Specifications
Open specifications BrainstormRouter publishes for the broader agent runtime ecosystem. Implementations are MIT; the specifications are CC BY 4.0.
These are normative specifications for primitives BrainstormRouter implements and wants other agent runtimes, MCP servers, and tool surfaces to be able to implement compatibly. Each spec is versioned, stable at its current draft number, and citable.
If you implement one of these specs in a different runtime and want to be listed as a conforming implementation, open an issue at github.com/justinjilg/brainstormrouter.
Current specifications
| Spec | Version | Status | Summary |
|---|---|---|---|
| Trust Envelope | v1.0.0-draft-1 | Draft | EdDSA-signed JWT carrying agent identity, budget, scope, trust, observability |
| MCP-OAuth Bridge | v1.0.0-draft-1 | Draft | Maps Trust Envelope claims to OAuth 2.1 protected resource metadata (RFC 8707, RFC 9728) |
Forthcoming
The following specifications are referenced by the published ones above and will land in subsequent drafts:
- ErrorEnvelope v1 — typed
recovery.actionenum for agent control flow - Evidence Export v1 — signed JSONL chain of routing decisions, envelopes, guardrail verdicts, and ChangeSets
- A2A Agent Card Bridge v1 — bidirectional mapping between Trust Envelope and A2A Agent Card v1.2 identity
Versioning policy
All specs use semantic versioning:
- Major (v2, v3, …) — breaking claim renames, format changes, or removal
- Minor (v1.1, v1.2) — new optional claims, new metadata fields
- Patch (v1.0.1) — clarifications, typo fixes, additional test vectors
A spec leaves draft status once at least two independent implementations pass the conformance vectors and at least one third-party system has validated against it.
License
- Specifications (this section): CC BY 4.0 — anyone may implement, fork, or extend with attribution.
- Reference implementations: MIT, shipped via
@brainstormrouter/*packages on npm + PyPI.