// FILE 13 · ESSAY

The Closer Protocol

An agent can finish a computation and leave the actual question unresolved. Closer Protocol is a proposed answer: obligations that survive agent episodes, evidence that has to earn its conclusions, and authority that cannot be inferred from a goal. A review draft, published here so it has a stable address.

 September 14, 2026 · 1 min read   ·  
#agents 
#architecture 
#protocol 
#evidence 
#provenance    

An agent can finish a computation and leave the actual question unresolved. The tool call succeeds, the transcript looks clean, and the thing you cared about is still open. Most systems treat that gap as a prompt problem. I think it is a protocol problem.

Closer Protocol is my proposal for what should survive between agent episodes: the obligation. Not the transcript, not the plan. The obligation. A retained question with an origin, a scope, resolution conditions, and an authority boundary. New evidence connects to it or it does not. Proposed action against it gets checked against what the user actually authorized, not what the model inferred from a broad goal. It stays open until an adjudicated commit says it is closed, and while it waits, the system works on something else instead of pretending.

None of the parts are new, and the document says so up front. Actor systems, durable execution, event sourcing, truth maintenance, reference monitors, human approval workflows. All established, all cited. What I am claiming is the combination, and only as a hypothesis. Whether this composition beats a simpler, equally resourced workflow is an open question with a test design attached, not a result. Section 10 is the part I intend to hold myself to.

The document was drafted by AI agents under my direction, and it accounts for exactly who contributed what. That accounting is not a disclaimer. It is the point. A protocol about evidence-governed work should be able to show its own receipts.

I am publishing it here so it has a stable address. I want to reference it from anywhere, test the hypotheses against real work, and let anyone who reads it tell me where it breaks. It is a review draft. It will change.

Closer Protocol v4 (PDF) · Markdown source

%~![2026]:(=@[08]}#[>@[27]*|^Ask a model the same question five times and it will either answer five ways or one way. Most evaluation throws that difference away as noise. It turned out to be the most useful number I measured all month.}#[[2026]#}>[[08];)+]&[12]~%/Five thousand years ago in Uruk, somebody's accountant had a problem. Grain was moving. Sheep were moving. More of both than any one man could watch, because the city had gotten too good at making things move. His solution still exists. You can hold...{<$[2026];)+][08]]+);*[10]@=(On August 10, Mark Zuckerberg published a manifesto promising every person on earth a superintelligence that knows everything about them, and privacy so strong that even Meta cannot see inside. I believe he means it. That is not the problem.;)+[2026]{<$\[07]}#[>@[31]*|^Every component of that sentence exists somewhere in computer science already. Event sourcing rebuilds state from a log. Agent-memory systems retrieve accumulated context. Signed chains prove records were not altered. What I am claiming is the join,...[>}[2026]^&*|[07]}#[>@[31]*|^Fiduciary does not mean trustworthy. It means holding a thing on another party's behalf, under an enforceable duty to them.);][2026]&^|*[07]=@:(#[28]!/%Context is a retrieval word. It describes something you fetch and put in front of a model so it answers better. Under that name the design space collapses into a search problem: embed better, rank better, forget less. Every system built in that lane...#+)[2026]}#[>[07]{<$\~[23]&^|Here is what changed. I stopped thinking of the prompt as a wall and started hearing it for what it actually is, which is a doorbell with no door behind it. It rings on everything. It rings the same way for a directory listing and for a command that...:(=[2026]%~!/[07]]+);*[25]@=(I adopted Copper, an Australian cattle dog, which means he likes to work. I have never raised this breed before, so I enlisted a consultant./!~[2026]}#[>[07]:(=@>[20]<{\There is a room under every life now. A low hum of everything you have ever written down, every contact, every decision with its reasons still attached, sitting in one place and vibrating at a frequency only you are supposed to hear. The industry...:(=[2026]%~!/[07]/!~%$[15]|*&There is a frequency beneath every system that most people never hear. A low, humming truth that sits under the noise and the polish and the architecture diagrams. You only notice it when the pressure rises. When the cables buzz. When the whole.../!~[2026]}#[>[07]:(=@>[03]<{\An autonomous software agent is a program that takes a goal, makes a plan, calls tools, and produces an output. Many such agents exist. They are built by different teams, on different runtimes, with different model backends, and they live in...;)+[2026]:(=@[07]}#[>@[08]=@:Every protocol has to answer the same first question: how do you know it's the real one? AIP answers that question with itself. The protocol I built is the system I used to build the protocol. Each piece of proof I produce is itself a build event....%~![2026]:(=@[09]}#[>@[14]*|^An agent can finish a computation and leave the actual question unresolved. The tool call succeeds, the transcript looks clean, and the thing you cared about is still open. Most systems treat that gap as a prompt problem. I think it is a protocol...:(=[2026]%~!/[08]]+);*[21]@=(An agent that cannot pay for itself is a toy. A good toy, maybe, but the bill arrives every month in my name, and the agent has no idea it exists. It reads, it writes, it argues beautifully, and it costs me a subscription to do it. Nothing it...

%~![2026]:(=@[08]}#[>@[27]*|^Ask a model the same question five times and it will either answer five ways or one way. Most evaluation throws that difference away as noise. It turned out to be the most useful number I measured all month.}#[[2026]#}>[[08];)+]&[12]~%/Five thousand years ago in Uruk, somebody's accountant had a problem. Grain was moving. Sheep were moving. More of both than any one man could watch, because the city had gotten too good at making things move. His solution still exists. You can hold...{<$[2026];)+][08]]+);*[10]@=(On August 10, Mark Zuckerberg published a manifesto promising every person on earth a superintelligence that knows everything about them, and privacy so strong that even Meta cannot see inside. I believe he means it. That is not the problem.;)+[2026]{<$\[07]}#[>@[31]*|^Every component of that sentence exists somewhere in computer science already. Event sourcing rebuilds state from a log. Agent-memory systems retrieve accumulated context. Signed chains prove records were not altered. What I am claiming is the join,...[>}[2026]^&*|[07]}#[>@[31]*|^Fiduciary does not mean trustworthy. It means holding a thing on another party's behalf, under an enforceable duty to them.);][2026]&^|*[07]=@:(#[28]!/%Context is a retrieval word. It describes something you fetch and put in front of a model so it answers better. Under that name the design space collapses into a search problem: embed better, rank better, forget less. Every system built in that lane...#+)[2026]}#[>[07]{<$\~[23]&^|Here is what changed. I stopped thinking of the prompt as a wall and started hearing it for what it actually is, which is a doorbell with no door behind it. It rings on everything. It rings the same way for a directory listing and for a command that...:(=[2026]%~!/[07]]+);*[25]@=(I adopted Copper, an Australian cattle dog, which means he likes to work. I have never raised this breed before, so I enlisted a consultant./!~[2026]}#[>[07]:(=@>[20]<{\There is a room under every life now. A low hum of everything you have ever written down, every contact, every decision with its reasons still attached, sitting in one place and vibrating at a frequency only you are supposed to hear. The industry...:(=[2026]%~!/[07]/!~%$[15]|*&There is a frequency beneath every system that most people never hear. A low, humming truth that sits under the noise and the polish and the architecture diagrams. You only notice it when the pressure rises. When the cables buzz. When the whole.../!~[2026]}#[>[07]:(=@>[03]<{\An autonomous software agent is a program that takes a goal, makes a plan, calls tools, and produces an output. Many such agents exist. They are built by different teams, on different runtimes, with different model backends, and they live in...;)+[2026]:(=@[07]}#[>@[08]=@:Every protocol has to answer the same first question: how do you know it's the real one? AIP answers that question with itself. The protocol I built is the system I used to build the protocol. Each piece of proof I produce is itself a build event....%~![2026]:(=@[09]}#[>@[14]*|^An agent can finish a computation and leave the actual question unresolved. The tool call succeeds, the transcript looks clean, and the thing you cared about is still open. Most systems treat that gap as a prompt problem. I think it is a protocol...:(=[2026]%~!/[08]]+);*[21]@=(An agent that cannot pay for itself is a toy. A good toy, maybe, but the bill arrives every month in my name, and the agent has no idea it exists. It reads, it writes, it argues beautifully, and it costs me a subscription to do it. Nothing it...