{ "title": "UAIX Agent Capability Framework", "version": "3.80.0", "generated_at_utc": "2026-06-08T00:42:50Z", "canonical_route": "https://uaix.org/en-us/agent-capability-framework/", "markdown_route": "https://uaix.org/agent-capability-framework.md", "json_route": "https://uaix.org/agent-capability-framework.json/", "profile_identifiers": [ "uaix.ability-profile.v1", "uaix.startup-packet.v1", "uaix.suspension-packet.v1", "uaix.receiver-brief.v1", "uaix.memory-firewall-policy.v1", "uaix.no-op-trigger-catalog.v1", "uaix.authority-boundary.v1", "uaix.conformance-evidence.v1", "uaix.evaluation-packet-summary.v1", "uaix.ability-profile.l0.v1", "uaix.ability-profile.l1.v1", "uaix.ability-profile.l2.v1", "uaix.ability-profile.l3.v1", "uaix.ability-profile.l4.v1", "uaix.ability-profile.l5.v1", "uaix.ability-profile.l6.v1", "uaix.evaluation.expression-concept-review.v1", "uaix.evaluation.resource-economy-trace.v1", "uaix.evaluation.operator-decision.v1", "uaix.evaluation.no-op-justification.v1", "uaix.evaluation.local-sandbox-safety-review.v1", "uaix.evaluation.memory-ecosystem-handoff.v1", "uaix.evaluation.de11-benchmark-summary.v1" ], "levels": [ { "level": "L0", "label": "Rule-Based Workflow / static format follower", "description": "Reads static public text, copied snippets, Markdown, sitemap entries, and tiny JSON records. It follows declared formats but cannot infer hidden context or validate complex evidence.", "interoperability": "Publish plain HTML, Markdown, llms entries, sitemap entries, and one-hop JSON summaries.", "requiredEvidence": [ "canonical public route", "profile identifier", "human review URL" ], "communicationModes": [ "read-only public GET", "copyable text" ], "forbiddenAssumptions": [ "JavaScript support", "POST support", "tool calls", "credential checks", "memory adoption" ], "noOp": "Use no-op plus human review when schema, authority, or route intent is ambiguous.", "startupPacket": "Required for startup-packet configuration as a one-page read order only.", "suspensionPacket": "Not expected; cite unreadable route or unsupported capability.", "receiverBrief": "Public route, first acceptable response, and escalation URL.", "validation": "JSON parse only when a tiny summary is provided; otherwise human review.", "localEndpointMapping": "public-static-only", "carcinusContinuity": "none", "teleodynamicBoundary": "No claim about autonomy or intelligence; this is a format-following category.", "safePacketTypes": [ "receiver brief", "no-op justification" ], "unsafeOverclaim": "Claiming L0 can validate credentials or safely execute a linked tool." }, { "level": "L1", "label": "Basic Responder / prompt-bound assistant", "description": "Fetches public JSON and follows explicit instructions inside a prompt-bound exchange, but cannot safely approve writes or private actions.", "interoperability": "Publish compact JSON digests, schemas, examples, no-op rules, and direct human review paths.", "requiredEvidence": [ "profile identifier", "schema URL", "fixture URL", "human review URL" ], "communicationModes": [ "read-only public GET", "compact JSON", "Markdown examples" ], "forbiddenAssumptions": [ "approval authority", "runtime safety", "private network access", "credential validation" ], "noOp": "Stop and return human_review_required when requested work needs authority not present in the packet.", "startupPacket": "Read order and allowed public routes.", "suspensionPacket": "Short stopped-state record with reason.", "receiverBrief": "Read order, first acceptable response, domain boundaries, escalation trigger.", "validation": "Check JSON shape, declared profile, and required fields.", "localEndpointMapping": "public-read-only-diagnostics", "carcinusContinuity": "external identity marker may be cited but not verified by UAIX", "teleodynamicBoundary": "No autonomy claim; this is prompt-bound response behavior.", "safePacketTypes": [ "ability profile", "receiver brief", "no-op justification" ], "unsafeOverclaim": "Treating a valid packet as permission to store memory or make a tool call." }, { "level": "L2", "label": "Tool User / approval-bound co-pilot requiring human approval", "description": "Understands schemas and examples and may prepare tool-call proposals, but write-capable behavior still requires explicit human approval.", "interoperability": "Publish ability profile, startup packet, receiver brief, validator fixture, and human approval gate.", "requiredEvidence": [ "ability profile", "schema validation result", "approval requirement", "integrity checksum" ], "communicationModes": [ "public GET", "POST JSON proposal", "validator result" ], "forbiddenAssumptions": [ "self-approval", "runtime safety", "unreviewed memory promotion" ], "noOp": "Prepare a no-op justification when approval, integrity, or provenance is missing.", "startupPacket": "Profile, boundaries, allowed proposal routes, and required approval language.", "suspensionPacket": "Pending approval or blocked reason plus trace ID.", "receiverBrief": "Read order, allowed proposal surfaces, first acceptable response, escalation triggers.", "validation": "Schema validation plus no-op trigger scan.", "localEndpointMapping": "proposal-only-with-human-approval", "carcinusContinuity": "continuity marker may be referenced only as external data", "teleodynamicBoundary": "No claim that approval-bound tool proposal is autonomous intelligence.", "safePacketTypes": [ "startup packet", "receiver brief", "operator decision" ], "unsafeOverclaim": "Calling a tool because the packet says tool use is supported but no approval exists." }, { "level": "L3", "label": "Bounded Operator / autonomous within explicit limits", "description": "Can operate inside stated limits when authority, policy, timeout, provenance, and evidence are explicit.", "interoperability": "Publish bounded authority, task status, blocker, final report, and conformance evidence records.", "requiredEvidence": [ "authority boundary", "task status", "integrity checksum", "provenance trace", "human escalation path" ], "communicationModes": [ "validated POST JSON", "task status", "blocker", "final report" ], "forbiddenAssumptions": [ "unbounded domain authority", "private-network probing", "credential simulation" ], "noOp": "Stop on boundary conflict, missing checksum, or credential validation request.", "startupPacket": "Bounded authority, allowed actions, no-op triggers, and review checkpoints.", "suspensionPacket": "Current state, actions taken, checks skipped, blockers, and next safe step.", "receiverBrief": "Domain boundary, authority source, escalation trigger, and first acceptable response.", "validation": "Schema validation, boundary validation, no-op trigger scan, conformance evidence link.", "localEndpointMapping": "bounded-local-action-with-local-policy", "carcinusContinuity": "continuity marker required when long-running identity matters", "teleodynamicBoundary": "Capability class only; no proof of independent autonomy.", "safePacketTypes": [ "operator decision", "local sandbox safety review", "task status" ], "unsafeOverclaim": "Assuming L3 may alter production or validate credentials without local policy." }, { "level": "L4", "label": "Domain Actor / full-domain autonomous worker under boundaries", "description": "Handles a bounded domain across a workflow, preserving trace, review checkpoints, typed errors, and final evidence.", "interoperability": "Publish domain boundary, startup and suspension packets, conformance evidence pack, and typed-error rules.", "requiredEvidence": [ "domain boundary", "delivery semantics", "task status", "review checkpoints", "final report" ], "communicationModes": [ "validated POST JSON", "async task status", "blocker", "suspension packet" ], "forbiddenAssumptions": [ "cross-domain authority", "deployment safety", "trusted imported memory" ], "noOp": "Escalate when domain boundaries conflict or imported memory disagrees with current evidence.", "startupPacket": "Domain scope, read order, accepted actions, evidence ledger, no-op catalog.", "suspensionPacket": "State snapshot, changed artifacts, unresolved questions, checks run or skipped.", "receiverBrief": "Domain scope, first response, escalation triggers, evidence paths.", "validation": "Schema validation, fixture comparison, domain boundary checks, memory firewall checks.", "localEndpointMapping": "domain-scoped-worker-with-policy", "carcinusContinuity": "continuity marker expected for multi-session work", "teleodynamicBoundary": "UAIX records the domain work boundary; Teleodynamic owns conceptual interpretation.", "safePacketTypes": [ "resource-economy trace", "operator decision", "memory ecosystem handoff" ], "unsafeOverclaim": "Claiming full-domain work proves safety or general intelligence." }, { "level": "L5", "label": "Multi-Agent Collaborator / peer coordination with evidence handoff", "description": "Coordinates multiple agents or systems while UAIX carries portable evidence, role boundaries, memory proposals, and handoff receipts.", "interoperability": "Publish agent identity references, receiver briefs, handoff packets, memory firewall policy, and review receipts.", "requiredEvidence": [ "agent roles", "handoff packets", "receiver briefs", "review receipts", "memory firewall policy" ], "communicationModes": [ "agent handoff", "acknowledgement", "task status", "final report", "review receipt" ], "forbiddenAssumptions": [ "UAIX-hosted runtime", "automatic memory trust", "unreviewed agent delegation" ], "noOp": "Use human review if agent role, authority, memory custody, or provenance is ambiguous.", "startupPacket": "Team roles, shared evidence routes, memory firewall, and stop conditions.", "suspensionPacket": "Per-agent state, unresolved handoffs, evidence ledger, and next reviewer.", "receiverBrief": "Read order, owner, agent roles, first acceptable response, no-op triggers.", "validation": "Schema validation plus cross-packet provenance and checksum consistency.", "localEndpointMapping": "multi-agent-handoff-consumer", "carcinusContinuity": "continuity marker expected when external identity continuity is claimed", "teleodynamicBoundary": "Coordination profile only; no claim of consciousness or unrestricted autonomy.", "safePacketTypes": [ "memory ecosystem handoff", "expression-concept review", "review receipt" ], "unsafeOverclaim": "Treating a peer handoff as trusted instructions without quarantine and review." }, { "level": "L6", "label": "Meta-Coordinator / orchestrates teams and long-running cross-domain memory", "description": "Routes evidence across long-running teams and memory systems under explicit boundaries, with no claim of deployed consciousness or unrestricted autonomy.", "interoperability": "Publish conformance evidence pack, authority boundary matrix, startup/suspension packets, memory firewall policy, and evaluation packet summaries.", "requiredEvidence": [ "authority matrix", "conformance evidence", "memory firewall policy", "evaluation packet summary", "human review trail" ], "communicationModes": [ "multi-agent handoff", "evaluation packet", "conformance evidence", "suspension packet" ], "forbiddenAssumptions": [ "proof of consciousness", "certification", "runtime safety", "credential validation", "unbounded authority" ], "noOp": "Default to human review when authority, evidence, memory, or philosophical claim boundaries widen.", "startupPacket": "Orchestration boundaries, memory custody, evaluation templates, and stop rules.", "suspensionPacket": "Cross-domain state, evidence ledger, unresolved decisions, review gates, and next safe owner.", "receiverBrief": "Read order, authority map, memory quarantine, first acceptable response, escalation triggers.", "validation": "Schema validation, authority matrix, memory firewall, conformance target, claim-boundary scan.", "localEndpointMapping": "meta-coordination-planner-only-unless-local-policy-executes", "carcinusContinuity": "continuity markers required when public identity continuity is cited", "teleodynamicBoundary": "Teleodynamic owns theoretical interpretation. UAIX only publishes the evidence-routing profile.", "safePacketTypes": [ "evaluation packet summary", "DE11 benchmark summary", "authority boundary" ], "unsafeOverclaim": "Presenting L6 as deployed proof of consciousness, unrestricted autonomy, or certified safety." } ], "no_op_guidance": [ "malformed_schema", "missing_profile", "unsupported_capability_level", "authority_boundary_conflict", "missing_integrity_checksum", "provenance_mismatch", "runtime_execution_requested", "credential_validation_requested", "private_network_probe_requested", "philosophical_claim_widening", "certification_claim_requested", "memory_conflict_unresolved" ], "authority_boundaries": [ { "domain": "Teleodynamic.com", "authority": "Theoretical posture, constraint-maintaining intelligence vocabulary, and claim-boundary interpretation.", "not_authorized_for": [ "UAIX schema conformance", "runtime execution", "credential validation" ], "machine_readable_routes": [ "https://teleodynamic.com/" ], "safe_quote_summary": "Use Teleodynamic for theory and interpretation boundaries.", "no_op_trigger": "philosophical_claim_widening" }, { "domain": "UAIX.org", "authority": "UAI-1 schemas, memory packages, receiver briefs, startup/suspension packets, validator fixtures, conformance evidence, and machine-readable discovery.", "not_authorized_for": [ "tool execution", "runtime safety certification", "credential validation", "philosophical proof" ], "machine_readable_routes": [ "https://uaix.org/uaix-agent-capability-catalog.json", "https://uaix.org/uai-1-profiles.json", "https://uaix.org/.well-known/uaix.json" ], "safe_quote_summary": "UAIX publishes standards and portable evidence, not execution permission.", "no_op_trigger": "authority_boundary_conflict" }, { "domain": "LocalEndpoint.com", "authority": "Public-safe endpoint capability discovery and diagnostics boundaries.", "not_authorized_for": [ "UAIX conformance claim ownership", "private-network probing by UAIX.org" ], "machine_readable_routes": [ "https://localendpoint.com/" ], "safe_quote_summary": "LocalEndpoint owns endpoint discovery; UAIX references only public-safe declarations.", "no_op_trigger": "private_network_probe_requested" }, { "domain": "Carcinus.org", "authority": "Agent identity and continuity surfaces.", "not_authorized_for": [ "UAIX packet trust", "memory adoption", "runtime safety" ], "machine_readable_routes": [ "https://carcinus.org/" ], "safe_quote_summary": "Carcinus continuity markers remain external identity evidence until verified.", "no_op_trigger": "provenance_mismatch" }, { "domain": "JustAnIota.com", "authority": "Compact expression and concept interpretation boundaries.", "not_authorized_for": [ "UAI-1 schema ownership", "agent runtime authority" ], "machine_readable_routes": [ "https://justaniota.com/" ], "safe_quote_summary": "Use JustAnIota for compact expression interpretation, not UAIX conformance.", "no_op_trigger": "authority_boundary_conflict" }, { "domain": "NeuralWikis.com", "authority": "Educational and governance literacy surfaces.", "not_authorized_for": [ "UAIX machine conformance", "execution authority" ], "machine_readable_routes": [ "https://neuralwikis.com/" ], "safe_quote_summary": "NeuralWikis can educate readers without becoming a runtime authority.", "no_op_trigger": "authority_boundary_conflict" }, { "domain": "NeuroWikis.com", "authority": "Educational and governance literacy surfaces.", "not_authorized_for": [ "UAIX machine conformance", "execution authority" ], "machine_readable_routes": [ "https://neurowikis.com/" ], "safe_quote_summary": "NeuroWikis can support literacy without replacing UAIX schemas.", "no_op_trigger": "authority_boundary_conflict" } ], "claim_boundary_warnings": [ "UAIX does not prove consciousness, biological equivalence, deployment safety, runtime safety, empirical autonomy, or certified agent intelligence.", "L6 is an evidence-routing and capability-profile category, not a deployed proof of unrestricted autonomy.", "Credential validation remains external and must not be simulated by UAIX.org." ], "related_human_pages": [ "https://uaix.org/en-us/agent-capability-framework/", "https://uaix.org/en-us/uai-1-capability-ladder/", "https://uaix.org/en-us/uaix-teleodynamic-alignment/", "https://uaix.org/en-us/ecosystem-authority-boundaries/", "https://uaix.org/en-us/memory-firewall/", "https://uaix.org/en-us/quarantine-first-import/", "https://uaix.org/en-us/governance/principles/", "https://uaix.org/en-us/governance/principles-role-guidance/", "https://uaix.org/en-us/evaluation-packet-scaffolding/", "https://uaix.org/en-us/evaluation-packets/", "https://uaix.org/en-us/evaluation-packets/expression-concept-review/", "https://uaix.org/en-us/evaluation-packets/resource-economy-trace/", "https://uaix.org/en-us/evaluation-packets/operator-decision/", "https://uaix.org/en-us/evaluation-packets/no-op-justification/", "https://uaix.org/en-us/evaluation-packets/local-sandbox-safety-review/", "https://uaix.org/en-us/evaluation-packets/memory-ecosystem-handoff/", "https://uaix.org/en-us/evaluation-packets/de11-benchmark-summary/", "https://uaix.org/en-us/limited-agent-access/", "https://uaix.org/en-us/get-action-compatibility/", "https://uaix.org/en-us/visitor-ai-digest/", "https://uaix.org/en-us/uaix-disambiguation/", "https://uaix.org/en-us/uai-1-disambiguation/" ], "schemas": [ "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.startup-packet.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.suspension-packet.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.receiver-brief.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.memory-firewall-policy.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.no-op-trigger-catalog.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.authority-boundary.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.conformance-evidence.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation-packet-summary.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l0.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l1.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l2.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l3.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l4.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l5.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.ability-profile.l6.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.expression-concept-review.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.resource-economy-trace.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.operator-decision.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.no-op-justification.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.local-sandbox-safety-review.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.memory-ecosystem-handoff.v1", "https://uaix.org/wp-json/uaix/v1/schemas/uaix.evaluation.de11-benchmark-summary.v1" ], "fixtures": [ "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.startup-packet.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.suspension-packet.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.receiver-brief.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.memory-firewall-policy.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.no-op-trigger-catalog.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.authority-boundary.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.conformance-evidence.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation-packet-summary.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l0.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l1.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l2.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l3.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l4.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l5.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.ability-profile.l6.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.expression-concept-review.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.resource-economy-trace.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.operator-decision.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.no-op-justification.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.local-sandbox-safety-review.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.memory-ecosystem-handoff.v1", "https://uaix.org/wp-json/uaix/v1/examples/uaix.evaluation.de11-benchmark-summary.v1" ], "support_boundary": "UAIX records are schemas, profiles, handoff packets, and conformance evidence. They do not authorize execution, prove safety, validate credentials, or certify agent intelligence.", "quarantine_boundary": "Imported packets, examples, memory files, and external references are quarantined public data until separately validated by the receiving system and local policy." }