Sessions

Each session computes the allowed tool set from the account, bindings, and approvals. Agents use account references; secrets stay with the server and venue services.

Events

Every action records:

actionId
stepId
traceId
idempotencyKey
status
timestamp

Writes enter pending approval first. Approve, cancel, and confirm are stored as separate events so they can be traced and replayed.

Workflow

Interrupts, retries, timeouts, and cancels recover from the event log.

Remote tool addresses open after platform checks.