App V2 · goal-to-workflow runtime

Say the business result. Get a living workflow.

Noetfield compiles a client goal into a frozen contract, routes the smallest capable tool chain across admitted executors, and holds delivery until the outcome has been checked by something other than the thing that did the work.

This runtime is not open to the public. Workflow execution is closed while authenticated access is built. Independent verification against external systems of record is not finished, so nothing here claims a verified outside-world effect.

How a goal becomes a delivery

Eight stages. A run cannot skip one, and cannot mark itself complete.

Goal

What the client wants to be true, in their words.

Contract

The business result and acceptance conditions, frozen before any work runs.

Router

The smallest set of tools that can satisfy the contract — not every tool, every time.

Graph

A typed dependency plan. Each step declares the effect it must produce.

Permits

Identity, authority, budget ceiling and destination, signed per effect.

Execute

Admitted executors run the steps behind one shared adapter protocol.

Verify

A separate identity checks the effect. The executor never accepts its own work.

Deliver

No acceptance, no delivery receipt. Then the run is monitored and repaired.

What is actually true today

Published because a claim without evidence is worth nothing. This list moves only when a live run says it can.

Proven by live runs

One goal carried across five distinct executors in a single governed run.
Effect execution requires a signed permit and a service token; the effect reference is minted server-side, never accepted from the caller.
Replayed permits are refused by a durable nonce gate.
Acceptance is bound to a contract hash and a per-effect evidence hash.
With execute bindings absent, acceptance fails closed and issues zero delivery receipts.

Not proven yet

An effect observed in an external system of record. Every reference so far is minted inside our own code.
Independent verification at the evidence level. Today the verifier reads a store the runtime can write.
Delivery of a custom workflow to a real recipient outside Noetfield.

Admitted executors

One adapter protocol — describe, health, estimate, authorize, execute, observe, verify, cancel, receipt. No executor is a planner, and none accepts its own result.

Cloudflare Workers Cloudflare Events Supabase Railway n8n GitHub Actions Motor

This deployment

Read live from the running worker, not written by hand.

Release: 1f78140
Public execution: closed
Execution authority bound: yes
Independent verifier: separate identity
External effect verification: not proven