Agent/
White Paper · v1.0 · June 2026

Agent

A policy-constrained
control plane for
agentic workflows.

An agentic workflow conforms only if decomposition, eligibility, verification, release, safe non-execution and trace emission are enforced as first-class runtime obligations.

Read the paper on ZenodoSee the architecture
Denish Patel, FRICS MBA MBCS · Darwinian Angel Ltd
§ 1 · The operator

One equation. Six obligations. No silent failures.

Agent/π(x) =  ReleaseVerify_π ∘ Compose ∘ LocalVerify_π ∘ Execute ∘ SafeRoute_π ∘ Decompose_π(x) ⇒ (y, τ, σ)
Decompose_π
Turn the work object into typed task contracts.
SafeRoute_π
Filter executors by capability, authority, risk.
Execute
Run the selected executor against the task contract.
LocalVerify_π
Check each intermediate before downstream use.
Compose
Stitch verified intermediates into a coherent result.
ReleaseVerify_π
Final gate before output leaves the system.

The formulation is feasible-first. A high-scoring executor is never eligible merely because it appears capable or inexpensive — it must first satisfy hard policy and operational constraints.

§ 2 · Five commitments

What makes a workflow conformant.

01

Feasibility precedes utility.

Only eligible executors are scored. Capability without permission earns zero seats at the table.

02

Authority is permission-set inclusion.

Not a seniority level. Not a generic ‘agent’ status. A concrete set of permissions on a runtime principal.

03

Verification gates dependency flow.

Intermediate outputs must be checked before any downstream task is allowed to consume them.

04

No eligible executor is a valid outcome.

Abstain, escalate, re-decompose, request authority, or terminate. Silence is never acceptable.

05

Trace is part of the return contract.

The system returns (output, trace, status) — not just an answer. Every material transition is recorded.

§ 3 · Reference architecture

The whole pipeline, on one rail.

01
x
Work object
02
Decompose_π
Typed task contracts
03Gate
SafeRoute_π
Feasible executors only
04
Execute
Run against contract
05
LocalVerify_π
Check before downstream use
06
Compose
Stitch verified results
07
ReleaseVerify_π
Final release gate
08
(y, τ, σ)
Output · trace · status
↳
SafePath

When the feasible set is empty: abstain, escalate, re-decompose, request authority, or terminate. Tracked, traced, never silent.

§ 4 · Worked example

Procurement review, decomposed.

One work object becomes three typed task contracts. Each one carries its own eligibility logic and its own verification gate.

T1task_contract

Extract & normalise quotes

Eligibility
Data-extraction capability + read-access to vendor inbox.
Verification
Schema validation · source grounding.
T2task_contract

Score against rubric

Eligibility
Procurement-policy permission · risk_ctx ≤ ε.
Verification
Cross-model review · rubric trace.
T3task_contract

Draft approval memo

Eligibility
Legal-draft tools · ‘compose-memo’ permission on principal.
Verification
Human review required — release blocked until signed.
§ 5 · Claim discipline

What we claim — and, just as importantly, what we don’t.

Area
Defensible
Not claimed
Contribution
A conformance-oriented control-plane abstraction for governed delegation.
A new theorem, foundation model, or universal orchestration algorithm.
Mathematics
A formal operator, feasible-set constraint, routing objective, verification contract, and trace semantics.
Proof that a selected executor is globally optimal or always correct.
Product value
Explicit boundaries for decomposition, authority, risk, verification, human review, and release.
Safety, reliability, compliance, or business value by architecture alone.
Evidence
A falsifiable evaluation protocol and ablation design.
Measured performance gains before a pilot is run.
§ 6 · Evaluation protocol

Falsifiable by design.

A four-rung ablation ladder. Each rung adds one obligation; each rung is independently measurable.

  1. B1
    Single-agent baseline
    One model, one principal, no routing layer.
  2. B2
    + Decomposition
    Task contracts, but no eligibility filtering.
  3. B3
    + SafeRoute + LocalVerify
    Feasible-first routing with intermediate checks.
  4. B4
    Full AgentDivide
    Release gate, safe non-execution, full trace emission.