Skip to content

Glossary

The repository that hosts CAO workflows and policy. It coordinates work across explicitly enrolled target repositories.

A bounded repository-management capability, implemented by an orchestrator and one or more workers.

The workflow that discovers, filters, ranks, selects, and dispatches work within resolved policy. An orchestrator does not mutate target repositories directly.

A distributable collection of an operation’s workflows, shared dependencies, and manifest.

A declared, bounded way for a workflow to produce an external effect, such as creating an issue or dispatching a worker.

A repository enrolled for an operation. A target can provide data and receive declared safe outputs, but does not run the control plane’s workflows.

A workflow that receives one selected target and performs one bounded task. Workers revalidate their control envelope and can only narrow the policy they receive.