| Field | Value |
|---|---|
| Status | Accepted |
| Date | 2026-08-08 |
| Author | LoopX maintainers |
| Scope | Public control-plane docs, packet contracts, refactor direction, test strategy |
LoopX harness should be explained, designed, and tested as the effectful program around an agent loop, not as a collection of disconnected state machines.
The canonical shape is:
model -> effect request -> harness interprets effect -> observation -> model
The agent loop is the loop. The harness is the effectful program that interprets each effect request and returns an observation to the next model step.
The framing builds on the public lecture series by 齐梦星空: 主线一:Agent Loop 是 effectful program(1), 主线一:Tool Calling 是 Kleisli arrow(2) and 主线一:Agent Loop 里的小魔法:函数的组合(3).
LoopX's job is the middle two steps: it receives an effect request from an agent or host, decides whether and how to interpret it, writes back an observation, and returns control to the next loop iteration.
This RFC establishes the mental model, defines canonical packet semantics, and gives a milestone plan for aligning documentation, code, and tests with that model over time.
| Milestone | Status |
|---|---|
| M0 RFC and Lecture 0 | Merged (#2905, #2906, #2908) |
| M1 Canonical packet example | Merged (#2907, #2910) |
| M1.5 Composition lens | Merged (#2911) |
| M2 Bounded context alignment | Partial (#2912-#2915, #2919) |
| M3 Focused test families | Partial (#2916-#2918) |
| M4 Architecture documentation | Pending |
| M5 Steady-state review | Pending |
Today, LoopX has many correct but hard-to-explain pieces:
- todo lifecycle and handoff state;
- quota decision and spend state;
- scheduler and heartbeat state;
- capability gates and user gates;
- vision, monitor, and replan state;
- evidence and run history.
Each piece has a state machine. The difficulty is not that these state machines exist. It is that a reader cannot immediately see what effect each state machine interprets, what observation it produces, and how that observation returns to the next loop.
The agent-loop-as-effectful-program lens fixes this by asking the same question everywhere:
Who interprets this effect request, and what observation comes back?
The underlying loop is:
model -> effect request -> harness interprets effect -> observation -> model
The model proposes the next action. The harness decides whether the action is allowed, how to execute it, how to handle failure, and how to encode the result for the next model step.
A pure computation is:
A => B
An effectful computation is:
A => F[B]
F captures the external world: persistence, permissions, budgets, timing,
notifications, scheduling, evidence, and failure.
LoopX harness is best understood as that F around a long-running agent loop:
GoalState => F[QuotaDecision]
| Article concept | LoopX equivalent |
|---|---|
| Agent loop | Every automation heartbeat, PR monitor, and sustained refactor turn |
| Effect request | todo add, quota spend, refresh-state, notify, monitor poll, bind-agent-thread |
| Harness interprets effect | quota should-run + interaction_contract + capability_gate + work_lane_contract + scheduler_hint |
| Observation | Quota packet, run history, evidence log, state writeback |
| Middleware mount points | User gate, capability bridge, scheduler ACK, cooldown, external evidence poll |
A => B |
Idealized GoalState => GoalState |
A => F[B] |
Real GoalState => F[QuotaDecision] |
Every important control-plane packet should be explainable through four semantic slots:
effect_requestinterpretationobservationnext_effect
Example for quota should-run:
{
"effect_request": "agent proposes next bounded turn",
"interpretation": {
"route": "advancement_task",
"capability_gate": "repair_bridge",
"scheduler_hint": "active_work"
},
"observation": {
"decision": "run",
"recommended_action": "...",
"state_writeback": "validated_progress"
},
"next_effect": "execute bounded turn, then refresh-state"
}These slots should not be a second schema. They are a documentation and
naming discipline over existing packet fields. A new packet may add an
effect_interpretation envelope only when a real caller needs one canonical
place to read all four slots.
The canonical loop is one effectful step:
GoalState => F[QuotaDecision]
The public lecture series distinguishes three layers of composition:
| Composition | Shape | LoopX counterpart |
|---|---|---|
| Function composition | A => B, B => C |
Read model -> projection -> decision |
| Kleisli composition | A => F[B], B => F[C] |
One bounded turn, host effect, validated writeback |
| Middleware composition | (A => F[B]) => (A => F[B]) |
Around decisions in capability_gate, interaction_contract, work_lane_contract, scheduler_hint |
LoopX does not expose a generic Python middleware registry. Its around semantics are declarative and packet-shaped.
Runtime middleware receives a handler callable and decides whether to call
it, call it once, retry, fallback, or short-circuit. LoopX cannot receive a
model or host callable across context and session boundaries. Instead, the
interpreter returns a next_effect in the packet: CLI actions, scheduler
ACK, and failure hint. The host or the next automation turn invokes that
data-encoded handler.
This keeps the power of around style while making the handler durable and replayable:
- short-circuit:
decisionandeffective_actioncan sayskip,wait,monitor_quiet_skip,repair_bridge, orask_ownerwithout pretending the original effect ran; - rewrite:
work_lane_contractcan preempt ordinary advancement with a due monitor or Lark inbox, andcapability_gatecan rewrite the next effect to materialize the missing capability first; - settle:
scheduler_hint.ack_hintandfailure_hinttell the host how to commit success or failure, whileunchanged_pollbounds repeated attempts.
Failure, cancellation, permission, and budget stay visible in typed packet fields instead of being swallowed by a catch-all wrapper:
| Around layer | Packet field | Short-circuit examples | Rewrite examples |
|---|---|---|---|
| Capability | capability_gate |
ask_owner, repair_bridge, unsupported |
Repair todo and CLI actions for the missing capability |
| Interaction | interaction_contract |
User channel action_required, mode |
Primary action, protocol action, next CLI actions |
| Work lane | work_lane_contract |
Monitor or inbox preemption, must_attempt_work=false |
Selected lane, obligation, next_lane |
| Scheduler | scheduler_hint |
Pause/delete heartbeat, no-spend quiet | RRULE, cadence class, stateful backoff |
The order of these around layers is a contract, not an implementation detail. Changing the order changes which gate is observed first, which monitor can preempt ordinary work, and whether an ACK is still expected after a failed host update. Such changes need parity fixtures and focused tests.
Review a LoopX around decision with the same questions the lecture asks of a middleware stack:
- Which effect request is being interpreted?
- Which around layer owns the decision, and what observation does it emit?
- Can it short-circuit without pretending the effect ran?
- Where is the data-encoded handler (
next_effect)? - Are failure, cancellation, permission, and budget structured or swallowed?
- Is the around-layer order explicit and tested?
- Does evidence, trace, and budget continuity survive the host effect through writeback, ACK, and spend?
Instead of teaching state machines as a list of enum values, teach each state machine as an interpretation table:
Input effect | Interpreter | Decision | Observation | Next effect
Example for monitor scheduling:
Monitor cadence or due horizon
-> scheduler interpreter
-> host RRULE / initial interval
-> scheduler_hint packet
-> next heartbeat or monitor poll
This preserves the existing state machines while making their purpose visible.
Goal: Publish this RFC and add a lecture that tells the story before any state machine detail.
Steps:
- Merge this RFC.
- Add
Lecture 0: Harness Is the Effectful Programtodocs/development/control-plane-course/. - Rewrite
docs/product/core-control-plane/state-machine.mdto include an interpretation-table section for each state family. - Update
docs/README.mdand course navigation to point to the RFC.
Acceptance criteria:
- A new contributor can explain LoopX in one paragraph using the canonical loop shape.
- Every existing state machine doc links back to the interpretation-table pattern.
- No runtime behavior changes.
Goal: Pick quota should-run as the canonical example and make the four
semantic slots visible in docs and smokes.
Steps:
- Add a public-safe documentation section describing the four slots for
quota should-run(docs/reference/effect-interpreter-packet.md). - Add a focused pytest or smoke that asserts the mapping from raw inputs to the canonical interpretation fields.
- Keep the existing payload fields unchanged.
Acceptance criteria:
- A reader can trace one real packet from effect request to observation.
- No CLI output budget regression.
- No new runtime contract without a real caller.
Goal: Make the around semantics visible in the canonical packet lens.
Steps:
- Document the three composition layers and the data-encoded handler in this RFC and Lecture 1.
- Extend
EffectTurnwithnext_effectso all four semantic slots are represented in code, not only in prose. - Add a focused test proving a capability gate is a structured around decision: it short-circuits, rewrites the next effect, and keeps permission semantics visible.
- Cite the public Tool Calling and Function Composition sources in public docs. Never cite internal lecture material.
Acceptance criteria:
- A reader can answer where
next_effectis encoded for a real packet. - The code lens covers
effect_request,interpretation,observation, andnext_effect. - No runtime behavior changes.
Goal: Align existing refactors with the effect-interpreter boundary.
Steps:
- Continue splitting
status.py,quota.py, andgoal_frontier.pyinto read-model, projection, and decision modules. - Name the boundaries in terms of the loop:
- read model = current
A(state); - projection = observation;
- decision = effect interpreter.
- read model = current
- Keep re-export compatibility for existing public imports.
- Do not create a generic effect abstraction until at least two real callers need the same envelope.
Acceptance criteria:
- Module names and docstrings make the effect-interpreter role explicit.
- Public import compatibility tests remain green.
- Maintainability and line-budget smokes remain green.
Goal: Convert large control-plane smokes into focused pytest modules by effect family.
Steps:
- Create focused pytest modules for:
- work-lane contract;
- quota decision;
- scheduler/monitor interpretation;
- state-machine interpretation tables.
- Keep thin end-to-end smokes that prove the CLI still works.
- Add regression tests for failure, cancellation, gate, and observation writeback paths.
Acceptance criteria:
- Each effect family has a focused pytest module.
- No large smoke is deleted before its focused replacement passes.
- Full public smoke suite stays green.
Goal: Update architecture and product docs to use the same story.
Steps:
- Reframe
docs/architecture.mdaround the canonical loop. - Update the control-plane course so each lecture references the same
effect_request -> interpretation -> observationflow. - Update README product language where it currently says "state machine" without explaining the interpretation role.
Acceptance criteria:
- The public docs no longer present LoopX as a pile of unrelated state machines.
- Technical readers can identify the loop boundary, effect request, interpreter, and observation in each documented workflow.
Goal: Keep the RFC as a living contract.
Steps:
- Add a canary smoke or docs smoke that checks the canonical packet documentation exists.
- Review new state machines and packet fields against the four semantic slots.
- Update this RFC when a new effect family requires a new canonical slot.
Acceptance criteria:
- The RFC is referenced by maintainer docs and course material.
- New control-plane features state which effect they interpret.
Tests should be organized by effect family, not by source-file size:
effect_request -> interpretation -> observation -> next_effect
Each focused pytest module should cover:
- positive routing;
- gate and capability decisions;
- failure and cancellation;
- observation writeback;
- compatibility of public imports.
Large smokes remain only as thin end-to-end checks.
- Do not merge all state machines into one giant enum.
- Do not create a generic
Effectabstraction without two real callers. - Do not rewrite
quota should-runfor the sake of naming. - Do not remove existing public compatibility routes without a migration window.
- Naming drift: we may use "effect" as decoration without changing semantics. Mitigation: every RFC milestone must produce a real doc or test change.
- Over-abstraction: a generic effect envelope could become unused scaffolding. Mitigation: only add a shared envelope when a second caller needs it.
- Test churn: converting large smokes too fast can reduce e2e confidence. Mitigation: keep thin e2e until focused tests cover the same behavior.
- Should
effect_interpretationbe a first-class field in the hot quota packet, or only a documented lens? - Should each capability own an interpretation table, or should the tables stay in central docs?
- When should a new state machine be considered a new effect family?
- A new technical reader can explain LoopX in one paragraph.
- Each major control-plane packet can be traced through the four semantic slots.
- Focused pytest coverage grows while large smoke files shrink.
- Public docs and course material use the same loop vocabulary.
- Existing CLI output budgets and public compatibility contracts remain green.
LoopX harness is not "a set of state machines". It is the effectful program and effect interpreter around a long-running agent loop. This RFC makes that story explicit and gives the refactor and test work a stable target.