StateKnot
Docs · Start Overview Choose the right entry point and understand the pre-alpha boundary. Docs · Start Getting started Install the pinned toolchain and validate the repository locally. Docs · Start Core contract examples Compile the first Agent, typed Tool, Model stream, and explicit protocol mapping without runtime dependencies. Docs · Start Typed Agent Generate and pin typed schemas, then bind the first-party OpenAI and Anthropic adapters. Docs · Start In-process Agent Run a typed Agent without HTTP while preserving PostgreSQL durability, authorization, recovery, and owned roles. Docs · Start Durable admission Atomically commit authenticated intent, database time, the first event, and the initial checkpoint. Docs · Start Durable runs and results Submit with a durable ingress key, recover the original run, and read a verified public result. Docs · Understand Compile a graph Build a schema-pinned graph, validate its topology, and freeze its canonical digest. Docs · Understand Subgraphs and loops Compose shared-state subgraphs, finite loops, and explicit recovery-safe return paths. Docs · Understand Skill composition Choose capability bundles, shared-state subgraphs, durable child runs, and guarded MCP Skills without creating a second runtime. Docs · Understand Durability model Learn how journal, checkpoint, lease, fence, and recovery evidence fit together. Docs · Understand Durable Graph runtime Register exact executable code, replay noninitial state, and drive deterministic bounded sibling batches under one fence. Docs · Understand Durable Agent Loop Commit lifecycle handoffs and execute one tenant-scoped durable scheduling quantum. Docs · Understand Durable invocations Execute exact model and tool attempts with durable starts, staged ordered Tool coordination, streaming validation, and no-dispatch terminal recovery. Docs · Understand Provider-native Agent Compile and operate the durable multi-turn graph with bounded output repair, ordered parallel read-only Tools, write barriers, policy, accounting, and cancellation evidence. Docs · Integrate Local Rust Tools Generate digest-pinned schemas, register typed local code, and preserve the durable invocation boundary. Docs · Integrate AgentService v1 Authorize and expose exact durable Agent revisions through the versioned embedding boundary. Docs · Integrate Agent HTTP v1 Submit, recover, read and cancel through authenticated bounded JSON HTTP. Docs · Integrate General MCP Tool client Discover and call bounded stateless MCP 2026-07-28 Tools with JSON/SSE, OAuth, custom headers, and mediated MRTR. Docs · Integrate MCP OAuth client Bind one MCP resource to challenge-driven discovery, PKCE, issuer validation, durable credentials, and bounded replay. Docs · Integrate MCP Remote Tool Bind one strict stateless MCP 2026-07-28 Tool with pinned identity, schemas, durable dispatch, and reconciliation. Docs · Integrate MCP Server profile Expose bounded Tools, Resources, Prompts, Completion, and MRTR behind the strict stateless production boundary. Docs · Integrate MCP Skills Publish and activate Final SEP-2640 static Skills with immutable manifests, origin-scoped approval, and verified lazy reads. Docs · Integrate MCP conformance status See the frozen official runner inventory, implemented evidence, and exact boundary of current MCP claims. Docs · Integrate A2A 1.0 Client Discover and pin one agent, call all eleven operations, and reconcile durable unknown sends only through attested remote guarantees. Docs · Integrate Durable artifact storage Materialize terminal A2A parts into immutable PostgreSQL metadata and private integrity-checked object bytes. Docs · Integrate A2A 1.0 Server Expose bounded HTTP+JSON and JSON-RPC/SSE through identity-first policy and a durable service contract. Docs · Integrate A2A conformance status Inspect the frozen official TCK, audited harness patch, exact result, and server-only claim boundary. Docs · Operate Fair scheduling Configure replica-safe weighted tenant selection, exact starvation bounds, rollout, and retention. Docs · Operate PostgreSQL provider Configure, migrate, verify, and test the implemented durability provider. Docs · Operate Host qualification Record bounded capacity, recovery and fault evidence without turning CI into a production SLO claim. Docs · Project Versioning and releases Pin the public alpha exactly and understand compatibility, MSRV, durable-data, and release gates. Docs · Project Implementation status See what is implemented, in progress, and deliberately not claimed. Home Architecture map What exists, what is active, and what remains planned. Home Current cut Implemented slices and explicit gaps. Home Roadmap The path from contracts to a qualified v1. Repository Source code StateKnot/StateKnot on GitHub. Repository RFCs Draft architecture and durable execution contracts. Repository Security policy Private vulnerability reporting and support policy.
↑↓ navigate ↵ open 39 results

Pre-alpha documentation

Read implementation status before API shape.

StateKnot is pre-alpha: bounded MCP Client/Server, static MCP Skills Server and Client/Host, and A2A 1.0 Client/Server profiles join the durable provider-native path; dynamic Skills, stable network Agent APIs, A2A gRPC, MCP Tasks, advanced graph semantics, and production qualification remain unfinished.

Capability matrix

  • Implemented

    Bounded host qualification evidence

    The public-alpha stateknot-testkit owns monotonic phases, bounded HDR distributions, checked safety counters, a closed fault matrix and canonical integrity envelopes. A reduced PostgreSQL 16/17 profile exercises real host admission, SSE, operations, dependency recovery and rolling replacement, but is always non-release evidence; reference load, soak, failover and provenance remain open.

  • Implemented

    Protected read-only host operations

    Independent owned loopback listener, explicit InspectHost scope/permission and a separate expiring exact-caller policy. Sanitized status/counters remain observable during business outages; authentication, requests, connections and shutdown are bounded. PostgreSQL 16/17 and dedicated real TLS identity qualification; no anonymous probes, administrative writes or capacity/SLO claim.

  • Implemented

    Co-located Agent host lifecycle

    Owns actual ingress, Worker and maintenance bindings with exclusive ingress claim, ordered startup, per-request sibling readiness gates and HTTP → Worker → maintenance joined drain. PostgreSQL 16/17 and real TLS identity composition qualification; cross-process rollout and measured capacity SLOs remain open.

  • Implemented

    HTTP-free typed Agent runner

    One bounded typed run call over the real durable service, tenant Worker and maintenance roles. Caller-retained submission keys, PostgreSQL admission, authorization, timeout-without-cancellation, same-key recovery, terminal provenance/accounting validation, fail-stop sibling supervision and joined shutdown remain mandatory. AgentHost is the production network-service migration path.

  • Implemented

    Independent Agent maintenance lifecycle

    Explicit tenant rotation over deadline cancellation, child cancellation/settlement, Join publication and failure closure. Retained failed-page cursors, actual readiness, finite deadlines and joined shutdown; PostgreSQL 16/17 durable effects and SIGKILL recovery. No automatic retention or full multi-role capacity qualification.

  • Implemented

    Independent durable scheduling Worker lifecycle

    Concrete tenant/fair schedulers with fixed slots, actual and host dependency readiness, finite pacing and deadlines, and joined drain including nested Graph nodes. PostgreSQL 16/17 qualifies fresh-process terminal replay and fair-slot continuity. Maintenance jobs and full multi-role production qualification remain separate.

  • Implemented

    Declarative Agent resource authorization

    Exact tenant/identity/Agent/schema/run selectors, explicit tenant operators, restrictive budgets, digest-pinned policy artifacts and deterministic admission evidence. Expiring CAS refresh preserves recovery across unrelated ACL changes. Real PostgreSQL 16/17 and Keycloak qualification; no inferred ownership or durable read-audit ledger.

  • Implemented

    Real identity integration and expiring tenant policy

    Fixed-HTTPS OAuth introspection, exact claims and permission intersection, rotating secrets, atomic default-deny tenant mappings and expiry. Real Keycloak qualifies rotation, revocation, cross-tenant refusal, readiness recovery and SSE cleanup; resource policy stays mandatory. Full production deployment remains open.

  • Implemented

    Local JWT access-token verification · source checkout

    RFC 9068 at+jwt/RS256 verification with trusted operator-provisioned JWKS, expiring CAS key rotation, bounded blocking signature jobs and exact claims. Shared tenant policy and independent resource authorization stay mandatory. PostgreSQL 16/17 qualifies key removal, SSE closure, expiry and fresh-verifier admission replay; authenticated key delivery remains a deployment responsibility.

  • Implemented

    Owned HTTP ingress lifecycle

    Loopback listener ownership, actual schema/executable and mandatory host readiness, fresh fail-closed admission, bounded connections and joined graceful/forced drain. Real PostgreSQL 16/17 fault tests; no implicit Worker, public health route or stable release claim.

  • Implemented

    Resumable Agent activity SSE

    Opt-in authenticated activity notifications with exact PostgreSQL cursors, fresh-process suffix recovery, independent snapshots, repeated authorization, finite queue/lifetime limits and quarantine-only updates. Not token streaming or historical snapshot reconstruction.

  • Implemented

    Agent HTTP v1 JSON ingress

    Mandatory credential verification and resource policy, durable submission/read/key lookup, two-phase cancellation, finite limits and shutdown, with real HTTP lost-response recovery on PostgreSQL 16/17. No inline dispatch or stable-release claim.

  • Implemented

    Core domain contracts

    Bounded canonical types, four MSRV-compiled public contract examples with a locked runtime-neutral dependency boundary, root-graph validation, and deterministic route/reducer/successor barrier planning. RFC-0001 remains Draft.

  • Implemented

    PostgreSQL durability slice

    PostgreSQL 16/17 migrations, journal, checkpoints, leases, ledgers, barriers, waits, outbox, quarantine, delayed wakeups, pinned graphs, and durable fairness reservations.

  • Implemented

    Atomic Agent admission

    Immutable authenticated intent, deterministic finite budgets, database-clock admission, first event, initial checkpoint, scheduler visibility, exact retries, and fully verified loads.

  • Implemented

    Durable Agent runs and results

    Tenant-scoped durable ingress keys, fresh-candidate retry convergence, conflict detection, verified public lifecycle snapshots, and success/failure/cancellation outcomes.

  • Implemented

    Durable Graph Driver

    Offline executable schema/reducer/node closure, full checkpoint-state and bounded noninitial replay validation, durable-before-dispatch execution, canonical journal-isolated sibling batches, near-expiry lease refresh, monotonic renewal, durable cancellation polling, Continue barriers, and typed lifecycle handoffs.

  • Implemented

    Lifecycle and durable Agent Loop

    Atomic Wait/success/failure/cancellation handoff commits, trusted lifecycle evidence validation, exact lost-ack recovery, bounded exact-fence cleanup, and one tenant-scoped scheduler quantum.

  • Implemented

    Durable model/tool execution

    Exact immutable provider registries, trusted budget admission, durable-before-dispatch attempts, unary and durably-sunk streaming models, tool ambiguity, bounded provider reconciliation, and no-dispatch terminal recovery.

  • Implemented

    Cross-tenant fair scheduling

    Replica-global smooth weighted reservations, exact cycle shares, explicit reservation-count starvation bounds, concurrency-safe lost-ACK recovery, and bounded retention.

  • Implemented

    Typed Agent and first-party model adapters

    Generated canonical digest-pinned input/output schemas, offline provider-profile binding, bounded typed codecs, and OpenAI Responses plus Anthropic Messages unary/SSE adapters with explicit transport controls.

  • Implemented

    Provider-native Agent graph

    A digest-pinned prebuilt multi-turn model/tool graph with sequential or bounded parallel read-only Tools, serialized write barriers, provider-native transcript recovery, bounded durable structured-output repair, local policy evidence, exact accounting, automatic Unknown-to-Pending reconciliation without repeating the business call, and two-phase cancellation confirmation.

  • Implemented

    AgentService v1 embedding boundary

    Exact-version deployment binding, authorization before deployment/run/key existence disclosure, tenant-scoped submission recovery, verified reads, and caller-retained two-phase cancellation identities.

  • Implemented

    Strict MCP Remote Tool profile

    One MCP 2026-07-28 client-side Tool binding with modern stateless discovery, complete JSON transport, exact local schema/server pins, attempt-scoped authorization, durable-before-dispatch PostgreSQL state, no-redispatch ambiguity, and authoritative reconciliation.

  • Implemented

    General stateless MCP Tool client

    Bounded discovery/pagination, JSON and request-scoped SSE, standard and nested custom headers, invalid-Tool isolation, no network schema dereference, exact MRTR, and a frozen official client gate.

  • Implemented

    MCP OAuth client authorization

    Challenge-driven protected-resource and authorization-server discovery, pre-registration/CIMD/DCR, PKCE, exact issuer and callback validation, bounded scope/replay, durable store interfaces, and all 25 scored OAuth scenarios.

  • Implemented

    MCP Server profile

    Strict stateless HTTP plus StateKnot-owned immutable Tools, Resources, Resource Templates, Prompts, optional Completion, and MRTR with authorization-first policy; all 37 scored Server scenarios pass with zero failures or warnings.

  • Implemented

    MCP Skills profiles

    Final SEP-2640 static Server and Client/Host profiles: immutable exact-byte manifests, authorization-first disclosure and bounded verification. Schema 26 persists exact run-scoped activation approvals and database-clock acting windows with retry-stable IDs, restart resume, nested parent locking and immutable revocation. Exact-version Tool adapters serialize fresh payload-redacted receipt commits against revocation before provider I/O; later revocation does not recall an authorization already committed.

  • Implemented

    A2A 1.0 Client and durable remote agent

    All eleven HTTP+JSON and JSON-RPC operations, both bounded SSE surfaces, exact card/interface pins, bounded Bearer/OAuth2/OpenID security, local schemas, explicit delivery semantics, and operator-attested context/history or message-ID recovery for PostgreSQL-backed Unknown attempts.

  • Implemented

    Durable A2A artifact storage

    Direct no-resend polling of accepted tasks, migration 18's immutable PostgreSQL registry, private S3-compatible conditional publication, authorization-before-lookup, and complete length plus SHA-256 verification.

  • Implemented

    A2A 1.0 Server profile

    StateKnot-owned bounded Agent Card/message/task/artifact/push contracts behind strict HTTP+JSON and JSON-RPC/SSE policy; 177 official TCK cases pass, 88 declared cases skip, and none fail, error, or xfail.

  • Implemented

    Shared-state subgraphs and bounded loops

    Static nesting, exact schema/reducer pins, scoped ordered node/route identities, explicit return/exhaustion, pending-result and wait recovery, and pre-dispatch global step-limit supervision; no independent child-run lifecycle.

  • Active work

    Advanced execution and service boundary

    Isolated child ownership/admission, cumulative reservations, Join suspension/publication/unique consumption, cancellation, deadlines and failure closure are implemented. PostgreSQL 16/17 CI force-kills fresh processes at eight successful Join boundaries and nine deadline cancel-and-join boundaries. A six-cell ambiguous-COMMIT matrix covers Join registration/publication and deadline cancellation; five separate two-cell matrices prove child admission, cancellation delivery with real Wait cleanup, child settlement, parent terminal finalization with exact direct-plus-child accounting, and atomic Join-result consumption with non-initial graph replay. Isolated logical pg_dump/pg_restore and physical base-backup/WAL named-PITR drills verify one consumed child-Join recovery path. Full disaster recovery, failover, provider effects, same-run nested namespaces, stable network transport and capacity qualification remain open.

  • Not shipped

    Stable network Agent API

    The embedding facade and bounded authenticated JSON HTTP profile are available in the exact 0.1.0-alpha.1 public preview, but no stable HTTP/SSE API or production support claim exists yet. Preview compatibility follows the published versioning policy.

  • Not shipped

    MCP client extensions and A2A qualification

    Dynamic MCP Skills manifests, Skill-byte disk materialization and automatic discovery-to-Agent composition; MCP Tasks and other client extensions; stable SDK-tier evidence; A2A Client live-peer/conformance and recovery-attestation qualification; and A2A gRPC remain unshipped. Activation/window metadata and per-operation authorization receipts are durable.

  • Not shipped

    Production server and operations

    Full HTTP/SSE role deployment, broader identity/resource-policy production qualification, observability, role isolation, general retention, failover, restore, OCI delivery, and release qualification remain ahead.

What “implemented” means

Code and executable tests exist in the repository. Product crates are available as the exact 0.1.0-alpha.1 public preview, but that does not mean an API is stable, operational production gates pass, or production support has started. A v1 capability is supported only when implementation, tests, documentation, compatibility evidence, and release gates ship together. Read the versioning and release policy before depending on the preview.

The next proof boundary

The 32-case Runtime matrix now proves real overlap with canonical sibling commits, higher-fence orphan takeover, ordered read-only Tool waves, and serialized write barriers on PostgreSQL 16 and 17. The strict MCP binding retains end-to-end PostgreSQL recovery evidence. The separate general Tool client and OAuth provider now pass all 32 frozen scored client scenarios, including all 25 OAuth scenarios: 371 scored assertions succeed and none fail. The Server profile passes all 37 scored Server scenarios with 114 successes, five skips, one Info, and zero failures or warnings. The A2A 1.0 Server gate adds 177 official TCK passes, 88 declared skips, and zero failures/errors/xfails. The durable A2A Client now adds an eleven-operation, dual-binding loopback matrix and real PostgreSQL durable-before-dispatch/Unknown/no-redispatch evidence, plus bounded operator-attested context/history and message-ID recovery. Durable terminal-task recovery now polls both bindings directly without a business resend; migration 17→18, immutable registry, conditional object publication, multipart ingestion, authorization-first reads, and full digest verification all have executable PostgreSQL and object-store evidence. Official Client/live-peer and recovery-attestation qualification, dynamic MCP Skills, Skill-byte materialization, MCP Tasks, and other client extensions remain separate gates.

Normative project sources