flowchart LR
  H[human A2A client] --> V[GraphOS verified A2A adapter]
  V --> T[A2AService and operation invoke]
  T --> O[agent orchestrator public port]
  T --> E["engine WorkItem, grant and plan leases"]
  T --> F[fleet via hosted operation invoke]
  E --> A[durable audit reservation and outcome]

flowchart LR
  C[A2A caller] --> AC[Agent Card: from_wired_authorities]
  C --> S[message/stream]
  C --> G["tasks/get (history)"]
  S --> AU["AU WorkItem event stream (AU-CONTROL-001)"]
  G --> EG["EG durable transition ledger (EG-DURABLE-KERNEL)"]
  AU --> PN[push-notification trigger]
  PN --> OB["EG durable outbox (EG-DURABLE-KERNEL-R001)"]

flowchart LR
  C[A2A caller: agent graph ref + contextBudgetTokens] --> D[admit_tool_subset admission door]
  D -->|needs| EG["EG AgentAssemble (EG-DECISION-ENGINE-R036)"]
  D -->|needs| AU["AU signed AgentTurnEnvelope allowed-tool-subset (AU-CONTROL-R035)"]
  D -->|refused| R["typed ToolSubsetAdmissionDecision (admitted=False; reason; provenance)"]
  D -->|admitted, once both land| A["ToolSubsetAdmissionDecision (admitted tools + provenance)"]
  A --> X[OrchestratorA2ARouter / WorkItemA2AAuthority dispatch]

sequenceDiagram
    participant Caller
    participant Host as GraphOS invoke
    participant EG
    participant SDK
    participant Agent as AU agent
    Caller->>Host: authenticated run + idempotency key
    Host->>EG: resolve skill, workflow, policy and distribution
    EG-->>Host: bound decisions and versioned identities
    Host->>Host: certify dependencies, admit all tools, reserve capacity
    Host->>SDK: approved typed allocation
    SDK-->>Host: actual instance receipt
    Host->>Agent: admitted skill identity and model configuration
    Agent->>EG: durable result through published execution contract
    Host->>EG: apply existing aggregation to result receipts
    EG-->>Caller: governed result and provenance

flowchart LR
  C[Client] --> B[Transport identity and admission]
  B --> P[Shared action policy]
  P --> S[Typed application operation]
  S --> E[Graph engine client]
  S --> A[Agent runtime public API]
  S --> K[Connector SDK runner]
  S --> R[One result and receipt mapper]
  R --> C

flowchart LR
    B["Browser, CLI, MCP, A2A"] --> C[GraphOS serving composition]
    C --> A[Authenticator per mode]
    A --> P[Principal and scope resolver]
    P --> I[Local issuer and short-lived token]
    I --> U[Verified actor and delegated session]
    U --> E["Engine identity, RBAC, CheckAccess, elevation, lease, audit"]
    E --> R[Typed redacted result]
    R --> C

flowchart LR
  Browser --> Ingress[Operator TLS ingress]
  Ingress --> Gateway[GraphOS gateway]
  Gateway --> Admission[Existing identity middleware]
  Admission --> Service[GraphOS application service]
  Service --> Engine[Graph engine authorization]
  Browser --> IdP[Operator OIDC provider]

stateDiagram-v2
  [*] --> STOPPED
  STOPPED --> STARTING: start()
  STARTING --> RUNNING: is_connected observed
  STARTING --> STOPPED: not connected, skipped
  STARTING --> DEGRADED: adapter missing/import failed
  RUNNING --> BACKING_OFF: recoverable listener failure
  BACKING_OFF --> RUNNING: listener resumed
  BACKING_OFF --> STOPPING: stop() during backoff
  RUNNING --> STOPPING: stop()
  DEGRADED --> STOPPING: stop()
  STOPPING --> STOPPED: tasks drained

flowchart LR
  C[MCP / HTTP / A2A / fleet forwarder] --> S[verified surface adapter]
  S --> I["invoke: validate, scopes, policy, subject, effect, audit"]
  I --> R[one typed operation registry]
  I --> E[engine client under caller claims]
  I --> A[agent service via public port]
  I --> F[fleet gateway under caller credential]
  I --> D[durable audit and plan lease]
  R --> G["generated OpenAPI, schemas and clients"]

flowchart LR
  Candidate --> Verify[Verify manifest and compatibility]
  Verify --> Plan[Topological dry run]
  Plan --> Stage[Apply one digest-pinned stage]
  Stage --> Probe[Readiness and functional probe]
  Probe -->|pass| Stage
  Probe -->|fail| Stop[Stop and rollback decision]
  Stage --> Complete[Complete signed receipt]