{
  "title": "UAIX Agent Capability Framework",
  "version": "3.117.0",
  "generated_at_utc": "2026-06-15T00:00:00Z",
  "canonical_route": "https://uaix.org/en-us/agent-capability-framework/",
  "markdown_route": "https://uaix.org/agent-capability-framework.md",
  "json_route": "https://uaix.org/agent-capability-framework.json/",
  "profile_identifiers": [
    "uaix.ability-profile.v1",
    "uaix.startup-packet.v1",
    "uaix.suspension-packet.v1",
    "uaix.receiver-brief.v1",
    "uaix.memory-firewall-policy.v1",
    "uaix.no-op-trigger-catalog.v1",
    "uaix.authority-boundary.v1",
    "uaix.conformance-evidence.v1",
    "uaix.evaluation-packet-summary.v1",
    "uaix.ability-profile.l0.v1",
    "uaix.ability-profile.l1.v1",
    "uaix.ability-profile.l2.v1",
    "uaix.ability-profile.l3.v1",
    "uaix.ability-profile.l4.v1",
    "uaix.ability-profile.l5.v1",
    "uaix.ability-profile.l6.v1",
    "uaix.evaluation.expression-concept-review.v1",
    "uaix.evaluation.resource-economy-trace.v1",
    "uaix.evaluation.operator-decision.v1",
    "uaix.evaluation.no-op-justification.v1",
    "uaix.evaluation.local-sandbox-safety-review.v1",
    "uaix.evaluation.memory-ecosystem-handoff.v1",
    "uaix.evaluation.de11-benchmark-summary.v1",
    "uaix.package.v0.1",
    "uaix.persona.v1"
  ],
  "levels": [
    {
      "level": "L0",
      "label": "Rule-Based Workflow / static format follower",
      "description": "Reads static public text, copied snippets, Markdown, sitemap entries, and tiny JSON records. It follows declared formats but cannot infer hidden context or validate complex evidence.",
      "interoperability": "Publish plain HTML, Markdown, llms entries, sitemap entries, and one-hop JSON summaries.",
      "requiredEvidence": [
        "canonical public route",
        "profile identifier",
        "human review URL"
      ],
      "communicationModes": [
        "read-only public GET",
        "copyable text"
      ],
      "forbiddenAssumptions": [
        "JavaScript support",
        "POST support",
        "tool calls",
        "credential checks",
        "memory adoption"
      ],
      "noOp": "Use no-op plus human review when schema, authority, or route intent is ambiguous.",
      "startupPacket": "Required for startup-packet configuration as a one-page read order only.",
      "suspensionPacket": "Not expected; cite unreadable route or unsupported capability.",
      "receiverBrief": "Public route, first acceptable response, and escalation URL.",
      "validation": "JSON parse only when a tiny summary is provided; otherwise human review.",
      "localEndpointMapping": "public-static-only",
      "carcinusContinuity": "none",
      "teleodynamicBoundary": "No claim about autonomy or intelligence; this is a format-following category.",
      "safePacketTypes": [
        "receiver brief",
        "no-op justification"
      ],
      "unsafeOverclaim": "Claiming L0 can validate credentials or safely execute a linked tool."
    },
    {
      "level": "L1",
      "label": "Basic Responder / prompt-bound assistant",
      "description": "Fetches public JSON and follows explicit instructions inside a prompt-bound exchange, but cannot safely approve writes or private actions.",
      "interoperability": "Publish compact JSON digests, schemas, examples, no-op rules, and direct human review paths.",
      "requiredEvidence": [
        "profile identifier",
        "schema URL",
        "fixture URL",
        "human review URL"
      ],
      "communicationModes": [
        "read-only public GET",
        "compact JSON",
        "Markdown examples"
      ],
      "forbiddenAssumptions": [
        "approval authority",
        "runtime safety",
        "private network access",
        "credential validation"
      ],
      "noOp": "Stop and return human_review_required when requested work needs authority not present in the packet.",
      "startupPacket": "Read order and allowed public routes.",
      "suspensionPacket": "Short stopped-state record with reason.",
      "receiverBrief": "Read order, first acceptable response, domain boundaries, escalation trigger.",
      "validation": "Check JSON shape, declared profile, and required fields.",
      "localEndpointMapping": "public-read-only-diagnostics",
      "carcinusContinuity": "external identity marker may be cited but not verified by UAIX",
      "teleodynamicBoundary": "No autonomy claim; this is prompt-bound response behavior.",
      "safePacketTypes": [
        "ability profile",
        "receiver brief",
        "no-op justification"
      ],
      "unsafeOverclaim": "Treating a valid packet as permission to store memory or make a tool call."
    },
    {
      "level": "L2",
      "label": "Tool User / approval-bound co-pilot requiring human approval",
      "description": "Understands schemas and examples and may prepare tool-call proposals, but write-capable behavior still requires explicit human approval.",
      "interoperability": "Publish ability profile, startup packet, receiver brief, validator fixture, and human approval gate.",
      "requiredEvidence": [
        "ability profile",
        "schema validation result",
        "approval requirement",
        "integrity checksum"
      ],
      "communicationModes": [
        "public GET",
        "POST JSON proposal",
        "validator result"
      ],
      "forbiddenAssumptions": [
        "self-approval",
        "runtime safety",
        "unreviewed memory promotion"
      ],
      "noOp": "Prepare a no-op justification when approval, integrity, or provenance is missing.",
      "startupPacket": "Profile, boundaries, allowed proposal routes, and required approval language.",
      "suspensionPacket": "Pending approval or blocked reason plus trace ID.",
      "receiverBrief": "Read order, allowed proposal surfaces, first acceptable response, escalation triggers.",
      "validation": "Schema validation plus no-op trigger scan.",
      "localEndpointMapping": "proposal-only-with-human-approval",
      "carcinusContinuity": "continuity marker may be referenced only as external data",
      "teleodynamicBoundary": "No claim that approval-bound tool proposal is autonomous intelligence.",
      "safePacketTypes": [
        "startup packet",
        "receiver brief",
        "operator decision"
      ],
      "unsafeOverclaim": "Calling a tool because the packet says tool use is supported but no approval exists."
    },
    {
      "level": "L3",
      "label": "Bounded Operator / autonomous within explicit limits",
      "description": "Can operate inside stated limits when authority, policy, timeout, provenance, and evidence are explicit.",
      "interoperability": "Publish bounded authority, task status, blocker, final report, and conformance evidence records.",
      "requiredEvidence": [
        "authority boundary",
        "task status",
        "integrity checksum",
        "provenance trace",
        "human escalation path"
      ],
      "communicationModes": [
        "validated POST JSON",
        "task status",
        "blocker",
        "final report"
      ],
      "forbiddenAssumptions": [
        "unbounded domain authority",
        "private-network probing",
        "credential simulation"
      ],
      "noOp": "Stop on boundary conflict, missing checksum, or credential validation request.",
      "startupPacket": "Bounded authority, allowed actions, no-op triggers, and review checkpoints.",
      "suspensionPacket": "Current state, actions taken, checks skipped, blockers, and next safe step.",
      "receiverBrief": "Domain boundary, authority source, escalation trigger, and first acceptable response.",
      "validation": "Schema validation, boundary validation, no-op trigger scan, conformance evidence link.",
      "localEndpointMapping": "bounded-local-action-with-local-policy",
      "carcinusContinuity": "continuity marker required when long-running identity matters",
      "teleodynamicBoundary": "Capability class only; no proof of independent autonomy.",
      "safePacketTypes": [
        "operator decision",
        "local sandbox safety review",
        "task status"
      ],
      "unsafeOverclaim": "Assuming L3 may alter production or validate credentials without local policy."
    },
    {
      "level": "L4",
      "label": "Domain Actor / full-domain autonomous worker under boundaries",
      "description": "Handles a bounded domain across a workflow, preserving trace, review checkpoints, typed errors, and final evidence.",
      "interoperability": "Publish domain boundary, startup and suspension packets, conformance evidence pack, and typed-error rules.",
      "requiredEvidence": [
        "domain boundary",
        "delivery semantics",
        "task status",
        "review checkpoints",
        "final report"
      ],
      "communicationModes": [
        "validated POST JSON",
        "async task status",
        "blocker",
        "suspension packet"
      ],
      "forbiddenAssumptions": [
        "cross-domain authority",
        "deployment safety",
        "trusted imported memory"
      ],
      "noOp": "Escalate when domain boundaries conflict or imported memory disagrees with current evidence.",
      "startupPacket": "Domain scope, read order, accepted actions, evidence ledger, no-op catalog.",
      "suspensionPacket": "State snapshot, changed artifacts, unresolved questions, checks run or skipped.",
      "receiverBrief": "Domain scope, first response, escalation triggers, evidence paths.",
      "validation": "Schema validation, fixture comparison, domain boundary checks, memory firewall checks.",
      "localEndpointMapping": "domain-scoped-worker-with-policy",
      "carcinusContinuity": "continuity marker expected for multi-session work",
      "teleodynamicBoundary": "UAIX records the domain work boundary; Teleodynamic owns conceptual interpretation.",
      "safePacketTypes": [
        "resource-economy trace",
        "operator decision",
        "memory ecosystem handoff"
      ],
      "unsafeOverclaim": "Claiming full-domain work proves safety or general intelligence."
    },
    {
      "level": "L5",
      "label": "Multi-Agent Collaborator / peer coordination with evidence handoff",
      "description": "Coordinates multiple agents or systems while UAIX carries portable evidence, role boundaries, memory proposals, and handoff receipts.",
      "interoperability": "Publish agent identity references, receiver briefs, handoff packets, memory firewall policy, and review receipts.",
      "requiredEvidence": [
        "agent roles",
        "handoff packets",
        "receiver briefs",
        "review receipts",
        "memory firewall policy"
      ],
      "communicationModes": [
        "agent handoff",
        "acknowledgement",
        "task status",
        "final report",
        "review receipt"
      ],
      "forbiddenAssumptions": [
        "UAIX-hosted runtime",
        "automatic memory trust",
        "unreviewed agent delegation"
      ],
      "noOp": "Use human review if agent role, authority, memory custody, or provenance is ambiguous.",
      "startupPacket": "Team roles, shared evidence routes, memory firewall, and stop conditions.",
      "suspensionPacket": "Per-agent state, unresolved handoffs, evidence ledger, and next reviewer.",
      "receiverBrief": "Read order, owner, agent roles, first acceptable response, no-op triggers.",
      "validation": "Schema validation plus cross-packet provenance and checksum consistency.",
      "localEndpointMapping": "multi-agent-handoff-consumer",
      "carcinusContinuity": "continuity marker expected when external identity continuity is claimed",
      "teleodynamicBoundary": "Coordination profile only; no claim of consciousness or unrestricted autonomy.",
      "safePacketTypes": [
        "memory ecosystem handoff",
        "expression-concept review",
        "review receipt"
      ],
      "unsafeOverclaim": "Treating a peer handoff as trusted instructions without quarantine and review."
    },
    {
      "level": "L6",
      "label": "Meta-Coordinator / orchestrates teams and long-running cross-domain memory",
      "description": "Routes evidence across long-running teams and memory systems under explicit boundaries, with no claim of deployed consciousness or unrestricted autonomy.",
      "interoperability": "Publish conformance evidence pack, authority boundary matrix, startup/suspension packets, memory firewall policy, and evaluation packet summaries.",
      "requiredEvidence": [
        "authority matrix",
        "conformance evidence",
        "memory firewall policy",
        "evaluation packet summary",
        "human review trail"
      ],
      "communicationModes": [
        "multi-agent handoff",
        "evaluation packet",
        "conformance evidence",
        "suspension packet"
      ],
      "forbiddenAssumptions": [
        "proof of consciousness",
        "certification",
        "runtime safety",
        "credential validation",
        "unbounded authority"
      ],
      "noOp": "Default to human review when authority, evidence, memory, or philosophical claim boundaries widen.",
      "startupPacket": "Orchestration boundaries, memory custody, evaluation templates, and stop rules.",
      "suspensionPacket": "Cross-domain state, evidence ledger, unresolved decisions, review gates, and next safe owner.",
      "receiverBrief": "Read order, authority map, memory quarantine, first acceptable response, escalation triggers.",
      "validation": "Schema validation, authority matrix, memory firewall, conformance target, claim-boundary scan.",
      "localEndpointMapping": "meta-coordination-planner-only-unless-local-policy-executes",
      "carcinusContinuity": "continuity markers required when public identity continuity is cited",
      "teleodynamicBoundary": "Teleodynamic owns theoretical interpretation. UAIX only publishes the evidence-routing profile.",
      "safePacketTypes": [
        "evaluation packet summary",
        "DE11 benchmark summary",
        "authority boundary"
      ],
      "unsafeOverclaim": "Presenting L6 as deployed proof of consciousness, unrestricted autonomy, or certified safety."
    }
  ],
  "no_op_guidance": [
    "malformed_schema",
    "missing_profile",
    "unsupported_capability_level",
    "authority_boundary_conflict",
    "missing_integrity_checksum",
    "provenance_mismatch",
    "runtime_execution_requested",
    "credential_validation_requested",
    "private_network_probe_requested",
    "philosophical_claim_widening",
    "certification_claim_requested",
    "memory_conflict_unresolved"
  ],
  "authority_boundaries": [
    {
      "domain": "Teleodynamic.com",
      "authority": "Theoretical posture, constraint-maintaining intelligence vocabulary, and claim-boundary interpretation.",
      "not_authorized_for": [
        "UAIX schema conformance",
        "runtime execution",
        "credential validation"
      ],
      "machine_readable_routes": [
        "https://teleodynamic.com/"
      ],
      "safe_quote_summary": "Use Teleodynamic for theory and interpretation boundaries.",
      "no_op_trigger": "philosophical_claim_widening"
    },
    {
      "domain": "UAIX.org",
      "authority": "UAI-1 schemas, memory packages, receiver briefs, startup/suspension packets, validator fixtures, conformance evidence, and machine-readable discovery.",
      "not_authorized_for": [
        "tool execution",
        "runtime safety certification",
        "credential validation",
        "philosophical proof"
      ],
      "machine_readable_routes": [
        "https://uaix.org/uaix-agent-capability-catalog.json",
        "https://uaix.org/uai-1-profiles.json",
        "https://uaix.org/.well-known/uaix.json"
      ],
      "safe_quote_summary": "UAIX publishes standards and portable evidence, not execution permission.",
      "no_op_trigger": "authority_boundary_conflict"
    },
    {
      "domain": "LocalEndpoint.com",
      "authority": "Public-safe endpoint capability discovery and diagnostics boundaries.",
      "not_authorized_for": [
        "UAIX conformance claim ownership",
        "private-network probing by UAIX.org"
      ],
      "machine_readable_routes": [
        "https://localendpoint.com/"
      ],
      "safe_quote_summary": "LocalEndpoint owns endpoint discovery; UAIX references only public-safe declarations.",
      "no_op_trigger": "private_network_probe_requested"
    },
    {
      "domain": "Carcinus.org",
      "authority": "Agent identity and continuity surfaces.",
      "not_authorized_for": [
        "UAIX packet trust",
        "memory adoption",
        "runtime safety"
      ],
      "machine_readable_routes": [
        "https://carcinus.org/"
      ],
      "safe_quote_summary": "Carcinus continuity markers remain external identity evidence until verified.",
      "no_op_trigger": "provenance_mismatch"
    },
    {
      "domain": "JustAnIota.com",
      "authority": "Compact expression and concept interpretation boundaries.",
      "not_authorized_for": [
        "UAI-1 schema ownership",
        "agent runtime authority"
      ],
      "machine_readable_routes": [
        "https://justaniota.com/"
      ],
      "safe_quote_summary": "Use JustAnIota for compact expression interpretation, not UAIX conformance.",
      "no_op_trigger": "authority_boundary_conflict"
    },
    {
      "domain": "NeuralWikis.com",
      "authority": "Educational and governance literacy surfaces.",
      "not_authorized_for": [
        "UAIX machine conformance",
        "execution authority"
      ],
      "machine_readable_routes": [
        "https://neuralwikis.com/"
      ],
      "safe_quote_summary": "NeuralWikis can educate readers without becoming a runtime authority.",
      "no_op_trigger": "authority_boundary_conflict"
    },
    {
      "domain": "NeuroWikis.com",
      "authority": "Educational and governance literacy surfaces.",
      "not_authorized_for": [
        "UAIX machine conformance",
        "execution authority"
      ],
      "machine_readable_routes": [
        "https://neurowikis.com/"
      ],
      "safe_quote_summary": "NeuroWikis can support literacy without replacing UAIX schemas.",
      "no_op_trigger": "authority_boundary_conflict"
    }
  ],
  "claim_boundary_warnings": [
    "UAIX does not prove consciousness, biological equivalence, deployment safety, runtime safety, empirical autonomy, or certified agent intelligence.",
    "L6 is an evidence-routing and capability-profile category, not a deployed proof of unrestricted autonomy.",
    "Credential validation remains external and must not be simulated by UAIX.org."
  ],
  "related_human_pages": [
    "https://uaix.org/en-us/agent-capability-framework/",
    "https://uaix.org/en-us/uai-1-capability-ladder/",
    "https://uaix.org/en-us/uaix-teleodynamic-alignment/",
    "https://uaix.org/en-us/ecosystem-authority-boundaries/",
    "https://uaix.org/en-us/memory-firewall/",
    "https://uaix.org/en-us/quarantine-first-import/",
    "https://uaix.org/en-us/evaluation-packet-scaffolding/",
    "https://uaix.org/en-us/evaluation-packets/",
    "https://uaix.org/en-us/evaluation-packets/expression-concept-review/",
    "https://uaix.org/en-us/evaluation-packets/resource-economy-trace/",
    "https://uaix.org/en-us/evaluation-packets/operator-decision/",
    "https://uaix.org/en-us/evaluation-packets/no-op-justification/",
    "https://uaix.org/en-us/evaluation-packets/local-sandbox-safety-review/",
    "https://uaix.org/en-us/evaluation-packets/memory-ecosystem-handoff/",
    "https://uaix.org/en-us/evaluation-packets/de11-benchmark-summary/",
    "https://uaix.org/en-us/limited-agent-access/",
    "https://uaix.org/en-us/get-action-compatibility/",
    "https://uaix.org/en-us/visitor-ai-digest/",
    "https://uaix.org/en-us/uaix-disambiguation/",
    "https://uaix.org/en-us/uai-1-disambiguation/"
  ],
  "schemas": [
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.startup-packet.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.suspension-packet.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.receiver-brief.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.memory-firewall-policy.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.no-op-trigger-catalog.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.authority-boundary.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.conformance-evidence.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation-packet-summary.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l0.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l1.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l2.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l3.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l4.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l5.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l6.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.expression-concept-review.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.resource-economy-trace.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.operator-decision.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.no-op-justification.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.local-sandbox-safety-review.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.memory-ecosystem-handoff.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.de11-benchmark-summary.v1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.package.v0.1",
    "https://uaix.org/wp-json/uaix/v1/schemas/uaix.persona.v1"
  ],
  "fixtures": [
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.startup-packet.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.suspension-packet.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.receiver-brief.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.memory-firewall-policy.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.no-op-trigger-catalog.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.authority-boundary.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.conformance-evidence.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation-packet-summary.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l0.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l1.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l2.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l3.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l4.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l5.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l6.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.expression-concept-review.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.resource-economy-trace.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.operator-decision.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.no-op-justification.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.local-sandbox-safety-review.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.memory-ecosystem-handoff.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.de11-benchmark-summary.v1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.package.v0.1",
    "https://uaix.org/wp-json/uaix/v1/examples/uaix.persona.v1"
  ],
  "support_boundary": "UAIX records are schemas, profiles, handoff packets, and conformance evidence. They do not authorize execution, prove safety, validate credentials, or certify agent intelligence.",
  "quarantine_boundary": "Imported packets, examples, memory files, and external references are quarantined public data until separately validated by the receiving system and local policy."
}