# Source-Authoritative Agent Package Contract

Version: `0.1.0-COMPILER-AGENT`
Status: `CANDIDATE / INVOCATION-SCOPED / NON-RUNTIME`

An agent package is a finite assignment envelope. It distinguishes the named
interpreter from execution assignment and carries:

```text
package_id / invocation_epoch / expiry
local_goal
source_package and exact hashes
current TENET / ROTAS / AREPO evidence when execution is in scope
read_scope / write_scope
graph_visibility / context_depth
delegation_limit / mutation_authority
finite action and loop budgets
return_schema / return_target
escalation_rule
```

Naming an interpreter grants no execution, write, delegation, mutation,
promotion, or self-admission authority. Composed profiles preserve every
constraint and take the most restrictive effective permission.

The reference fixture is read-only, has zero delegation, cannot execute an
OPERA, and returns a typed classification trace. Rich-runtime profiles remain
negotiated carriers; this package creates no autonomous agent runtime.

Expiry occurs on source/hash/provider/scope/effective-ROTA change, invocation
completion, delegation boundary breach, or declared time/context exhaustion.