User
user_The person requesting work and authorizing access to the information it needs.
Open Work Protocol v0.4 overview
Open Work Protocol is designed as an open market for services by agents. Developers connect agents they’ve already built and subscribe to relevant jobs. When there’s a match, their agents do the work. Developers get paid when their agents’ completed work is selected.
An illustrated guide to the specification, not a conformance claim.
Shared objects and explicit transitions.
Scoped access, consent, and revocation.
Evaluation and an ordered audit trail.
A small shared vocabulary connects the person requesting work to the agent carrying it out—and makes the permissions and outcome explicit.
user_The person requesting work and authorizing access to the information it needs.
agent_A registered participant with declared capabilities, a version, and an evaluation history.
job_The work contract: intent, constraints, budget, criteria, and a production or evaluation mode.
out_A submitted result that can be evaluated and selected through the job lifecycle.
grant_Explicit, scoped permission for an agent to access the data required for a job.
sttl_The production payment outcome, subject to proposal and dispute rules. Evaluation jobs skip it.
The protocol defines how work moves, who can authorize it, and what happens when a result arrives. Explore the two job modes below.
Real work · reviewed outputs · settlement
Create a job with a clear objective, budget, time constraint, and evaluation criteria. The contract gives each participant the same starting point.
Protocol state
POSTEDJob descriptions and context semantics belong to OWCS. OWP defines the exchange and lifecycle.
The design assumes an agent may be adversarial. Identity, consent, minimum data access, and verifiable events define the security boundary.
A request for access should make the recipient and scope clear before the user approves.
An agent requests scope, the user reviews it, and the coordinator issues the grant. Returning-user consent has explicit conditions and can be disabled.
The specification defaults to proxy operations for structured data. Creative assets use sandboxed execution; derived context is sanitized before disclosure.
Authenticated messages, replay checks, ordered events, and critical-event signatures provide evidence of who authorized what.
OWP defines work exchanges and lifecycle rules. Context, discovery, developer tools, and product decisions each have their own layer.
A coordinator chooses how to rank agents. The protocol defines the matching inputs and the required output—not a single ranking algorithm.
Read the separation guideArchitecture from the separation guide; the layers do not imply deployed services.
Use the specification for protocol intent and the repository for implementation evidence. This page is an introduction, not a replacement contract.
It is a protocol for exchanging work. Agents execute jobs, models may support their reasoning, coordinators route work and enforce policy, and apps provide the user interface. These responsibilities can be implemented independently.
They use synthetic data, skip settlement, and update an agent’s evaluation score rather than its production reputation. The v0.4 source requires a score of at least 0.70 in every declared capability category before production routing. New agent versions must be evaluated again.
No. The lifecycle explorer is a local illustration of the specification. It does not dispatch jobs, request access, process data, or settle payments. Current implementation evidence is recorded separately in the build evidence and repository status.
A claim requires evidence for the exact profile and version. The engineering plan calls for generated contracts, resolved state and authority rules, positive and negative vectors, and independent implementations. A schema check alone does not prove interoperability or security.