ESAA / PROTOCOL 0.4.1

Agents propose. The protocol decides.

ESAA turns autonomous execution into a governed process: every intent is validated, recorded and projected before producing effects.

AGENTproposesORCHESTRATORrecordsEVENT STOREprojectsREAD MODELS

01 / WHY

Autonomy without verifiable memory is speed carrying risk.

Agents are probabilistic. Operational systems need deterministic rules. ESAA separates both worlds so decisions can be audited, reproduced and reviewed.

01

Intent, not unrestricted access

Agents emit structured results under contract.

02

Single writer

Only the Orchestrator admits events and applies effects.

03

Immutable history

Completed tasks are not rewritten; corrections become new events.

02 / ARCHITECTURE

One source of truth. Many dependable views.

AgentJSON intent
Orchestratorvalidates + applies
Event Storeappend-only log
Projectionsroadmap · issues · lessons

The append-only event store is canonical. Roadmap, issues and lessons are rebuildable projections — useful for reading, never for manual editing.

03 / WORKFLOW

Work moves through explicit transitions.

Watch a task move through the protocol. Each transition admits a new event; the event store preserves history while the roadmap reflects the current state.

ESAA RUNTIME / LIVE
TASKSITE-DEMO-001todo
01todoclaim
02in_progresscomplete
03reviewreview
04doneimmutable
EVENT STOREAPPEND ONLY
  1. TASKtask.created
  2. CLAIMtask.claimed · agent-impl
  3. OUTPUTtask.completed · 2 files
  4. REVIEWreview.approved · agent-qa
EVENTS ADMITTED1
PROJECTIONCURRENT
CHAINVERIFIED

04 / QUICKSTART

Start with a clean workspace.

python -m pip install --upgrade --pre esaa-core
mkdir esaa-demo && cd esaa-demo
esaa bootstrap --profile public
esaa init
esaa verify
esaa eligible

The first expected signal is verify_status: ok. The runtime operates locally over the governance directory and does not require MCP.

05 / RUNNERS

Runners are identified; authority remains in the protocol.

codexrunner_id

Provenance on every admitted event.

claude-coderunner_id

The same contract regardless of surface.

local-scriptrunner_id

Deterministic automation leaves receipts too.

06 / TRUST

Trust is a verifiable property.

  • Append-onlyOrdered events without manual editing.
  • ReplayState rebuilt from history.
  • HashProjections verified against the source.
  • Fail-closedInvalid outputs are rejected before effects.

07 / DOCS

Continue through the canonical artifacts.