Craft Goal

Craft the autonomy contract above AgentOps RPI. A goal is a persistent Mayor over a bead-shaped experiment graph. Each RPI is one scientific trial; the goal selects the next useful trial, preserves what was learned, and ratchets toward a larger outcome.

Goal / Mayor: observe graph → choose bounded wave → consume verdicts → ratchet
  └─ Bead: durable experiment intent, context, scratch, evidence, and links
       └─ RPI: plan → implement → fresh validate → bounded repair → verdict → report
            └─ Implementation: one RED → GREEN → refactor experiment

The number of RPIs need not be known in advance. The goal is safe when success is decidable, every experiment is bounded, evidence retains its provenance, and the authorization envelope cannot silently renew itself. Beliefs are revisable: new evidence may retract an earlier claim. More stored knowledge is neither progress nor proof that knowledge is correct.

Insight: bounded waves shorten the feedback loop; one hard, non-renewing campaign envelope prevents those waves from becoming infinite continuation.

Authority boundary. The emitted goal prompt and safety report are inert caller-owned text. Crafting one creates no goal, starts no runtime, and mutates no bead; it confers no standing authorization. The prompt drives RPI dispatch only when a caller pastes it into their own goal runtime under their own authority, and only within the non-renewing envelope the caller then sets.

Named failure mode — completion treadmill: discoveries recursively become requirements and activity continues without new information. Its opposite is first-red abandonment: one falsified hypothesis ends a viable campaign. Anti-pattern: choose endless retries or stop on the first red. Corrective: continue while experiments produce a defined ratchet and remain inside the envelope; invoke an andon on churn, judgment, or exhaustion. Stop when the goal reports ACHIEVED, NOT_ACHIEVED, or NEEDS_OPERATOR.

Modes

Stop after 1 compilation pass. Never create a goal or mutate beads.

Admission and sizing

Fuzzy route is acceptable; fuzzy success is not. Before goal creation, the caller must know the outcome, what evidence would prove it, non-goals, and authority. The exact experiment graph may still be unknown.

• Return USE_RPI for one shaped experiment with no verdict-driven follow-on.
• Use a goal for a terminal outcome that may need several related experiments.
• A shaped goal with no beads may begin with 1 bounded discovery wave that creates the root and initial experiment beads.
• Return UNSAFE_GOAL when no falsifiable first question or terminal evidence can be named. Route that intent to idea/plan work.
• Return UNSAFE_GOAL for indefinite monitoring or event reaction; that is an automation, not a terminal goal.

Goals may be different sizes. Size the wave and hard campaign envelopes to the outcome; do not invent one universal budget.

Critical constraints

• Closed outcome, adaptive route: Freeze terminal acceptance. New facts may change hypotheses and dependencies, never silently enlarge success. Why: discovery should steer the route, not redefine the finish line.
• Bead knowledge graph: Use the tracker as durable memory, not a parallel goal ledger. Root epic = outer intent; child bead = one experiment/RPI. Why: compaction must not erase the scientific record.
• RPI membrane: One candidate gets one bounded RPI and an author-distinct fresh validation result. The goal may request durable verdict evidence but never rewrites it. Why: orchestration cannot author its own proof.
• Brownian ratchet: Continue only when a result adds non-duplicative, decision-relevant knowledge or advances acceptance. Why: activity without information is churn.
• Two-level bounds: Every RPI is bounded; every dispatch wave is bounded; the full goal also has monotonic hard ceilings. Why: a new wave must not mint a new campaign.
• Earned andon: Ordinary informative red may change the route within frozen acceptance. Repeated no-information failure, regression, recurrence, oscillation, or scope pressure enters HOLD. Exactly 1 bounded fresh helper per incident may return UNSTUCK or ESCALATE inside the remaining allowance; cancellation, an explicit refusal/judgment lane, or a spent hard budget skips the helper and stops work.
• Operator legibility: At each wave boundary, report the acceptance matrix, graph frontier, verdicts, ratchets, churn, remaining budget, and next thesis.
• Exterior self-repair: Repair an unstable factory from an ordinary shell/worktree and use the factory only for a declared bounded canary.

Stop when the goal reports ACHIEVED, NOT_ACHIEVED, or NEEDS_OPERATOR.

Bead graph contract

Record each experiment in a bead with:

• question or hypothesis and the acceptance gap it addresses;
• method, expected observation, falsifier, scope, and non-goals;
• notes/scratch sufficient to resume after compaction;
• exact RPI verdict/evidence references and observed learning.

Use graph semantics deliberately:

• parent-child for goal → experiment membership;
• blocks only for real execution ordering;
• related for alternatives or correlated observations;
• discovered-from for provenance of newly exposed work.

Use the caller's actual tracker as the authority for work and dependencies. In this repository that is BD (bd); verify bd context --json before mutation. BR (br) is a different implementation, never a fallback or alias for BD. Beads Viewer (bv) offers advice over an explicitly refreshed export; recheck its suggestions against live BD and frozen acceptance. Viewer ranking proves neither readiness nor permission for concurrent writes. Never treat a static plan as fresher than the live graph. Craft-goal reads tracker state when present but starts nothing and needs no tracker installed to compile a prompt.

What counts as a ratchet

An RPI makes progress when its durable result does at least one:

1. proves part of terminal acceptance;
2. falsifies a live hypothesis with discriminating evidence and prunes it;
3. resolves an uncertainty or owner so the next experiment is materially different.

More code, a changed digest, fewer findings, another commit, a repeated error, or a rewritten plan is not itself progress. Cite the acceptance criterion or blocking uncertainty, the exact evidence, and the decision it changes. A NOT_PROVEN or FAIL may be informative when it falsifies a live hypothesis or narrows the next experiment; repeated red without new information is churn. Preserve necessary unresolved findings even when a result is informative.

Separate newly discovered pre-existing defects from regressions introduced by the change using before/after reproduction or equivalent causal evidence under the same acceptance. Counts, timestamps, and new ids cannot establish cause. Unknown cause, a reopened finding, or recurrence of a closed finding class warrants causal HOLD; none alone proves that the design is wrong. Do not relabel a necessary finding as optional to claim progress. Stop when no ratchet remains inside the envelope.

Mayor loop

1. Observe. Reconstruct the root outcome, acceptance matrix, ready graph, prior verdicts, unresolved uncertainties, and remaining budgets.
2. Select one bounded wave. Choose the smallest set of high-information ready experiments. Parallelize only disjoint write and regeneration scopes.
3. Run RPIs. Each selected bead goes through exactly one RPI, ending in its independent verdict and human-readable summary.
4. Ratchet the graph. Preserve evidence and learning. PASS may satisfy a criterion. Red may revise a hypothesis or expose a child experiment.
5. Classify discoveries.
   • Necessary for frozen acceptance, within authority and remaining budget: add a discovered-from child and consider it in a later wave.
   • Useful but not necessary: record/link it; do not execute it in this goal.
   • Changes acceptance, exceeds authority, or cannot fit the envelope: HOLD.
6. Checkpoint. Measure ratchet versus churn, then continue, invoke the breaker, or emit a terminal report.

Every newly selected RPI must address an unmet criterion or a named uncertainty blocking one. A new commit, subject, bead, helper, or wave never resets totals.

Convergence and andons

Specify both:

• Wave envelope: RPIs, concurrency, wall time/tokens, live attempts, and a checkpoint at its end.
• Goal envelope: total RPIs, wall time/tokens, live attempts, compactions, and any patch/surface limit for the whole campaign.

Dispatch budget: every wave declares numeric RPI, token, time, and concurrency limits before any work is selected, including helper and validation costs. Name the native control that enforces each claimed hard limit and how remaining allowance is observed. Objective text is an instruction, not enforcement; do not represent an unmeasured aggregate as a remaining balance. No helper, retry, new subject, compaction, or wave renews the goal allowance.

Continue automatically across waves only while a ratchet exists and the next experiment fits frozen acceptance, authority, and remaining envelope.

Enter HOLD on any declared trigger: repeated blocker, no ratchet for the configured number of RPIs, oscillation between prior approaches, introduced regression, unknown new-defect cause, recurrence, requested acceptance change, or operator-reserved decision. HOLD stops implementation for causal examination. While the caller's remaining allowance admits it, consult exactly 1 bounded fresh-context helper per HOLD incident; rewording the blocker or receiving an automatic continuation does not create a new incident. Supply acceptance, observations, failed approaches, exact evidence, and remaining allowance.

• UNSTUCK must name a materially different experiment, its discriminating check, and why it fits unchanged acceptance, authority, and remaining bounds; only the selected outer goal may resume. It never revives a spent RPI bound.
• ESCALATE, an unhelpful helper, or no admissible experiment emits NEEDS_OPERATOR and performs no more implementation or helper dispatch.
• Cancellation stops immediately. An explicit refusal/judgment lane or a genuinely spent hard time, cost, or quota ceiling skips the helper; report the refusal or NOT_ACHIEVED with the exact gaps. A retry threshold alone is not proof of a spent hard budget.

Native goal objective text and a terminal report do not enforce continuation. No agent-callable native pause or aggregate allowance operation is demonstrated by this contract. Report which native controls were actually observed, any unmeasured allowance, and whether implementation stopped; never claim the goal is paused from prose alone. When operator action is required, report that need truthfully and keep further work stopped. The persistent controller's threshold for recording blocked is separate status bookkeeping, never permission for extra experiments or helpers. Stop when any terminal report is emitted.

Frozen prompt

Read and fill the copy-paste-only goal prompt. Preserve its headings and terminal semantics; replace every angle-bracket field.

Quality

Lead with SAFE_TO_CREATE, USE_RPI, or UNSAFE_GOAL. SAFE_TO_CREATE judges prompt content; it does not certify native enforcement or create a goal. Return the copy-paste prompt, separate goal-tool token budget, assumptions, and one lint line for: outcome, evidence, admission, bead graph, RPI boundary, ratchet, discovery, wave budget, hard budget, breaker, operator andon, scope, self-hosting, and terminal reports.

Output validator — a captured decision must lead with exactly one terminal token:

printf '%s\n' "$decision" | head -n1 | grep -Eq '^(SAFE_TO_CREATE|USE_RPI|UNSAFE_GOAL)\b'

This pins the machine-checkable shape of the output contract. scripts/validate.sh still enforces structural hygiene; the fourteen lint dimensions above stay a human rubric because they judge prompt content that has no persisted artifact at gate time.

Done when:

• success is finite but the route may adapt;
• the tracker can reconstruct intent, experiments, evidence, and provenance;
• informative red can continue but repeated non-information cannot;
• recursion cannot expand acceptance or reset monotonic ceilings;
• both successful and non-success terminal reports exist.

Stop after 1 lint pass and zero goal executions. Paired evidence: docs/learnings/2026-07-12-go-cli-goal-stall-tracker-layer-confusion.md and skills/rpi/SKILL.md.

Failure behavior

Return UNSAFE_GOAL with missing decisions. Do not invent acceptance, authority, graph semantics, or campaign size. The caller owns revision and goal creation.