- keep-alive sessions
- peer discovery and trust
- inbound work from other agents
- inbound work from outside systems
Why this is a concept
Comms is not just “some tools”. It defines:- what it means for a session to stay alive for future work
- how peers are discovered and trusted
- how host-side ingress differs from in-agent messaging
Mental model
PeerId, derived from their Ed25519 public key.
Names and metadata are for display and discovery, and names can collide. Trust
is explicit, delivery is separate from runtime admission, and queueing an item
does not itself prove that the session consumed it.
Live trust is installed through generated machine or composition authority,
such as mob wiring or a pairing/binding ceremony. A non-empty
trusted_peers.json is a persisted projection, not a supported startup seed,
and the runtime rejects it rather than treating hand-edited rows as authority.
Key distinction
- Agent-side comms tools are what the model can use during a turn:
send_message,reply_to_peer,send_request,send_response, andpeers. - Host-side comms/session ingress APIs are what applications use to feed
work into the runtime:
comms/send,comms/peers, andsession/external_event. - Private supervisor traffic uses the same signed transport but remains a
separate typed authority protocol. Naming
supervisor.bridgein a request never grants supervisor authority; machine admission still decides it.
reply_to_peer is a turn-scoped capability. The runtime pre-addresses it from
the peer message that caused the current turn, so the model does not supply a
peer identity. send_message remains the path for unsolicited collaboration,
and send_response remains only for typed send_request traffic.
Content-bearing envelopes can carry a signed sender declaration of clean or
tainted. No declaration is a third state, not an implicit clean. Host send
surfaces can inherit, set, or suppress the runtime declaration; agent tools
inherit the host-owned runtime declaration and cannot override it per send.
