Schemas and contracts

Published schemas

Authorization policy

Human Roles and Agent Grants are separate authority sources. Policy Decisions are enforced inside planner and tool-service boundaries; denied planner actions append a sanitized Activity Ledger entry without retaining command payloads or protected Project data.

• Human Roles come from server-resolved Organization Memberships: viewer, planner, reviewer, approver, safety officer, venue administrator, organization administrator.
• Agent Grants bind one agent to one Organization and one Project, published scopes, issuer, issue time, and expiry of one hour or less.
• Approval, Warning Waivers, Lock management, emergency action authority, and conflict decisions remain human-only.
• Approval requires an approver, venue administrator, or organization administrator role in addition to passing Validation.

Generated tool manifest

Stable errors

Planner and MCP failures use one error envelope with a stable code, readable message, remediation, and structured details. Unknown internal failures use VENUE_INTERNAL_ERROR without exposing implementation data.

Interchange safety

• Format venuemind-project, version 1.
• Maximum package size: 2,000,000 bytes.
• SHA-256 binds the canonical Project payload to the manifest.
• Import Preview verifies stable IDs, geometry, locks, ledger integrity, replay, and migration before commit.
• Import Commit is create-only and returns PROJECT_ID_CONFLICT instead of overwriting an existing Project.

DXF and PDF references

VenueMind JSON is the only authoritative import format. DXF and PDF files remain behind an assisted-reference adapter boundary: they require scale calibration, expose confidence and unsupported entities, retain source fingerprints, and can only seed reviewable Proposal Changes through the normal command interface.

Agent discovery

Compatibility