Member API
The authenticated member surface: routes, envelopes, errors, and paging.
Ops API
The admin-gated configuration and aggregate analytics surface, with its fail-closed role check.
Streaming & event contracts
Journal positions, SSE frames, reconnect semantics, and idempotent replay.
Building a connector
The generic surface contract Kaizen walks, and how identity flows through it.
Building a tool or package
Tool definitions, the secretless package runner, and the capability ceiling.
Agent bundles
The agent definition contract, versioning, and shipping an agent with the app.
Extending the shared pipeline
The one rule that keeps agents uniform, and the seams to extend instead.