ESS

CanonProtocol calculus
Engineering protocolsEngineering protocols on Canon
LoomNative agent harness
CommissionAgents you can give responsibility to
ESSExecutable system specificationsYou are here
a2aThe A2A protocol as a specification

Docs Example Visualise CLI Releases Status

GitHub

All releases

2026

0.85 — Every witness reads back its effect, and the mutation audit covers grants
0.84 — Generated servers refuse what their OpenAPI refuses, and generated UIs call their binding's routes
0.83 — Optional list appends, binding refusals that check event identities, and refusals that tell states apart
0.82 — Binding scenarios that check event identities, refusals that probe the record, and validation that names the file
0.81 — Nullable Binary64 fields in generated types, name aliases in the schema, and synthesis that follows bindings
0.80 — HTTP-bound inputs and short names in generated types, and input-type rules in Entity Runtime
0.79 — Nested-member claims, Binary64 in conformance suites, and typed authored inputs
0.78 — Structured input examples, rows a deployment provides, and lifecycle summaries
0.77 — Alike HTTP outcomes, wider OpenAPI import, and branches an earlier refusal hides
0.70 — Named rows beside a row set, state wire spellings, and replays that finish
0.63 — Values computed by typed expressions, and one precedence order for guards
0.59 — An authored act states the caller its command is sent as
0.55 — Json in CLI results, and optional values an implementation supplies
0.51 — Branches selected by existence, and output that regenerates anywhere
0.50 — Aggregates over rows a when_related guard admits
0.49 — Served surfaces enforce actor grants, and a related row's state
0.48 — UI tests by node path, and reports from an outside runner
0.47 — UI documents, and generated servers that answer with what a command published
0.43 — instance references inside structured values, one refusal order, and unstated external answers
0.42 — unkillable mutants scored apart, overlap precedence, and counter limits
0.41 — state-scoped refusals, guards over a related row, and a delivery context
0.40 — generated runtimes run every suite, and reader-side composition
0.39 — concurrent histories and direct library returns
0.38 — set effects, caller values, existence-selected outcomes and paged views
0.37 — outcome shapes, guards over the input, and new value types
0.34–0.36 — predicates, stored-field guards, aggregates, and values read from the row
0.31–0.33 — Entity Runtime lowering, sidecars a binding must name, and a Secret that is only present
0.28–0.30 — the history a subject keeps, and what a retry returns
0.22–0.27 — what a binding promises, and the names nobody may invent
0.19–0.21 — adopter schemas, a number that behaves, and a pass over nothing
0.16–0.18 — the scenarios an author writes, and a browser that plays them
0.12–0.14 — four areas, and a command line as a declared surface
0.10–0.11 — the claims a generated scenario could not make
0.8–0.9 — a deployment described, and still nothing applied
0.7.1 — the same pattern, pointed at a Kubernetes cluster
0.7 — one specification, two applications
0.6.1 — no new capability, the existing claims made mechanical
0.6 — the code that was never yours to write
0.5 — what moved, and what that invalidates
0.4.0 — the specification judges the implementation
0.3.3 — twenty gates, closed before the oracle was allowed to start
0.3.2 — one source of truth stops being a claim
0.3.1 — a specification that cannot hold a dangling reference
0.3.0 — the second half arrives, and the two halves meet

Tags

C​

E​

I​

R​

C

E

I

R