{"schema_version":"1.1.0","generated_at":"2026-10-27T18:53:28Z","ttl_seconds":60,"spec":"governance/00_CORE/AGENT_COORDINATION_MANIFEST_v1_1_0.md","spec_status":"proposed","canonical_predecessor":"governance/00_CORE/AGENT_COORDINATION_MANIFEST_v1_0_0.md","connection":{"manifest_url":"https://api.dreameros.app/api/v1/agent/manifest","mcp_url":"https://mcp.dreameros.app/mcp","mcp_sse":"https://mcp.dreameros.app/mcp/sse","mcp_resource_uri":"dreameros://manifest","openapi_schema":"https://api.dreameros.app/api/v1/actions/openapi.json","fallback_origin":"https://dreameros-scs-gateway-production.up.railway.app"},"tools":{"total":65,"registry_source":"gateway/app/mcp_server.py ALL_TOOLS + gateway/app/mcp_pro_tools.py TOOL_TIER_MAP (runtime registration)","bootstrap_sequence":["dreameros_session_package"],"enrichment_sequence":["dreameros_session_handoff_read","dreameros_context","dreameros_recall","dreameros_canon"],"by_tier":{"free":{"description":"Universal bootstrap available to every authenticated client.","count":1,"tools":["dreameros_session_package"]},"light":{"description":"Light adds these tools above the free bootstrap.","count":31,"tools":["dreameros_byollm","dreameros_chat","dreameros_check_connection_health","dreameros_code_decision","dreameros_coding_context","dreameros_continuity_chain_get","dreameros_continuity_chain_open","dreameros_continuity_event_append","dreameros_conversation_delete","dreameros_conversation_messages","dreameros_conversations","dreameros_drm_sync","dreameros_get_receipt","dreameros_github_create_issue","dreameros_import_fingerprint","dreameros_intent_clarify","dreameros_list_connections","dreameros_manifest","dreameros_memory_full","dreameros_offload_summary","dreameros_read","dreameros_recall","dreameros_recovery_browse","dreameros_skill","dreameros_skill_doctor","dreameros_tribal","dreameros_upgrade_prompt","dreameros_verify","dreameros_web_login","dreameros_work_order_create","dreameros_work_order_get"]},"dreamweaver_solo":{"description":"Dreamweaver Solo and above (includes HC).","count":30,"tools":["dreameros_account_summary","dreameros_agent","dreameros_canon","dreameros_canon_store","dreameros_connector","dreameros_context","dreameros_forget","dreameros_gmail_create_draft","dreameros_govern","dreameros_hc_command","dreameros_hc_read","dreameros_intent_visibility","dreameros_media_cancel","dreameros_media_create","dreameros_media_list","dreameros_media_status","dreameros_project_fingerprint","dreameros_railway","dreameros_remember","dreameros_session_handoff_read","dreameros_session_handoff_write","dreameros_slop_check","dreameros_space","dreameros_state","dreameros_stripe_read","dreameros_underwrite","dreameros_verify_code_intent","dreameros_web_act","dreameros_work_order_run","dreameros_zapier"]},"pro":{"description":"Pro adds multi-engine tools above Dreamweaver.","count":1,"tools":["dreameros_route"]},"elite":{"description":"Elite tier adds these on top of pro.","count":2,"tools":["dreameros_observe","dreameros_vercel"]}}},"skills":{"total":11,"registry_source":"governance/00_CORE/DREAMEROS_SKILLS_REGISTRY_v1_0_0.md","call_graph":[{"slug":"canon-citer","kind":"agent_type","work_order_template":"t10_agent_canon_citer","tier":"pro","entry_tool":"dreameros_recall","then":"dreameros_canon_store","purpose":"Verify claims against canon before stating operational facts."},{"slug":"market-interference","kind":"operator_skill","tier":"pro","entry_tool":"dreameros_recall","then":"dreameros_space","purpose":"Apply interference-framing to market validation before measurement."},{"slug":"mind-eye-auditor","kind":"agent_type","work_order_template":"t13_agent_mind_eye_auditor","tier":"pro","entry_tool":"dreameros_observe","then":"dreameros_govern","purpose":"Pre-push audit: em dashes, destructive payloads, secrets exposure."},{"slug":"web-operator","kind":"agent_type","work_order_template":"t14_agent_web_operator","tier":"pro","entry_tool":"dreameros_recall","then":"dreameros_verify","purpose":"Verified live-web action with receipt and substrate write."},{"slug":"wolverine","kind":"agent_type","work_order_template":"t15_agent_wolverine","tier":"pro","entry_tool":"dreameros_govern","then":"dreameros_verify_code_intent","purpose":"Self-healing: watches failures, patches, verifies, files PR."},{"slug":"estate-sweeper","kind":"agent_type","work_order_template":"t16_agent_estate_sweeper","tier":"pro","entry_tool":"dreameros_state","then":"dreameros_recall","purpose":"Where are we, measured: live instrument readings in one table, no conclusions."},{"slug":"Plan","kind":"claude_code_agent_type","tier":"pro","entry_tool":"dreameros_context","then":"dreameros_code_decision","purpose":"Architecture planning for implementation strategy."},{"slug":"Explore","kind":"claude_code_agent_type","tier":"light","entry_tool":"dreameros_recall","then":"dreameros_canon","purpose":"Fast read-only codebase search and symbol lookup."},{"slug":"statusline-setup","kind":"claude_code_agent_type","tier":"light","entry_tool":"dreameros_recall","then":"dreameros_state","purpose":"Configure Claude Code status line."},{"slug":"general-purpose","kind":"claude_code_agent_type","tier":"light","entry_tool":"dreameros_recall","then":"dreameros_context","purpose":"Multi-step tasks, research, and complex queries."},{"slug":"claude-code-guide","kind":"claude_code_agent_type","tier":"light","entry_tool":"dreameros_recall","then":"dreameros_canon","purpose":"Answer questions about Claude Code CLI, Agent SDK, Anthropic API."}]},"state":{"cold_start_anchor":{},"canon_fingerprint":"sha256:f4dd522cd901f9c2"},"boot_contract":{"id":"dreameros-universal-bootstrap","version":"1.1.0","authority":"HC > canon > verified live DreamerOS > local evidence > memory > inference","execution_plane":"local_first","governance_plane":"dreameros_gateway","required_start_sequence":["call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer)"],"required_start_tools":["dreameros_session_package"],"rest_fallback_sequence":["POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer"],"read_only_enrichment_sequence":["call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer)","call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context)","call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall)","call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon)"],"read_only_enrichment_tools":["dreameros_session_handoff_read","dreameros_context","dreameros_recall","dreameros_canon"],"rest_enrichment_sequence":["GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer","POST /api/v1/actions/context","POST /api/v1/actions/recall","POST /api/v1/actions/canon"],"required_finish_sequence":["inspect local Git state and the final diff","run proportional tests or checks","write a concise handoff with dreameros_session_handoff_write","read it back with dreameros_session_handoff_read before claiming RECEIPTED"],"conformance_states":{"REGISTERED":"Client configuration names the DreamerOS surface.","CONNECTED":"A current live handshake or tool call succeeded.","HYDRATED":"The client loaded this contract and its current session package.","GOVERNED":"The client used DreamerOS guidance and local evidence during the work.","RECEIPTED":"The outcome was persisted and read back successfully."},"done_definition":{"customer_usable":"A real user can complete the authenticated start-to-finish path without private operator intervention.","investor_usable":"Public-safe evidence identifies the active path, current version, runtime proof, and known limitations.","minimum_state":"RECEIPTED"},"instruction_text":"<dreameros_boot_contract version=\"1.1.0\">\n- Models generate. DreamerOS verifies intent and integrity. The Human Conductor decides.\n- Use the local computer, repository files, Git, tests, and builds as the execution plane whenever possible.\n- Use DreamerOS as the authority for current context, canon, intent, routing, continuity, and receipts.\n- At fresh start, resume, or compaction, the only universal required boot call is dreameros_session_package. It carries the portable Boot Canon and the latest handoff summary available to this tier.\n- After that call, use this ordered read-only enrichment when relevant: dreameros_session_handoff_read when the package reports a handoff is present; then dreameros_context with SCS included and treated as current state; then dreameros_recall scoped to the current project and topic; then dreameros_canon for relevant rules or architecture. SCS returned by dreameros_context is the current state; dreameros_state is not a universal boot requirement.\n- If DreamerOS is unavailable, report BLOCKED for gateway-dependent work, continue local work as STANDALONE, and never fabricate connection, hydration, synchronization, or receipts.\n- A statement of fact carries its reading, the time it was read, and the instrument, in the same sentence. A sample is never summarised as every, all, always, none or never unless the instrument enumerated the whole set. If it was not measured this session, say UNKNOWN and name the instrument that would settle it.\n- Before completion: inspect local Git and diffs, run proportional checks, write a concise handoff with dreameros_session_handoff_write, and read it back with dreameros_session_handoff_read.\n- Status vocabulary: REGISTERED means configured; CONNECTED means a live handshake; HYDRATED means this contract and the current session package were loaded; GOVERNED means work followed them; RECEIPTED means the outcome was persisted and read back.\n- Do not call a client DONE unless its real start-to-finish path is RECEIPTED and usable by a customer without private operator intervention. Investor-usable claims also require public-safe evidence and named limitations.\n</dreameros_boot_contract>"},"boot_canon":{"schema_version":"dreameros-session-package-stable-prefix-v1","version":"v2.6.0","sha256":"3fa61b2d3be67e2a433624f22b1ced3c16d5984119026ff27e99295d8c6f4050","hash_normalization":"LF","canary_ids":["R1","R1a","R1n","R1b","R1c","R1d","R1e","R1f","R1g","R1h","R1i","R1j","R1k","R1l","R1m","R2","R3","R4","R5","R7","R7a","R9","R10","R13","R15","R16","R17","R19","R20","R26","R28","R27","R6","R8","R11","R12","R18","R21","R22","R23","R24","R25","R14","HC-DEFINITION-OF-DONE"],"source_provenance":{"repository":"gbude-sudo/dreameros-agent-plugin","path":"bootpack/SOURCE-dreameros-boot-canon.md","generator":"bootpack/build-boot-pack.ps1"},"portable_chars":48305,"continuation":{"part_count":5,"max_part_chars":12000,"max_serialized_part_bytes":12000,"parts":[{"part":1,"chars":9670,"sha256":"05cccf1df6d3c9697a2d07559a65ca4db7222b9bdbb92d1c8be3c29a88526a2f"},{"part":2,"chars":9686,"sha256":"f16c7e4d0ccd16ef23d74a330897a0e84c52b705578e67c614d682fe69d521f2"},{"part":3,"chars":9724,"sha256":"e3b54e27e9175067520f29d1a77e0e06fac407d25299ab963f3a9da3297c13c8"},{"part":4,"chars":9694,"sha256":"a697669088c72daf0c9b8c338173a2e4c809a8cf8987fbe236d0f9e9e3b842ab"},{"part":5,"chars":9531,"sha256":"b50b28bcace3de4b4226b93851ff762183c2f91cec33eb510e32aec5dbb1237c"}],"resource_uris":["dreameros://boot-canon/part/1","dreameros://boot-canon/part/2","dreameros://boot-canon/part/3","dreameros://boot-canon/part/4","dreameros://boot-canon/part/5"],"actions_path_template":"/api/v1/actions/boot-canon/{part}","reassemble_sha256":"3fa61b2d3be67e2a433624f22b1ced3c16d5984119026ff27e99295d8c6f4050","hash_normalization":"LF"}},"bootstrap_instructions":"Discovery: GET /api/v1/agent/manifest (no auth) to load the capability registry. Required hydration sequence from boot_contract, in exact order: Step 1: call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer). Optional read-only enrichment from boot_contract, in exact order: Step 1: call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer). Step 2: call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context). Step 3: call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall). Step 4: call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon). After hydration, GET /api/v1/agent/manifest/me (auth required) to load user context including the last 5 rolling context entries and project anchors. If you know the conversation_id, GET /api/v1/agent/session/{conversation_id} (auth required) to load the full ordered arc for that conversation (up to 50 entries, ASC). Use local files, Git, tests, and builds as the execution plane. Write project:<slug> anchor:checkpoint tags at key milestones. Required finish sequence from boot_contract: Step 1: inspect local Git state and the final diff. Step 2: run proportional tests or checks. Step 3: write a concise handoff with dreameros_session_handoff_write. Step 4: read it back with dreameros_session_handoff_read before claiming RECEIPTED. A statement of fact carries its reading, the time it was read, and the instrument, in the same sentence; a sample is never summarised as every, all, always, none or never unless the instrument enumerated the whole set; if it was not measured this session, say UNKNOWN and name the instrument that would settle it.","entry_points":{"rest_manifest":"GET /api/v1/agent/manifest - no auth, cached 60s","rest_manifest_me":"GET /api/v1/agent/manifest/me - Bearer auth required, returns system manifest + user rolling context + project anchors, Cache-Control: private, no-store","rest_session":"GET /api/v1/agent/session/{conversation_id} - Bearer auth required, returns full conversation arc ordered ASC up to 50 entries, Cache-Control: private, no-store","mcp_clients":"On connect: resources/list shows dreameros://manifest. Then: resources/read dreameros://manifest. Then follow boot_contract.required_start_sequence in exact order: Step 1: call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer). Use boot_contract.read_only_enrichment_sequence when relevant: Step 1: call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer). Step 2: call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context). Step 3: call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall). Step 4: call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon). At finish: Step 1: inspect local Git state and the final diff. Step 2: run proportional tests or checks. Step 3: write a concise handoff with dreameros_session_handoff_write. Step 4: read it back with dreameros_session_handoff_read before claiming RECEIPTED.","sdk":"Include manifest_url in system prompt. Agent fetches manifest/me on first turn to bootstrap with user context.","ide":"Claude Desktop, Codex, Cursor, Windsurf, Zed, and compatible clients: configure the advertised MCP URL using the transport supported by that client, then load the boot contract and session package.","gpt_actions":"Load /api/v1/actions/openapi.json. It includes the public manifest plus the authenticated session-package and structured handoff routes. The GPT reads the manifest, then follows boot_contract.required_start_sequence and the ordered read-only enrichment fields."},"governance":{"summary":"The manifest tells a consumer WHAT exists. These checked endpoints put the consumer's traffic THROUGH the pipeline: prompt restructuring, integrity checks, intent fidelity verification, and a receipted audit trail. Reading the manifest is step one; sending traffic through these endpoints is what makes a consumer intent-verified.","governed_chat":{"stream":"POST /api/v1/chat/stream - SSE. Full pipeline: integrity pre-checks, prompt restructure, routing, LLM call, integrity post-checks, fidelity metadata events. Bearer auth.","sync":"POST /api/v1/chat - non-streaming, full integrity-checked response. Bearer auth."},"granular_checks":{"ede_restructure":"POST /api/v1/ede/restructure - intent archaeology, prompt restructuring before the engine call.","daim_check":"POST /api/v1/daim/check - hallucination, filler, silent-drop, depth-proportionality, em-dash checks.","ifp_verify":"POST /api/v1/ifp/verify - three-axis intent fidelity verification (intent match, no surprise side effects, on-goal).","govern":"POST /api/v1/govern - one-call verified pass combining the checks above."},"minds_eye_inputs":["cognitive_fingerprint - carried on the SCS state snapshot","intent - request classification from the prompt restructure stage (question / request / comparison / troubleshoot / explore / decide)","feeling - emotion signal from the prompt restructure stage (urgency / stress / casual / gratitude / formal / neutral)","depth - how specific and broad the request is, judged on the way in and audited on the way out"],"receipts":"Every tier can mint CTCI v1.0.0 receipts for checked chat and successful MCP tool calls. The free plan gets 25 new receipts per UTC day; paid plans are unlimited. One session-package root call uses at most one receipt. Its hash-bound continuation parts use no extra receipt quota."},"consumer_bootstrap":{"summary":"Each entry listed directly here is a live on-ramp: read the manifest, then send traffic through the checked endpoints above. Everything named directly is usable today. On-ramps that are not yet live live under roadmap and must never be represented as available.","rest_api":{"status":"live","steps":["GET /api/v1/agent/manifest to load the capability registry.","Run the universal boot requirement: Step 1: call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer).","Enrich with ordered read-only calls when relevant: Step 1: call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer). Step 2: call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context). Step 3: call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall). Step 4: call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon).","GET /api/v1/agent/manifest/me with Bearer auth to load user context (rolling context + project anchors).","POST /api/v1/chat/stream with Bearer auth to send verified traffic."],"governed_endpoint":"POST /api/v1/chat/stream"},"mcp_client":{"status":"live","steps":["resources/read dreameros://manifest to load the registry.","Run the universal boot requirement: Step 1: call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer).","Enrich with ordered read-only calls when relevant: Step 1: call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer). Step 2: call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context). Step 3: call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall). Step 4: call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon).","Call the dreameros_chat tool (or any intent-verified tool) over MCP."],"governed_endpoint":"dreameros_chat MCP tool"},"gpt_actions":{"status":"live","steps":["Load /api/v1/actions/openapi.json; the boot routes are in the curated schema.","GET /api/v1/agent/manifest on schema load.","Run the universal boot requirement: Step 1: call dreameros_session_package (REST: POST /api/v1/actions/session-package with a dros credential, or GET /api/v1/governance/session-package with a signed user bearer).","Enrich with ordered read-only calls when relevant: Step 1: call dreameros_session_handoff_read when the package reports a handoff is present (REST: GET /api/v1/actions/session-handoff/latest with a dros credential, or GET /api/v1/session/handoff/latest with a signed user bearer). Step 2: call dreameros_context with SCS included and treated as current state (REST: POST /api/v1/actions/context). Step 3: call dreameros_recall scoped to the current project and topic (REST: POST /api/v1/actions/recall). Step 4: call dreameros_canon for relevant rules or architecture (REST: POST /api/v1/actions/canon).","POST /api/v1/govern or /api/v1/chat with the user Bearer token."],"governed_endpoint":"POST /api/v1/govern"},"roadmap":{"summary":"Consumer on-ramps that are not yet live. Listed for transparency only; never represent these as available. Each moves up to a direct consumer_bootstrap entry when its bootstrap path ships.","sdk":{"status":"alpha","package":"dreameros-hooks (python) / @dreameros/hooks (typescript), 0.1.0 alpha","steps":["GatewayClient.bootstrap() loads the public manifest and authenticated user context from a git install.","Add session-package hydration and a conformance receipt.","Publish signed packages to PyPI and npm after HC supplies the release credentials."],"governed_endpoint":"POST /api/v1/govern"},"connector":{"status":"planned","steps":["Expose dreameros_manifest_bootstrap or the equivalent manifest read in the target connector.","The per-user connect flow is already live: customers link accounts via GET /api/v1/integrations/{provider}/oauth/start (OAuth) or POST /api/v1/integrations/{provider}/paste-token (paste), listed via GET /api/v1/integrations/connections. The gateway is the sole credential custodian per GATEWAY_OWNS_CONNECTIONS_v1_0_0.","Still planned: agent-side auto-discovery that reads connectable providers from the manifest and routes connector traffic through /api/v1/govern without a per-user connect step. That auto-discovery on-ramp is what remains; the per-user connect flow is not a blocker."],"governed_endpoint":"POST /api/v1/govern"},"desktop_agent":{"status":"alpha","steps":["Register a public OAuth client through POST /oauth/register.","Complete the authorization-code flow with S256 PKCE.","Create a user-scoped installation at POST /api/v1/desktop/installations.","Send boot_contract_version, manifest_schema_version, boot_pack_version, boot_pack_sha256, and bounded adapter observations; then apply only the declarative repair actions returned by the gateway.","Send real vendor MCP traffic through the local agent proxy with the desktop.runtime OAuth bearer and X-DreamerOS-Installation header."],"governed_endpoint":"POST /api/v1/desktop/installations/{installation_id}/verify","release_metadata":"GET /api/v1/desktop/release","limitations":["Signed desktop release metadata is not configured on this runtime.","The server-owned expected desktop boot pack is not configured.","A heartbeat alone is not attestation. Receipt issuance requires a later authenticated MCP request carrying X-DreamerOS-Installation for the exact user, OAuth client, and active installation."]},"base44":{"status":"planned validation","steps":["Configure the public OpenAPI integration with user auth.","Load the universal boot contract and authenticated context.","Complete a real customer start-to-finish verified call and receipt."],"governed_endpoint":"POST /api/v1/govern"}}}}