name

aoa-summon

description

Delegate one bounded child-agent route from an anchored parent task, including host launch, named outputs, return validation, and parent closeout. Use only when the user explicitly asks to delegate or summon a narrower helper. An incomplete summon request must block, not receive an allowed decision. Do not use without a parent anchor, with unresolved branching or unnamed outputs, for unsplit deep work, or to bypass approval, owner, or proof boundaries.

aoa-summon

Intent

Preserve the existing summon function as an executable owner skill: a child is not "summoned" merely because a plan names one. Execution requires a real host binding, a runtime child handle, a bounded return, and parent-side closeout.

Owner-source return

Resolve the canonical aoa-agents root before any owner-relative read:

Record <bundle_dir> as the absolute directory containing the SKILL.md actually loaded; never resolve from the task working directory. Initialize one unresolved <source_route> and <owner_root>.
In one tool turn containing no other read or command, inspect exactly one same-bundle handle: <bundle_dir>/.aoa-skill-source.json. Await its result. If it is a regular file, set <source_route> to source-handle and require schema aoa_skill_source_receipt_v1 or aoa_skill_source_receipt_v2, this bundle name, owner aoa-agents, version 0.2.17, an existing absolute owner_root, a safe relative source_path, and <owner_root>/<source_path>/SKILL.md. For v2 also require non-empty digest, source_fingerprint, source_fingerprint_scope, and prompt_description_sha256. When capability_graph_hash is present, require it to be a non-empty string and preserve it. If the path exists but is invalid, mismatched, or not a regular file, return blocked_missing_owner_source; do not try another location.
Only when that exact same-bundle handle path does not exist, set <source_route> to git and run git -C <bundle_dir> rev-parse --show-toplevel exactly once. Require the returned root's skills/port.manifest.json to declare the expected owner, bundle, and path.
In the next tool turn, read only <owner_root>/skills/port.manifest.json; do not include an owner document, bundle reference, evidence read, or unrelated command. Await the result. In the source-handle branch, require the same owner_repo, bundle name, and bundle path as the handle. In the git branch, require aoa-agents, this bundle name, and its actual bundle path. If the manifest shared a tool batch with an owner document, return blocked_owner_source_gate_not_observed and do not use either result.
Only after manifest success, read the three named owner documents below in a later tool turn. Then owner-source resolution is complete. Do not run or retry the other source branch, including after a later owner-document read fails. Any handle, git, manifest, path, or owner mismatch returns blocked_missing_owner_source and ends this invocation.
Never use find, rg --files, parent traversal, sibling scans, workspace conventions, temporary fixtures, .system, or another skill directory to discover a substitute owner root.

Treat handle schema, owner ref, dirty posture, digest, source fingerprint, capability graph hash, and prompt-description hash as install provenance, not authority or current-parity proof. A failed or non-serial resolution is terminal for this invocation; do not execute or decide an owner-dependent summon from the installed copy alone. On success, report <source_route>, <owner_root>, the receipt schema and identity dimensions or git action ref, the manifest action ref, and the later owner-document action ref. Read exactly <owner_root>/mechanics/titan/parts/summon-boundary/README.md, <owner_root>/mechanics/titan/parts/summon-boundary/docs/summon-boundary.md, and <owner_root>/mechanics/titan/parts/summon-boundary/docs/summon-protocol-v2.md as the owner summon boundary; do not search for substitutes.

Trigger boundary

Use when the user explicitly requests delegation/summoning and the parent route has one settled branch, real anchor, quest passport, named outputs, and return owner. Use decision-only mode when the user asks whether delegation is lawful.

Do not use for implicit background agents, broad orchestration, unresolved route forks, unanchored work, unnamed outputs, or a child used to widen authority or evade a gate.

Inputs and outputs

input: summon-request-v3 plus explicit intent decide or execute; see references/summon-request-v3.schema.json and references/contract.yaml
output: summon-result-v3 with decision, binding and runtime state, child handle when launched, immutable request identity and intent, one validation record per named output, closeout handoff, effects, and stop

Procedure

Read references/contract.yaml and references/lane-and-return.md to EOF.
Validate the literal supplied request against summon-request-v3 and the additions in references/contract.yaml before deciding a lane. A route-shaped description is not a request packet: if required objects, fields, input refs, or bounded task content are absent, return blocked_missing_request_input with lane: null, allowed: false, and runtime state not_run; never infer or mint them. An input-free child must carry an explicit empty child_inputs array. Only then evaluate gates. The request carries one immutable request_ref and a request_digest computed as SHA-256 over canonical JSON with request_digest omitted. d3+ returns split_required; missing progression/self-agent/stress/approval evidence returns the matching gate.
In decide, stop after one typed decision and executable return plan. Do not probe the host merely to strengthen a decision-only answer. When the binding was not actually inspected, return binding.inspected: false and binding.available: null; an allowed lane is not a claim that launch is currently available.
In execute, require explicit user delegation intent and a callable host binding; launch exactly one bounded child, record its runtime handle, await or retrieve its terminal result, validate named outputs, and close the parent handoff. If the binding is absent, return blocked_binding_unavailable. Copy the request ref, digest, and intent into the result; execute intent may never terminate as a decision-only decided state.

Contracts

local host delegation is the default; remote transport needs a real separate execution surface, not prestige
child scope, tools, effects, authority, and stop line cannot exceed passport
failed, blocked, or narrowed child results still return explicitly
child traces are session aids, never proof, memory canon, or owner truth
technique lineage is optional provenance, not a runtime dependency

Verification

confirm parent anchor, named outputs, selected lane, all required gates, and exact host binding before launch
never report binding availability from configuration, catalog presence, or assumption; only a real host-interface inspection may set binding.inspected: true
confirm every required request field and input ref was literally supplied before returning allowed; a task with no inputs must say so through an explicit empty child_inputs array
distinguish decided, launched, running, returned, accepted, blocked, and failed; a JSON plan is not runtime execution
require failed child execution to preserve the inspected binding, child handle, and child-agent-runtime effect just like every other post-launch state; reject the retired result-side expected_outputs field
validate returned artifacts against the request and preserve residual risk, checkpoint/memo candidates, and owner closeout without promoting them
build return_validation.output_checks as an object keyed by every request expected_outputs name and no others; the key is the output identity, so duplicates cannot exist; accept only when every value is received, artifact-linked, and accepted
resolve request_ref, verify request_digest, and compare the request expected_outputs set exactly with the result output_checks keys before aggregate acceptance; no missing or extra key may advance parent work
keep gate decisions and lanes bidirectionally aligned; aggregate acceptance is true only in the accepted runtime state, and every allowed route requires parent closeout
preserve immutable request identity, request intent, concrete parent owner, and next route in every allowed result; executable child states must carry the actual host execution effect

aoa-summon

Intent

Owner-source return

Resolve the canonical aoa-agents root before any owner-relative read:

Record <bundle_dir> as the absolute directory containing the SKILL.md actually loaded; never resolve from the task working directory. Initialize one unresolved <source_route> and <owner_root>.

In one tool turn containing no other read or command, inspect exactly one same-bundle handle: <bundle_dir>/.aoa-skill-source.json. Await its result. If it is a regular file, set <source_route> to source-handle and require schema aoa_skill_source_receipt_v1 or aoa_skill_source_receipt_v2, this bundle name, owner aoa-agents, version 0.2.17, an existing absolute owner_root, a safe relative source_path, and <owner_root>/<source_path>/SKILL.md. For v2 also require non-empty digest, source_fingerprint, source_fingerprint_scope, and prompt_description_sha256. When capability_graph_hash is present, require it to be a non-empty string and preserve it. If the path exists but is invalid, mismatched, or not a regular file, return blocked_missing_owner_source; do not try another location.

Only when that exact same-bundle handle path does not exist, set <source_route> to git and run git -C <bundle_dir> rev-parse --show-toplevel exactly once. Require the returned root's skills/port.manifest.json to declare the expected owner, bundle, and path.

In the next tool turn, read only <owner_root>/skills/port.manifest.json; do not include an owner document, bundle reference, evidence read, or unrelated command. Await the result. In the source-handle branch, require the same owner_repo, bundle name, and bundle path as the handle. In the git branch, require aoa-agents, this bundle name, and its actual bundle path. If the manifest shared a tool batch with an owner document, return blocked_owner_source_gate_not_observed and do not use either result.

Only after manifest success, read the three named owner documents below in a later tool turn. Then owner-source resolution is complete. Do not run or retry the other source branch, including after a later owner-document read fails. Any handle, git, manifest, path, or owner mismatch returns blocked_missing_owner_source and ends this invocation.

Never use find, rg --files, parent traversal, sibling scans, workspace conventions, temporary fixtures, .system, or another skill directory to discover a substitute owner root.

Trigger boundary

Do not use for implicit background agents, broad orchestration, unresolved route forks, unanchored work, unnamed outputs, or a child used to widen authority or evade a gate.

Inputs and outputs

input: summon-request-v3 plus explicit intent decide or execute; see references/summon-request-v3.schema.json and references/contract.yaml

output: summon-result-v3 with decision, binding and runtime state, child handle when launched, immutable request identity and intent, one validation record per named output, closeout handoff, effects, and stop

Procedure

Read references/contract.yaml and references/lane-and-return.md to EOF.

Validate the literal supplied request against summon-request-v3 and the additions in references/contract.yaml before deciding a lane. A route-shaped description is not a request packet: if required objects, fields, input refs, or bounded task content are absent, return blocked_missing_request_input with lane: null, allowed: false, and runtime state not_run; never infer or mint them. An input-free child must carry an explicit empty child_inputs array. Only then evaluate gates. The request carries one immutable request_ref and a request_digest computed as SHA-256 over canonical JSON with request_digest omitted. d3+ returns split_required; missing progression/self-agent/stress/approval evidence returns the matching gate.

In decide, stop after one typed decision and executable return plan. Do not probe the host merely to strengthen a decision-only answer. When the binding was not actually inspected, return binding.inspected: false and binding.available: null; an allowed lane is not a claim that launch is currently available.

In execute, require explicit user delegation intent and a callable host binding; launch exactly one bounded child, record its runtime handle, await or retrieve its terminal result, validate named outputs, and close the parent handoff. If the binding is absent, return blocked_binding_unavailable. Copy the request ref, digest, and intent into the result; execute intent may never terminate as a decision-only decided state.

Contracts

local host delegation is the default; remote transport needs a real separate execution surface, not prestige

child scope, tools, effects, authority, and stop line cannot exceed passport

failed, blocked, or narrowed child results still return explicitly

child traces are session aids, never proof, memory canon, or owner truth

technique lineage is optional provenance, not a runtime dependency

Verification

confirm parent anchor, named outputs, selected lane, all required gates, and exact host binding before launch

never report binding availability from configuration, catalog presence, or assumption; only a real host-interface inspection may set binding.inspected: true

confirm every required request field and input ref was literally supplied before returning allowed; a task with no inputs must say so through an explicit empty child_inputs array

distinguish decided, launched, running, returned, accepted, blocked, and failed; a JSON plan is not runtime execution

require failed child execution to preserve the inspected binding, child handle, and child-agent-runtime effect just like every other post-launch state; reject the retired result-side expected_outputs field

validate returned artifacts against the request and preserve residual risk, checkpoint/memo candidates, and owner closeout without promoting them

build return_validation.output_checks as an object keyed by every request expected_outputs name and no others; the key is the output identity, so duplicates cannot exist; accept only when every value is received, artifact-linked, and accepted

resolve request_ref, verify request_digest, and compare the request expected_outputs set exactly with the result output_checks keys before aggregate acceptance; no missing or extra key may advance parent work

keep gate decisions and lanes bidirectionally aligned; aggregate acceptance is true only in the accepted runtime state, and every allowed route requires parent closeout

preserve immutable request identity, request intent, concrete parent owner, and next route in every allowed result; executable child states must carry the actual host execution effect

aoa-summon

aoa-summon

Intent

Owner-source return

Trigger boundary

Inputs and outputs

Procedure

Contracts

Verification

More from this repository

More from this repository

aoa-summon

Intent

Owner-source return

Trigger boundary

Inputs and outputs

Procedure

Contracts

Verification