Changelog

0.1.0-draft.4 — 2026-06-30

SOP directive — embed Agent SOP-style operating procedures (markdown, RFC-2119 constraints) inline in the Agentfile via SOP … END, or reference them as files/Agent Skills.
Host-scoped secrets — the CRED model now follows microsandbox: a secret is bound to allowed hosts, the value never enters the sandbox, and the runner substitutes it only at the network layer.
Acknowledgements page crediting the open standards agentrc builds on (Agent SOP, microsandbox, UTCP, MCP, Cedar, Agent Skills, OCI, Sigstore, SLSA, OpenTelemetry, A2A).
CLI page (coming soon), a site-wide Working Draft banner, and refreshed agentrc branding (logo, favicons, social card).

Lowercased the brand wordmark to agentrc everywhere (the Cedar AgentRC:: namespace is unchanged).
Standardized the canonical domain on agentrc.ai.

Rewritten after reviewing the current agentrc source archive.

Reframed agentrc as the Agentfile and agent-package specification, not an agent isolation orchestrator.
Moved runtime/driver concerns into a Runner Conformance Profile instead of the core specification.
Kept current implementation directives, but classified them into identity, capability, boundary, governance, runner-hint, and experimental groups.
Replaced the unsupported SPEC directive with parser-compatible # syntax=agentrc.agentfile/v0.1.
Standardized package distribution around OCI-compatible artifacts/images.
Added explicit lockfile and package schemas.
Added current implementation mapping and gap list.
Treated tools-as-files as an optional Tool Projection Profile, not the whole product.
Added a non-normative workflow companion draft for ASL-like multi-agent orchestration.

Avoided claiming agentrc provides isolation directly.
Avoided claiming agentrc is a runtime or runner.
Avoided hard-binding agentrc to microsandbox, Firecracker, Docker, Strands, or any cloud.
Made ISOLATION, IMAGE, SLICE, PLUGIN, and BACKEND runner hints/profile directives rather than core product identity.

Real Cedar evaluator is required before Cedar profile conformance can be claimed.
Current CRED parsing has inconsistent named-reference behavior.
Current BIND parsing is inconsistent across implementation paths.
Multi-agent workflow policy composition is intentionally left open.

Initial GitHub-ready working draft.

Renamed public identity from AIO to agentrc — Agent Run Config.
Reframed the project as a publishable Jekyll documentation site.
Added GitHub Pages configuration, CNAME, documentation pages, layouts, CSS, and publishing workflow.
Preserved implementation work as reference tooling, not runtime identity.

Reworked the visual system into the selected hybrid direction: standards-style documentation with a subtle holographic agentrc mark.
Added light and dark theme support with a persistent user toggle.
Added system-theme detection and early theme application to reduce flash during page load.
Replaced the placeholder rc square with an agentrc R glyph and matching SVG favicon.
Updated CSS tokens so future brand assets can be adjusted centrally.