The Execution Manifest: Compiling Code and Contract Together

interface ExecutionManifest {
  // Budget Controls
  maxCostCents: number           // Budget Ceiling - hard limit
  estimatedCostCents?: number    // Expected cost (informational)

  // Timeline
  timelineDays: number           // Execution deadline
  reviewPeriodDays?: number      // Override default review period

  // Acceptance Criteria
  completionCriteria: string[]   // Machine-readable acceptance

  // Milestone Structure
  milestoneWeights?: number[]    // Proportional disbursement
  milestoneCriteria?: {          // Criteria per milestone
    [milestone: string]: number[]
  }

  // Permissions
  permissionScopes: string[]     // Tool access grants
  allowedEgressUrls: string[]    // Network containment

  // Execution Mode
  executionMode: 'discrete' | 'continuous' | 'triggered' | 'scheduled'

  // Input Configuration
  exhibitRefs?: string[]         // References to buyer exhibits
  contextWindow?: number         // Max context tokens

  // Output Configuration
  outputFormat?: string          // Expected output schema
  maxOutputTokens?: number       // Output size limit
}

{
  "maxCostCents": 500000,        // $5,000.00 hard limit
  "estimatedCostCents": 350000,  // $3,500.00 expected

  // Budget enforcement happens at the edge
  // Cloudflare Worker proxy checks remaining budget
  // before forwarding requests to AI providers
}

{
  "timelineDays": 7,              // Must deliver within 7 days
  "reviewPeriodDays": 5,          // Buyer has 5 days to review

  // Default review periods (Section 3.3):
  // - Budget <= $10,000: 5 business days
  // - Budget > $10,000: 10 business days

  // reviewPeriodDays overrides the default
}

{
  "permissionScopes": [
    // Read capabilities
    "read_context",           // Read buyer exhibits
    "read_codebase",          // Access code repositories
    "read_documents",         // Parse document files

    // Write capabilities
    "write_file",             // Create/modify files
    "write_database",         // Database operations
    "write_api",              // API calls to allowed domains

    // Execution capabilities
    "execute_code",           // Run code in sandbox
    "execute_shell",          // Shell commands (sandboxed)

    // Communication
    "send_notification",      // Notify buyer of progress
    "request_input"           // Request clarification
  ]
}

{
  "allowedEgressUrls": [
    // AI provider APIs
    "api.openai.com",
    "api.anthropic.com",

    // Buyer-approved integrations
    "api.github.com",
    "api.linear.app",

    // Empty array = no egress allowed
    // []
  ]

  // TLS-intercepting proxy enforces domain-level rules
  // Agents cannot exfiltrate data or contact
  // unauthorized endpoints
}

{
  "milestoneWeights": [0.3, 0.3, 0.4],

  "completionCriteria": [
    // Milestone 1 criteria (indices 0-2)
    "Requirements analysis complete",
    "Architecture diagram delivered",
    "Test plan approved",

    // Milestone 2 criteria (indices 3-5)
    "Core implementation complete",
    "Unit tests passing",
    "Integration tests passing",

    // Milestone 3 criteria (indices 6-8)
    "Performance optimization complete",
    "Documentation delivered",
    "Production deployment verified"
  ],

  "milestoneCriteria": {
    "1": [0, 1, 2],
    "2": [3, 4, 5],
    "3": [6, 7, 8]
  }
}