Orchestration Contract — Specification
Purpose
Define the declared shape of an orchestrated workflow: its stages, what routes work between
stages, what scores and filters candidate outputs, what allows a rerun, what budget bounds it, what
safety policy constrains it, and what audit it must leave behind. An orchestration contract is
required whenever the execution pattern selection recommends the
orchestrated_workflow vehicle or a multi-stage pattern from the
Execution Pattern Library.
This contract is docs-first and advisory-first: it declares a reviewable structure; it does not implement a scheduler, router, or workflow engine.
Non-goals
- No runtime orchestrator, scheduler, or automation — the contract is a declaration to review and audit, not a mechanism that executes.
- No new safety or permission vocabulary — the
safetyblock references the Agent Harness Contract (AHC) and the Agent Harness Governance Extension (AHGE); it does not define parallel tool, gate, or verdict taxonomies. - No restating of AHC/AHGE/REGC field tables — stages reference the contracts that govern them.
Declaration shape
orchestration_contract:
orchestration_id:
pattern:
purpose:
generated_by: human | agent | mixed
stages:
- stage_id:
name:
pattern:
input:
output:
skill_used:
model_or_agent_profile:
gate:
evidence_required:
routing_logic:
description:
deterministic: true | false
owner:
scoring_logic:
description:
formula:
review_required: true | false
filter_logic:
description:
criteria:
rerun_logic:
description:
stop_condition:
max_iterations:
budget:
max_tokens:
max_runtime:
max_parallel_agents:
safety:
allowed_tools:
restricted_tools:
approval_gates:
sensitive_context_policy:
audit:
output_artifacts:
logs_required:
evidence_refs_required:
Normative rules
- Every stage executes under an Agent Harness Contract. A stage is not a free agent: its autonomy, allowed tools, gates, and rollback are declared in the per-task Agent Harness Contract, and per-action authorization remains with AHGE. The orchestration contract names the stage; the AHC bounds it.
- The safety block reuses existing vocabulary.
allowed_toolsandrestricted_toolsuse the AHC tool declaration and the AHGE tool registry classes;approval_gatesuse the AHCgatesblock and the policy verdicts;sensitive_context_policydefers to the Knowledge Governance restrictions (ADR-008). No new vocabulary is introduced here. - All decision logic must be documented, reviewable, and auditable.
routing_logic,scoring_logic,filter_logic, andrerun_logicare first-class governed declarations: undocumented routing, scoring, filtering, or rerun behavior is not admissible in a governed workflow. Whoever reviews the contract must be able to answer why work moved, scored, was discarded, or ran again. - Rerun is bounded.
rerun_logicmust declare astop_conditionandmax_iterations. A rerun loop without both violates the Objective Gate Policy. - Budgets are required.
max_tokens,max_runtime, andmax_parallel_agentsmust be set; budget exhaustion is a stop, not a model decision (the budget semantics are AHGE’s). - Audit is declared up front. The
auditblock names the artifacts, logs, and evidence references the workflow must leave; the record itself is the AHGE governance record, viewed through the Execution Audit Record. - Volume-generating orchestrations must declare readership. Fan-out, generate-and-filter, and tournament stages produce more output than reviewers may absorb; the comprehension debt declaration applies.
Related
- Execution Pattern Selection — the upstream selection that demands this contract
- Execution Pattern Library — the patterns a stage may use
- Agent Harness Contract — the per-task envelope every stage runs under
- Agent Harness Governance Extension — per-action authorization, budgets, traces
- Loop State Contract — required state for recurring orchestrations
- Execution Audit Record — the audit view this contract feeds