itsol-subagent-workflow

name	itsol-subagent-workflow
description	Mode-authorized subagent execution: task split, ownership, reviews, verification, optional commits.

ITSOL Subagent Workflow

Validate authorization through itsol-workflow-mode before delegation. Every task packet must contain workflow_mode, mode_source, decision_authority, scope, artifact_state, execution_mode, and protected_constraints; incomplete, inconsistent, or restriction-conflicting state returns blocked.

Then validate itsol-execution-policy. Every packet carries the complete execution state, observable done_when, a resolved child stop_after no later than the parent, remaining distinct-agent/parallel/review ceilings, and escalation behavior. Missing, expanded, or restriction-conflicting execution state returns blocked.

Accept approved only for genuinely approved governed artifacts, ready-for-execution for reviewed autonomous-planned artifacts, and not-required for direct. A Draft never authorizes execution. Direct mode requires no plan files or paths.

Build a dependency-aware task graph, set a concurrency limit, and assign every packet a stable work_item_id. The same agent type may execute multiple independent packets concurrently or sequentially; identity reuse counts once against max_subagents, while every running packet counts against max_parallel. Give bounded read/write scope, enforce one writer per file/shared contract, require TDD or documented replacement verification, validate every response, and use independent review for changed surfaces. Initiative phase packets also carry initiative_id, phase_id, relevant requirement IDs, canonical artifact paths, current decisions, and phase-level evidence obligations; child completion updates neither initiative nor phase state until the main agent validates and records it. Preserve partial, blocked, failed, unverified, and coverage-gap results. Keep integration and final validation with the main agent.

Only the main agent delegates. Delegated agents must not spawn agents or invoke external agent CLIs. Never set maxTurns. A child response must use completed, partial, blocked, or failed, but the main agent accepts completed only after validating packet evidence and every done_when criterion. Commit only when separately authorized, using Angular convention and one coherent verified slice; otherwise leave changes uncommitted.

Execution Policy

After resolving itsol-workflow-mode, load itsol-execution-policy, resolve the complete sibling execution state and observable done_when, and preserve both contracts through plans, task context, compaction, delegation, continuation, review, and handoff. Resource policy never changes workflow authority. Do not set maxTurns; do not accept agent termination or a completed label without validating evidence.

Read references/guide.md and the focused delegation/review references before delegating.