{"ok":true,"tool":"workflow-guard-planner","module_version":"1.0.0","result":{"slug":"workflow-guard-planner","name":"Workflow Guard Planner","version":"1.0.0","category":"workflow-reliability","status":"beta","mode":"lookup","summary":"Plan a bounded reliability sidecar for an external agent workflow.","description":"Converts 17 closed capability facts into a deterministic guard sequence, honest guarantee, recovery rule, and residual risks. It performs no external call, creates no coordination state, and explicitly abstains from ordinary one-time low-risk work.","when_to_use":["A repeated, scheduled, parallel, quota-sensitive, or duplicate-sensitive external workflow needs a deterministic reliability plan.","An agent must select sidecar guards, verification, recovery, and the strongest honest guarantee from known capability facts."],"do_not_use_when":["The task is one ordinary low-risk read or write with no retry, concurrency, schedule, quota, freshness, or duplicate concern.","The request is simply to create one note or record now.","External payloads, credentials, URLs, records, or provider-specific execution are required."],"tested_with":["17-field reliability contract v1","deterministic TypeScript/Python parity cases"],"input_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"contract_version":{"type":"string","const":"1"},"operation_class":{"type":"string","enum":["read","create","update","send","delete","refresh","batch"]},"item_operation_class":{"anyOf":[{"type":"string","enum":["read","create","update","send","delete","refresh"]},{"type":"null"}]},"duplicate_harm":{"type":"string","enum":["none","low","material","irreversible"]},"parallel_workers":{"type":"integer","minimum":1,"maximum":100},"scheduled":{"type":"boolean"},"retry_possible":{"type":"boolean"},"provider_idempotency":{"type":"string","enum":["none","request_key","atomic_unique_constraint"]},"destination_search":{"type":"string","enum":["none","eventual","strong"]},"stable_marker":{"type":"boolean"},"conditional_write":{"type":"boolean"},"read_after_write":{"type":"boolean"},"delivery_status":{"type":"boolean"},"compensation":{"type":"string","enum":["none","reversible","manual"]},"shared_rate_limit":{"type":"boolean"},"maximum_concurrency":{"anyOf":[{"type":"integer","minimum":1,"maximum":100},{"type":"null"}]},"freshness_required":{"type":"boolean"}},"required":["contract_version","operation_class","item_operation_class","duplicate_harm","parallel_workers","scheduled","retry_possible","provider_idempotency","destination_search","stable_marker","conditional_write","read_after_write","delivery_status","compensation","shared_rate_limit","maximum_concurrency","freshness_required"],"additionalProperties":false},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"valid":{"type":"boolean","const":true},"decision":{"type":"string","enum":["sidecar","no-sidecar"]},"decision_reason":{"type":"string","enum":["reliability-guard-required","ordinary-one-time-low-risk"]},"profile":{"anyOf":[{"type":"string","enum":["create-once","update-safely","send-at-most-once","refresh-if-stale","fan-out-bounded","scheduled-run"]},{"type":"null"}]},"additional_profiles":{"maxItems":5,"type":"array","items":{"type":"string","enum":["create-once","update-safely","send-at-most-once","refresh-if-stale","fan-out-bounded","scheduled-run"]}},"guarantee":{"anyOf":[{"type":"string","enum":["provider-idempotent","duplicate-resistant","concurrency-safe","rate/concurrency-bounded","best-effort"]},{"type":"null"}]},"stages":{"maxItems":20,"type":"array","items":{"type":"object","properties":{"order":{"type":"integer","minimum":1,"maximum":20},"actor":{"type":"string","enum":["caller","agent-enhancer","external-plugin"]},"action":{"type":"string","enum":["derive_opaque_operation_identity","acquire_run_lock","acquire_lock","acquire_lease","acquire_semaphore","consume_rate_gate","read","search_stable_marker","read_current_version","create","apply_update","send","delete","refresh","read_after_write","query_delivery_status","mark_seen_after_verification","arrive_barrier","report_outcome"]},"candidate_tool":{"type":"string","enum":["penny-lock","freshness-lease","swarm-semaphore","swarm-rate-gate","global-seen-stamp","barrier-bell"]}},"required":["order","actor","action"],"additionalProperties":false}},"timeout_recovery":{"anyOf":[{"type":"string","enum":["search_marker_then_bounded_recheck","query_delivery_then_stop_if_uncertain","re_read_then_replan","retry_safe_external_read","stop_for_review"]},{"type":"null"}]},"residual_risks":{"maxItems":10,"type":"array","items":{"type":"string"}},"unsupported_claims":{"maxItems":10,"type":"array","items":{"type":"string"}}},"required":["valid","decision","decision_reason","profile","additional_profiles","guarantee","stages","timeout_recovery","residual_risks","unsupported_claims"],"additionalProperties":false},"payment":{"kind":"free"},"side_effects":[],"retention":"Capability enums are evaluated in memory. The planner accepts no payloads, credentials, URLs, or external record identifiers and retains no request state.","limits":{"capability_fields":17,"max_parallel_workers":100,"max_stages":20,"max_client_requests_per_minute":30,"max_global_requests_per_minute":120},"examples":{"input":{"contract_version":"1","operation_class":"create","item_operation_class":null,"duplicate_harm":"material","parallel_workers":3,"scheduled":true,"retry_possible":true,"provider_idempotency":"none","destination_search":"eventual","stable_marker":true,"conditional_write":false,"read_after_write":true,"delivery_status":false,"compensation":"manual","shared_rate_limit":false,"maximum_concurrency":null,"freshness_required":false},"output":{"valid":true,"decision":"sidecar","decision_reason":"reliability-guard-required","profile":"create-once","additional_profiles":["scheduled-run"],"guarantee":"duplicate-resistant","stages":[{"order":1,"actor":"caller","action":"derive_opaque_operation_identity"},{"order":2,"actor":"agent-enhancer","action":"acquire_run_lock","candidate_tool":"penny-lock"},{"order":3,"actor":"agent-enhancer","action":"acquire_lock","candidate_tool":"penny-lock"},{"order":4,"actor":"external-plugin","action":"search_stable_marker"},{"order":5,"actor":"external-plugin","action":"create"},{"order":6,"actor":"external-plugin","action":"read_after_write"},{"order":7,"actor":"agent-enhancer","action":"mark_seen_after_verification","candidate_tool":"global-seen-stamp"},{"order":8,"actor":"caller","action":"report_outcome"}],"timeout_recovery":"search_marker_then_bounded_recheck","residual_risks":["no_cross_plugin_transaction","destination_search_is_eventually_consistent","lock_has_bounded_ttl","seen_stamp_is_advisory"],"unsupported_claims":["sidecar_state_proves_external_completion","cross_plugin_exactly_once"]},"negative":[{"scenario":"The task is one ordinary low-risk read or write with no retry, concurrency, schedule, quota, freshness, or duplicate concern.","expected_error":"INVALID_INPUT","charged":false}]},"execution":{"errors":[{"code":"INVALID_INPUT","retryable":false,"charged":false,"recovery":"Correct the request to match input_schema."},{"code":"TOOL_PAUSED","retryable":true,"charged":false,"recovery":"Wait for the operator to resume the tool."},{"code":"RATE_LIMITED","retryable":true,"charged":false,"recovery":"Retry after the response Retry-After interval."},{"code":"DEPENDENCY_UNAVAILABLE","retryable":true,"charged":false,"recovery":"Retry with the same idempotency identity."}],"idempotency":{"required":false,"mock_or_unpaid_header":null,"x402_extension":null,"replay_retention":null}},"endpoints":{"describe":"/v1/tools/workflow-guard-planner","execute":"/v1/tools/workflow-guard-planner"}},"meta":{"request_id":"req_1df2b029eed34a16b36fd963f2160fc7","observed_at":"2026-07-26T03:20:34.437Z"}}