Agentic Substrate: What an AI System Must Provide to Execute Autonomous Tasks Under Governance Constraints

{"The":[0,47,150],"peer-reviewed":[1],"multi-agent":[2],"literature":[3],"has":[4],"demonstrated":[5],"that":[6,57,206],"agentic":[7,94],"systems":[8],"can":[9,59,295],"reason,":[10],"coordinate,":[11],"and":[12,29,62,133,200,222,240,266,283,308,327],"use":[13,357],"tools":[14,201],"at":[15,213,363],"a":[16,70,97,105,180,191,195,227,336],"level":[17],"sufficient":[18],"for":[19,43,365],"many":[20],"production":[21],"task":[22,45],"classes.":[23],"AutoGen,":[24,169],"MetaGPT,":[25],"ChatDev,":[26],"ReAct,":[27],"Reflexion,":[28],"Toolformer":[30],"between":[31],"them":[32,159],"describe":[33],"agent":[34,112,210],"architectures":[35],"whose":[36],"capability":[37,51,138,196,280],"is":[38,49,66,190,211,245,249,270,274,299],"no":[39],"longer":[40],"the":[41,76,78,83,85,93,102,163,171,175,186,209,232,256,259,275,287,300,304,309,324,360,366],"bottleneck":[42,48],"autonomous":[44],"execution.":[46],"governability:":[50],"alone":[52],"does":[53],"not":[54,74,194,251],"produce":[55],"execution":[56],"humans":[58],"authorize,":[60],"audit,":[61],"refuse.":[63],"Whether":[64],"governance":[65,98,123,148,192,204],"even":[67],"expressible":[68],"in":[69,303],"given":[71],"deployment":[72],"depends":[73],"on":[75,82,167,231,290],"protocol":[77,86,253],"team":[79],"specifies,":[80],"but":[81],"substrate":[84,95,103,241,260,337],"must":[87,157],"run":[88],"over.":[89],"This":[90],"paper":[91,302],"specifies":[92,254,261],"as":[96,104],"surface.":[99],"It":[100,316],"treats":[101],"designed":[106],"layer":[107],"with":[108,343],"named":[109],"primitives":[110],"—":[111,144],"anatomy":[113,189],"(memory,":[114],"reasoning,":[115,199],"tool":[116],"access),":[117],"orchestration":[118],"topology":[119,216],"(single-agent,":[120],"multi-agent,":[121,221],"swarm),":[122],"integration":[124,248],"(admission":[125],"hooks,":[126],"evidence":[127],"channels,":[128],"manifest":[129],"propagation,":[130],"HITL":[131],"escalation),":[132],"runtime":[134],"isolation":[135,273],"(process":[136],"boundaries,":[137],"tokens,":[139,281],"sandboxed":[140],"tools,":[141],"scoped":[142],"credentials)":[143],"each":[145,202,225],"carrying":[146],"explicit":[147],"contracts.":[149],"contracts":[151],"are":[152,264],"substrate-independent:":[153],"any":[154],"compliant":[155],"implementation":[156],"honor":[158],"regardless":[160],"of":[161,311,323],"whether":[162,208],"underlying":[164],"composition":[165],"runs":[166],"LangGraph,":[168],"CrewAI,":[170],"Model":[172],"Context":[173],"Protocol,":[174],"OpenAI":[176],"Agents":[177],"SDK,":[178],"or":[179,349],"bespoke":[181],"stack.":[182],"Four":[183],"claims":[184],"structure":[185,230],"paper.":[187],"Agent":[188],"surface,":[193],"surface:":[197],"memory,":[198],"carry":[203],"obligations":[205],"determine":[207],"governable":[212],"all.":[214],"Orchestration":[215],"determines":[217,243],"authority":[218,229],"distribution:":[219],"single-agent,":[220],"swarm":[223],"orchestrations":[224],"impose":[226],"different":[228],"Governance":[233,247],"Layer":[234],"/":[235,237],"Orchestrator":[236],"Executor":[238],"split,":[239],"selection":[242],"which":[244],"implementable.":[246],"substrate-layer,":[250],"protocol-layer:":[252],"what":[255],"gates":[257],"do;":[258],"how":[262],"they":[263],"invoked,":[265],"only":[267],"substrate-side":[268],"enforcement":[269],"structural.":[271],"Runtime":[272],"blast-radius":[276],"contract:":[277],"process":[278],"isolation,":[279],"sandboxes,":[282],"credential":[284],"scoping":[285],"define":[286],"upper":[288],"bound":[289],"harm":[291],"an":[292],"admission":[293],"failure":[294],"produce.":[296],"Paper":[297,328],"Seven":[298],"seventh":[301],"Mission-Ready":[305],"AI":[306],"decalogy":[307],"second":[310],"three":[312],"Application-layer":[313],"depth":[314],"papers.":[315],"operationalizes":[317],"Skipjack":[318,321],"§6":[319],"(\\"What":[320],"Requires":[322],"Harness":[325],"Substrate\\")":[326],"Six":[329],"§6.1":[330],"(the":[331],"five":[332],"operating-model":[333],"contracts)":[334],"into":[335],"specification.":[338],"Rights":[339],"envelope:":[340],"Citation":[341],"permitted":[342],"full":[344,367],"attribution.":[345],"No":[346],"reproduction,":[347],"redistribution,":[348],"derivative":[350],"works":[351],"without":[352],"written":[353],"permission.":[354],"AI/ML":[355],"training":[356],"disallowed.":[358],"See":[359],"citation":[361],"policy":[362],"https://nonsequitur.tech/pubs/citation-policy/":[364],"rights":[368],"envelope.":[369],"Canonical":[370],"site":[371],"URL:":[372],"https://nonsequitur.tech/white-papers/agentic-substrate/":[373],"Public":[374],"archive:":[375],"yks-pubs/papers/agentic-substrate-v1-preprint.pdf":[376]}