.format Composition Accepted
0137 Form-content packs Composition Accepted
0138 Vendor-extension hatch on pack manifests Composition Accepted
0139 Host-side witness for pack-manifest extension opacity Composition Accepted
0140 Replay side-effect suppression Other Accepted
0141 Legacy artifact-type identifiers Other Accepted
0142 The store-gated artifact.created emission witness Other Accepted
0143 Tool-result trust is untrusted-by-default and monotone through composition Composition Accepted
0144 Which host capability families the core schema declares Host capability Accepted
0145 registrationSource as a per-type artifact capability facet Other Accepted
0146 contractProvenance Other Accepted
0147 Protocol Integrity and Standards-Readiness Program Other Accepted
0148 Non-Vacuous Conformance and Certification Evidence Conformance Accepted
0149 Machine-Contract and Version Reconciliation Other Accepted
0150 Effect Identity, Replay, and Split-Brain Safety Other Accepted
0151 Compensation and Partial-Failure Profile Other Accepted
0152 A2A 1.0 Versioned Composition Composition Accepted
0153 MCP 2026-07-28 Versioned Composition Composition Accepted
0154 Workload Identity, Delegation, Telemetry, and Provenance Assurance Envelope Accepted
0155 Core Profile and Extension Discipline Other Accepted
0156 Governance, Independent Assurance, and Claims Policy Governance Accepted
0157 Chain fragments carry compensation (RFC 0013 revision × RFC 0151 §B) Composition Accepted
0158 Durable Execution and Disaster-Recovery Qualification Other Accepted
0159 SCIM ⟷ SAML subject linking (the combined-deployment leaver contract) Other Accepted
0163 SCIM ⟷ SAML subject-linking hardening Other Accepted
0164 Mandatory SCIM ⟷ SAML subject linking for combined hosts Other Accepted
0165 v2 preparation Other Accepted
0166 Register dispositions, terminal RFC states, and witness classes on the assurance registers Other Accepted
0167 OpenWOP v2 — the program RFC Other Accepted
0168 v2 evidence and conformance Conformance Accepted
0169 v2 discovery and capabilities Other Accepted
0170 v2 identity — Subject required, one binding pipeline per lane, the link as a typed record, grammars for every id and handle, token agility Auth Accepted
0171 v2 wire envelope Composition Accepted
0172 v2 versioning and release Other Accepted
0173 v2 security defaults Other Accepted
0174 v2 governance Governance Accepted
0175 v2 transports and embedded protocols Transport Accepted
0176 v2 persisted data and coexistence Other Accepted
0177 v2 registry, packs, and the extension tail Composition Accepted
0178 v2 assurance registers and deprecation machinery Other Accepted
0179 Root preferredVersion Other Accepted
0180 Vendor-org registration Composition Accepted
0181 Vendor path namespace Other Accepted
0182 listRuns — a portable, tenant-scoped, paginated run list under major 2 Other Accepted
0183 interruptResolved cannot record four of the five resume actions Interrupt Accepted
0184 a tenant-bound id cannot survive a front door as %2F Other Accepted
0185 v2 closed 53 run-event payload defs that v1 left open, with no hatch and no migration row Other Accepted
0186 three payload seats the hosts measured and the corpus lacked Other Accepted
0187 four bindings the hosts found Other Accepted
0188 listWebhookDeadLetters Transport Accepted
0189 the normative home of a v2 core family Other Accepted
0190 the kernel budget measures what the home gate accepts Other Accepted
0191 a home declares the family, and the family declares the home Other Accepted
0192 a facet is advertised by the presence of its key Other Accepted
0193 a capability record is an object, so a v1 array needs a seat Envelope Accepted
0194 a run's terminal event is emitted once and ends its forward execution Other Accepted
0195 a certification bundle's declarations are signed, and an unobserved requirement is blocked Other Accepted
0196 callbackUrl is refused or delivered under the egress guard, and an embedded IPv4 address is judged as IPv4 Other Accepted
0197 v2 surfaces are retired, never reshaped Other Accepted
0198 the MCP server mount maps long runs to MCP Tasks, and a disconnect cancels only the run it owns Other Accepted
0199 the host as an OAuth client, and the credential interrupt Auth Accepted
0200 the host as an OAuth protected resource Auth Accepted
0201 Standard Webhooks as an opt-in companion signature scheme, with a signed delivery id, multi-signature rotation and endpoint verification Other Accepted
0202 each inventoried agent is published as an A2A Agent Card Agent Accepted
0203 a remote node-pack runtime may name its MCP server by its registry record Composition Accepted
0204 the v2 host MCP client returns MCP results Other Accepted
0205 run artifacts and conversation content speak A2A Parts Agent Accepted
0206 locale keys accept the BCP 47 tags the host negotiates Other Accepted
0207 trace context across MCP and A2A, and debug-bundle spans that join the trace Envelope Accepted
0208 v2 homes the A2A and MCP operation mappings Other Accepted
0209 v2 A2UI surfaces are A2UI v0.9 Other Accepted
0210 a lane's revocation rule is measured, and a host that only honours exp says so Other Accepted
0211 an A2A error's details are an ErrorInfo, and an A2A interface never answers in the OpenWOP envelope Envelope Accepted
0212 canonical JSON is RFC 8785 JCS, and a certification preimage does not depend on the machine that computed it Other Accepted
0213 three outcomes the v2 core never stated Other Accepted
0214 an A2A push credential is a destination credential, and a push is an egress like any webhook Transport Accepted
0215 a webhook delivery does not wait on another subscription's receiver, and an unregistered subscription gets no further attempts Transport Accepted
0216 a colocated companion bundle is marked, and witnesses only the rows that need the suite's own issuer Other Accepted
0217 after a subscription is unregistered, its dead-letter read answers as though it never existed Other Accepted
0218 an audit checkpoint signs its Merkle root, and the root is pinned Other Accepted
0219 a client announces the protocol version it implements in OpenWOP-Client-Version Other Accepted
0220 an extension family graduates on evidence a script can read Other Accepted
0221 a webhook secret the host generates is returned once Auth Accepted
0222 v2 registry operations Composition Active
0223 a rejected approval gate fails closed, and the failure is routable Other Accepted
0224 audit-log integrity gets a v2 home Other Accepted
0225 a webhook host may advertise how long a delivery can keep retrying Transport Accepted
0226 three run-failure codes the hosts share, registered Other Accepted
0227 a generated restatement of a registry is not kernel prose Composition Accepted
0228 the error codes v1 named for host services, decided for v2 Other Active
0229 a production host can witness secret resolution without an oracle Auth Accepted
0230 Inbound webhook ingest contract Transport Accepted
0231 a host says which budget exhaustion behaviours it serves Other Accepted
0232 a trigger subscription's dead-lettered deliveries are readable Other Accepted
0233 a host's connection providers and refused registrations are readable Composition Accepted
0234 an accepted RFC may set v1 end-of-support earlier than the computed date Other Accepted