Agents that pause, move, and pick up exactly where they left off.

journal

1. 00

   Durable

   Stop mid-work, restore on another machine, continue without loss. Snapshots are exact, not a best-effort dump.

2. 01

   Portable

   The same guest runs from a phone or embedded device through a laptop to a cluster or the edge. The host changes; the agent does not.

3. 02

   Modular

   Models, files, networks, and other powers are not baked into the core. The host attaches only what that run may use.

4. 03

   Swappable

   Change providers, local vs cloud models, storage, or policy without rewriting the agent. A restore will not silently bind a different plugin version.

5. 04

   Auditable

   Meaningful steps are journaled as they happen. Replay and inspect instead of reconstructing leftover logs.

6. 05

   Least privilege

   Guests start with nothing. Every power is an explicit, attenuable capability. Sensitive data can stay on-device by policy.

7. 06

   Accountable

   Budgets for compute and tokens are first-class. Cost is attributable per run and per sub-goal.

8. 07

   Untrusted by default

   Model-generated code runs in isolation, on a tight budget, with only the capabilities you pass in.

machine

• host

  Resolves plugins, grants capabilities, and holds policy. Replace the host without rewriting the guest.

• core

  An explicit interpreter. It suspends, resumes, meters, journals, snapshots, and enforces grants. It does not know about models or files.

• guest

  The agent program. It only sees what the host placed in its hands.