Skip to main content
Jira progress: loading…

OPCODE-REG

Comprehensive Categorized Opcode Registry

Draft Specification

1. Purpose

The Opcode Registry is the canonical registry for all semantic executable actions that may be exposed through ZCP and referenced by artifact manifests.

Its job is to ensure that ZAYAZ uses:

  • one stable operation vocabulary
  • one semantic mapping from operation intent to opcode
  • one consistent basis for routing, validation, docs, and approval

It is not a list of HTTP verbs. It is a list of governed semantic operations.


2. Core principles

2.1. Opcodes define intent

An opcode answers:

What action is being requested?

Examples:

  • compute a metric
  • validate a signal
  • dispatch a workflow
  • export an XBRL package

2.2. Rulesets define behavior

Rulesets answer:

How should this action be executed, constrained, validated, or routed?

So:

  • opcode = semantic action
  • ruleset = policy/governance/runtime behavior

2.3. One opcode, one stable meaning

An opcode should have one stable semantic meaning over time.

2.4. Artifact compatibility is explicit

Not every artifact type may expose every opcode.

2.5. Lifecycle matters

Each opcode must support:

  • draft
  • active
  • deprecated
  • retired

2.6. Governance class matters

Some opcodes are low-risk, others are compliance-sensitive or governance-sensitive.


3. Registry goals

The registry must support:

  • deterministic operation-to-opcode mapping in ZAMG
  • artifact type compatibility checking
  • public API exposure policy
  • default execution mode
  • default audit requirement
  • trust threshold defaults
  • review/approval policy
  • docs generation
  • future analytics and policy controls

4. Top-level registry schema

top-level-registry-schema.yamlGitHub ↗
registry_version: "0.1"
registry_name: "opcode_registry"
registry_status: "draft"
generated_at: "2026-04-14T10:00:00Z"

categories: []
opcodes: []

5. Category model

Each opcode belongs to one primary category.

Recommended top-level categories

  1. intake
  2. extraction
  3. transformation
  4. validation
  5. trust
  6. computation
  7. routing
  8. workflow
  9. export
  10. governance
  11. registry
  12. lineage
  13. agent
  14. integration

6. Canonical opcode entry schema

canonical-opcode-entry-schema.yamlGitHub ↗
- opcode: "OP_0400"
operation_key: "compute_metric"
readable_name: "Compute Metric"
category: "computation"
subcategory: "core_metric"
description: "Execute a governed computation that derives one or more output signals from declared inputs."

intent_class: "stateful_execution" # read_only | validation_only | stateful_execution | disclosure_sensitive | governance_sensitive
allowed_artifact_types:
- "engine"
- "micro_engine"
- "transformer"

public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync" # sync | async | hybrid

input_contract_type: "signal_set"
output_contract_type: "signal_set"

default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.85
geo_scope:
- "GLOBAL"

governance:
security_class: "medium" # low | medium | high | critical
compliance_impact: "medium" # low | medium | high | critical
ai_usage_allowed: true
override_requires_approval: false

compatible_http_methods:
- "POST"

lifecycle:
state: "active"
introduced_in: "0.1"
deprecated_in: null
retired_in: null

tags:
- "compute"
- "metric"

7. Category definitions

7.1. Intake

Used when raw external or internal payloads first enter the system.

Examples:

  • upload
  • ingest
  • register inbound events
  • accept source payloads

7.2. Extraction

Used when unstructured or semi-structured input is turned into structured fields/signals.

Examples:

  • OCR extraction
  • parser extraction
  • document field extraction

7.3. Transformation

Used when existing structured content is reshaped, normalized, or remapped.

Examples:

  • unit normalization
  • structural mapping
  • CSI mapping
  • enrichment

7.4. Validation

Used to test conformance against schema, format, rules, or declared expectations.

7.5. Trust

Used to assess trustworthiness, evidence linkage, or quality of inputs/outputs.

7.6. Computation

Used for calculation, scoring, simulation, estimation, or aggregation.

7.7. Routing

Used to determine next execution path, handoff, fallback, or orchestration direction.

7.8. Workflow

Used to start, dispatch, escalate, or manage operational flows.

7.9. Export

Used to build final outputs, disclosure artifacts, reports, and regulator-ready packages.

7.10. Governance

Used for high-control actions such as publish, sign, override, deprecate, or policy-sensitive operations.

7.11. Registry

Used for resolving artifact capabilities, registering references, or synchronizing metadata.

7.12. Lineage

Used to inspect, replay, trace, or export provenance and lineage.

7.13. Agent

Used for governed agent invocation and agent-mediated actions.

7.14. Integration

Used for outbound or inbound connector-driven interactions with third-party systems.


8. Comprehensive Categorized Opcode List v0.1

Below is the proposed v0.1 baseline catalog.


Category A — Intake

cat-a.yamlGitHub ↗
- opcode: "OP_0100"
operation_key: "ingest_raw_payload"
readable_name: "Ingest Raw Payload"
category: "intake"
subcategory: "payload_ingestion"
description: "Accept a raw payload into the governed processing flow."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "parser", "connector"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "raw_payload"
output_contract_type: "ingestion_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.70
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["intake", "payload"]

- opcode: "OP_0110"
operation_key: "register_external_event"
readable_name: "Register External Event"
category: "intake"
subcategory: "event_registration"
description: "Register an incoming external event for processing or audit."
intent_class: "stateful_execution"
allowed_artifact_types: ["connector", "workflow_dispatcher", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "async"
input_contract_type: "event_payload"
output_contract_type: "event_registration_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.75
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["event", "registration"]

Category B — Extraction

cat-b.yamlGitHub ↗
- opcode: "OP_0200"
operation_key: "extract_structured_data"
readable_name: "Extract Structured Data"
category: "extraction"
subcategory: "structured_extraction"
description: "Extract structured fields or signals from a source artifact."
intent_class: "stateful_execution"
allowed_artifact_types: ["parser", "engine", "micro_engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "document_or_payload"
output_contract_type: "signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.75
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: true
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["extract", "structured"]

- opcode: "OP_0210"
operation_key: "parse_document"
readable_name: "Parse Document"
category: "extraction"
subcategory: "document_parsing"
description: "Parse a document into machine-usable intermediate or structured form."
intent_class: "stateful_execution"
allowed_artifact_types: ["parser", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "document"
output_contract_type: "parsed_document"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.70
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "low"
ai_usage_allowed: true
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["parse", "document"]

Category C — Transformation

cat-c.yamlGitHub ↗
- opcode: "OP_0300"
operation_key: "transform_structure"
readable_name: "Transform Structure"
category: "transformation"
subcategory: "structural_transform"
description: "Transform data from one structural format into another."
intent_class: "stateful_execution"
allowed_artifact_types: ["transformer", "engine", "micro_engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "structured_payload"
output_contract_type: "structured_payload"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.80
geo_scope: ["GLOBAL"]
governance:
security_class: "low"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["transform", "structure"]

- opcode: "OP_0310"
operation_key: "normalize_units"
readable_name: "Normalize Units"
category: "transformation"
subcategory: "unit_normalization"
description: "Normalize quantities into a required or canonical unit system."
intent_class: "stateful_execution"
allowed_artifact_types: ["transformer", "micro_engine", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_set"
output_contract_type: "signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.82
geo_scope: ["GLOBAL"]
governance:
security_class: "low"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["normalize", "units"]

- opcode: "OP_0320"
operation_key: "map_to_csi"
readable_name: "Map to CSI"
category: "transformation"
subcategory: "identity_mapping"
description: "Map a signal or structured field set to canonical CSI identities."
intent_class: "stateful_execution"
allowed_artifact_types: ["transformer", "engine", "validator"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_or_schema_fields"
output_contract_type: "csi_binding_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.88
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["map", "csi"]

- opcode: "OP_0330"
operation_key: "enrich_with_reference_data"
readable_name: "Enrich with Reference Data"
category: "transformation"
subcategory: "reference_enrichment"
description: "Enrich a structured payload using approved reference or lookup sources."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine", "connector", "transformer"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_set"
output_contract_type: "enriched_signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.83
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["enrich", "reference"]

Category D — Validation

cat-d.yamlGitHub ↗
- opcode: "OP_0400"
operation_key: "validate_signal"
readable_name: "Validate Signal"
category: "validation"
subcategory: "signal_validation"
description: "Validate one or more signals against schema, format, or domain expectations."
intent_class: "validation_only"
allowed_artifact_types: ["validator", "engine", "micro_engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_set"
output_contract_type: "validation_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.80
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["validate", "signal"]

- opcode: "OP_0410"
operation_key: "validate_schema"
readable_name: "Validate Schema"
category: "validation"
subcategory: "schema_validation"
description: "Validate an artifact or payload against a declared schema."
intent_class: "validation_only"
allowed_artifact_types: ["validator", "parser", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "payload_with_schema"
output_contract_type: "validation_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.78
geo_scope: ["GLOBAL"]
governance:
security_class: "low"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["validate", "schema"]

- opcode: "OP_0420"
operation_key: "run_ruleset_validation"
readable_name: "Run Ruleset Validation"
category: "validation"
subcategory: "ruleset_validation"
description: "Validate data or an execution candidate against an approved ruleset."
intent_class: "validation_only"
allowed_artifact_types: ["validator", "router", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "ruleset_validation_request"
output_contract_type: "validation_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["ruleset", "validation"]

Category E — Trust

cat-e.yamlGitHub ↗
- opcode: "OP_0500"
operation_key: "score_trust"
readable_name: "Score Trust"
category: "trust"
subcategory: "trust_scoring"
description: "Assign or compute a trust score for an input, output, artifact, or workflow result."
intent_class: "stateful_execution"
allowed_artifact_types: ["validator", "engine", "micro_engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "trust_subject"
output_contract_type: "trust_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.85
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST", "GET"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["trust", "score"]

- opcode: "OP_0510"
operation_key: "verify_evidence_link"
readable_name: "Verify Evidence Link"
category: "trust"
subcategory: "evidence_verification"
description: "Verify that a signal, claim, or output remains correctly linked to supporting evidence."
intent_class: "validation_only"
allowed_artifact_types: ["validator", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "evidence_link_request"
output_contract_type: "verification_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["evidence", "verify"]

Category F — Computation

cat-f.yamlGitHub ↗
- opcode: "OP_0600"
operation_key: "compute_metric"
readable_name: "Compute Metric"
category: "computation"
subcategory: "core_metric"
description: "Compute a governed metric from declared inputs."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine", "transformer"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_set"
output_contract_type: "signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.85
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: true
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["compute", "metric"]

- opcode: "OP_0610"
operation_key: "estimate_missing_value"
readable_name: "Estimate Missing Value"
category: "computation"
subcategory: "estimation"
description: "Estimate a missing value using approved modeling or fallback logic."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine", "agent_executor"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "sync"
input_contract_type: "incomplete_signal_set"
output_contract_type: "estimated_signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.92
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["estimate", "missing"]

- opcode: "OP_0620"
operation_key: "aggregate_results"
readable_name: "Aggregate Results"
category: "computation"
subcategory: "aggregation"
description: "Aggregate lower-level results into a higher-level metric or summary."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine", "transformer"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "signal_set"
output_contract_type: "aggregated_signal_set"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.83
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["aggregate", "results"]

- opcode: "OP_0630"
operation_key: "run_model"
readable_name: "Run Model"
category: "computation"
subcategory: "model_execution"
description: "Execute a defined model, simulation, or advanced computation profile."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "hybrid"
input_contract_type: "model_request"
output_contract_type: "model_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["model", "simulation"]

- opcode: "OP_0640"
operation_key: "compare_against_benchmark"
readable_name: "Compare Against Benchmark"
category: "computation"
subcategory: "benchmarking"
description: "Compare results against benchmark or peer reference sets."
intent_class: "stateful_execution"
allowed_artifact_types: ["engine", "micro_engine", "validator"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "benchmark_request"
output_contract_type: "benchmark_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.82
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST", "GET"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["benchmark", "compare"]

Category G — Routing

cat-g.yamlGitHub ↗
- opcode: "OP_0700"
operation_key: "route_next"
readable_name: "Route Next"
category: "routing"
subcategory: "forward_routing"
description: "Determine and issue the next governed routing step."
intent_class: "stateful_execution"
allowed_artifact_types: ["router", "workflow_dispatcher", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "sync"
input_contract_type: "routing_request"
output_contract_type: "routing_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["route", "next"]

- opcode: "OP_0710"
operation_key: "resolve_artifact_capability"
readable_name: "Resolve Artifact Capability"
category: "routing"
subcategory: "capability_resolution"
description: "Resolve whether an artifact is eligible to execute a requested operation under current policy."
intent_class: "read_only"
allowed_artifact_types: ["router", "registry_adapter"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "capability_request"
output_contract_type: "capability_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST", "GET"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["capability", "resolve"]

Category H — Workflow

cat-h.yamlGitHub ↗
- opcode: "OP_0800"
operation_key: "dispatch_workflow"
readable_name: "Dispatch Workflow"
category: "workflow"
subcategory: "workflow_dispatch"
description: "Dispatch a workflow or task sequence to the appropriate handler or assignee."
intent_class: "stateful_execution"
allowed_artifact_types: ["workflow_dispatcher", "router", "agent_executor"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "async"
input_contract_type: "workflow_request"
output_contract_type: "workflow_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.85
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["workflow", "dispatch"]

- opcode: "OP_0810"
operation_key: "request_human_review"
readable_name: "Request Human Review"
category: "workflow"
subcategory: "review_request"
description: "Create or escalate a human review requirement for a governed artifact or workflow state."
intent_class: "governance_sensitive"
allowed_artifact_types: ["workflow_dispatcher", "router", "validator", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "review_request"
output_contract_type: "review_request_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_5y"
trust_threshold: 0.95
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["review", "human"]

- opcode: "OP_0820"
operation_key: "escalate_workflow"
readable_name: "Escalate Workflow"
category: "workflow"
subcategory: "workflow_escalation"
description: "Escalate a workflow due to delay, policy condition, or trust threshold breach."
intent_class: "governance_sensitive"
allowed_artifact_types: ["workflow_dispatcher", "router"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "workflow_escalation_request"
output_contract_type: "workflow_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.95
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["workflow", "escalate"]

Category I — Export

cat-i.yamlGitHub ↗
- opcode: "OP_0900"
operation_key: "build_report_section"
readable_name: "Build Report Section"
category: "export"
subcategory: "report_building"
description: "Build a report section or structured disclosure section from approved inputs."
intent_class: "stateful_execution"
allowed_artifact_types: ["exporter", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "hybrid"
input_contract_type: "report_section_request"
output_contract_type: "report_section"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["report", "section"]

- opcode: "OP_0910"
operation_key: "export_xbrl"
readable_name: "Export XBRL"
category: "export"
subcategory: "regulated_export"
description: "Export a disclosure package in XBRL-compliant format."
intent_class: "disclosure_sensitive"
allowed_artifact_types: ["exporter", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "hybrid"
input_contract_type: "report_package"
output_contract_type: "disclosure_artifact"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.92
geo_scope: ["EU"]
governance:
security_class: "high"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["xbrl", "export"]

- opcode: "OP_0920"
operation_key: "export_ixbrl"
readable_name: "Export iXBRL"
category: "export"
subcategory: "regulated_export"
description: "Export a disclosure package in inline XBRL-compliant format."
intent_class: "disclosure_sensitive"
allowed_artifact_types: ["exporter", "engine"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: true
default_execution_mode: "hybrid"
input_contract_type: "report_package"
output_contract_type: "disclosure_artifact"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.92
geo_scope: ["EU"]
governance:
security_class: "high"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["ixbrl", "export"]

- opcode: "OP_0930"
operation_key: "publish_disclosure"
readable_name: "Publish Disclosure"
category: "export"
subcategory: "publication"
description: "Publish a disclosure or regulated output to an approved destination."
intent_class: "disclosure_sensitive"
allowed_artifact_types: ["exporter", "workflow_dispatcher"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "publication_request"
output_contract_type: "publication_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.97
geo_scope: ["GLOBAL"]
governance:
security_class: "critical"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["publish", "disclosure"]

- opcode: "OP_0940"
operation_key: "sign_output"
readable_name: "Sign Output"
category: "export"
subcategory: "assurance_signing"
description: "Apply a governed signature, seal, or attestation step to an approved output artifact."
intent_class: "governance_sensitive"
allowed_artifact_types: ["exporter", "workflow_dispatcher", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "hybrid"
input_contract_type: "signing_request"
output_contract_type: "signed_artifact"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.98
geo_scope: ["GLOBAL"]
governance:
security_class: "critical"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["sign", "output"]

Category J — Governance

cat-j.yamlGitHub ↗
- opcode: "OP_1000"
operation_key: "approve_contract"
readable_name: "Approve Contract"
category: "governance"
subcategory: "approval"
description: "Approve a contract, manifest, or governed state transition."
intent_class: "governance_sensitive"
allowed_artifact_types: ["workflow_dispatcher", "governance_adapter"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "approval_request"
output_contract_type: "approval_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.99
geo_scope: ["GLOBAL"]
governance:
security_class: "critical"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["approve", "governance"]

- opcode: "OP_1010"
operation_key: "override_policy"
readable_name: "Override Policy"
category: "governance"
subcategory: "policy_override"
description: "Apply an explicitly approved policy override to a governed process."
intent_class: "governance_sensitive"
allowed_artifact_types: ["governance_adapter", "workflow_dispatcher"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "policy_override_request"
output_contract_type: "override_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.99
geo_scope: ["GLOBAL"]
governance:
security_class: "critical"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["override", "policy"]

- opcode: "OP_1020"
operation_key: "deprecate_route"
readable_name: "Deprecate Route"
category: "governance"
subcategory: "lifecycle_control"
description: "Deprecate an execution route, binding, or governed operational path."
intent_class: "governance_sensitive"
allowed_artifact_types: ["router", "governance_adapter"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "route_lifecycle_request"
output_contract_type: "route_lifecycle_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.97
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["deprecate", "route"]

Category K — Registry

cat-k.yamlGitHub ↗
- opcode: "OP_1100"
operation_key: "register_artifact_reference"
readable_name: "Register Artifact Reference"
category: "registry"
subcategory: "artifact_registration"
description: "Register or link an artifact reference into the governed registry flow."
intent_class: "stateful_execution"
allowed_artifact_types: ["registry_adapter", "workflow_dispatcher"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: false
replay_supported: true
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "artifact_reference_request"
output_contract_type: "artifact_reference_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.80
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["register", "artifact"]

- opcode: "OP_1110"
operation_key: "sync_registry_state"
readable_name: "Sync Registry State"
category: "registry"
subcategory: "registry_sync"
description: "Synchronize registry-backed metadata or bindings across managed stores."
intent_class: "stateful_execution"
allowed_artifact_types: ["registry_adapter", "connector"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: false
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "registry_sync_request"
output_contract_type: "sync_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.80
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["sync", "registry"]

Category L — Lineage

cat-l.yamlGitHub ↗
- opcode: "OP_1200"
operation_key: "inspect_lineage"
readable_name: "Inspect Lineage"
category: "lineage"
subcategory: "lineage_inspection"
description: "Inspect the lineage or provenance chain for an artifact, signal, or execution path."
intent_class: "read_only"
allowed_artifact_types: ["engine", "registry_adapter", "governance_adapter"]
public_api_allowed: true
internal_zcp_required: true
requires_zssr: true
replay_supported: false
idempotency_default: true
default_execution_mode: "sync"
input_contract_type: "lineage_request"
output_contract_type: "lineage_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_7y"
trust_threshold: 0.75
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["GET", "POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["lineage", "inspect"]

- opcode: "OP_1210"
operation_key: "replay_command_path"
readable_name: "Replay Command Path"
category: "lineage"
subcategory: "replay"
description: "Replay a governed execution path for analysis, recovery, or controlled regeneration."
intent_class: "governance_sensitive"
allowed_artifact_types: ["router", "workflow_dispatcher", "governance_adapter"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "hybrid"
input_contract_type: "replay_request"
output_contract_type: "replay_result"
default_policy:
audit_required: true
human_review_required: true
retention_class: "compliance_7y"
trust_threshold: 0.95
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "critical"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["replay", "lineage"]

Category M — Agent

cat-m.yamlGitHub ↗
- opcode: "OP_1300"
operation_key: "trigger_agent"
readable_name: "Trigger Agent"
category: "agent"
subcategory: "agent_invocation"
description: "Trigger a governed agent or assistant capability through an approved execution path."
intent_class: "stateful_execution"
allowed_artifact_types: ["agent_executor", "workflow_dispatcher"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "agent_request"
output_contract_type: "agent_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.90
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "active", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["agent", "trigger"]

- opcode: "OP_1310"
operation_key: "resolve_agent_suggestion"
readable_name: "Resolve Agent Suggestion"
category: "agent"
subcategory: "agent_resolution"
description: "Convert an agent suggestion into a governed actionable outcome or review item."
intent_class: "governance_sensitive"
allowed_artifact_types: ["agent_executor", "workflow_dispatcher", "validator"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "agent_suggestion"
output_contract_type: "agent_resolution_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.93
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: true
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["agent", "resolution"]

Category N — Integration

cat-n.yamlGitHub ↗
- opcode: "OP_1400"
operation_key: "push_to_external_system"
readable_name: "Push to External System"
category: "integration"
subcategory: "outbound_integration"
description: "Push governed data or artifacts to an approved third-party system."
intent_class: "stateful_execution"
allowed_artifact_types: ["connector", "workflow_dispatcher", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "external_push_request"
output_contract_type: "external_push_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "compliance_5y"
trust_threshold: 0.88
geo_scope: ["GLOBAL"]
governance:
security_class: "high"
compliance_impact: "high"
ai_usage_allowed: false
override_requires_approval: true
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["external", "push"]

- opcode: "OP_1410"
operation_key: "pull_from_external_system"
readable_name: "Pull from External System"
category: "integration"
subcategory: "inbound_integration"
description: "Pull governed data from an approved third-party system."
intent_class: "stateful_execution"
allowed_artifact_types: ["connector", "engine"]
public_api_allowed: false
internal_zcp_required: true
requires_zssr: true
replay_supported: true
idempotency_default: false
default_execution_mode: "async"
input_contract_type: "external_pull_request"
output_contract_type: "external_pull_result"
default_policy:
audit_required: true
human_review_required: false
retention_class: "operational_2y"
trust_threshold: 0.82
geo_scope: ["GLOBAL"]
governance:
security_class: "medium"
compliance_impact: "medium"
ai_usage_allowed: false
override_requires_approval: false
compatible_http_methods: ["POST"]
lifecycle: { state: "draft", introduced_in: "0.1", deprecated_in: null, retired_in: null }
tags: ["external", "pull"]

Active first-wave opcodes

These are strong candidates to mark active immediately:

  • OP_0100 ingest_raw_payload OK
  • OP_0110 register_external_event OK
  • OP_0200 extract_structured_data OK
  • OP_0210 parse_document OK
  • OP_0300 transform_structure OK
  • OP_0310 normalize_units OK
  • OP_0400 validate_signal OK
  • OP_0410 validate_schema OK
  • OP_0420 run_ruleset_validation OK
  • OP_0500 score_trust OK
  • OP_0510 verify_evidence_link OK
  • OP_0600 compute_metric OK
  • OP_0620 aggregate_results OK
  • OP_0640 compare_against_benchmark OK
  • OP_0700 route_next OK
  • OP_0710 resolve_artifact_capability OK
  • OP_0800 dispatch_workflow OK
  • OP_0810 request_human_review OK
  • OP_0900 build_report_section OK
  • OP_0910 export_xbrl OK
  • OP_1200 inspect_lineage OK
  • OP_1300 trigger_agent OK

Draft-first opcodes

These are better left in draft until the implementation hardens:

  • OP_0320 map_to_csi OK
  • OP_0610 estimate_missing_value OK
  • OP_0630 run_model OK
  • OP_0920 export_ixbrl OK
  • OP_0930 publish_disclosure OK
  • OP_0940 sign_output OK
  • OP_1000 approve_contract OK
  • OP_1010 override_policy OK
  • OP_1020 deprecate_route OK
  • OP_1100 register_artifact_reference OK
  • OP_1110 sync_registry_state OK
  • OP_1210 replay_command_path OK
  • OP_1310 resolve_agent_suggestion OK
  • OP_1400 push_to_external_system OK
  • OP_1410 pull_from_external_system OK

Note: "OK" means they are uploaded to the zar.opcode_registry

Ref: zar.opcode_registry:

opcodeoperation_keycategory_codestatussort_order
OP_0100ingest_raw_payloadintakeactive10
OP_0110register_external_eventintakeactive15
OP_0200extract_structured_dataextractionactive20
OP_0210parse_documentextractionactive25
OP_0300transform_structuretransformationactive28
OP_0320map_to_csitransformationdraft29
OP_0310normalize_unitstransformationactive30
OP_0400validate_signalvalidationactive40
OP_0410validate_schemavalidationactive45
OP_0420run_ruleset_validationvalidationactive50
OP_0500score_trusttrustactive60
OP_0510verify_evidence_linktrustactive65
OP_0600compute_metriccomputationactive70
OP_0610estimate_missing_valuecomputationdraft75
OP_0620aggregate_resultscomputationactive80
OP_0630run_modelcomputationdraft82
OP_0640compare_against_benchmarkcomputationactive85
OP_0700route_nextroutingactive90
OP_0710resolve_artifact_capabilityroutingactive100
OP_0800dispatch_workflowworkflowactive110
OP_0810request_human_reviewworkflowactive120
OP_0900build_report_sectionexportactive130
OP_0910export_xbrlexportactive140
OP_0920export_ixbrlexportdraft145
OP_0930publish_disclosureexportdraft150
OP_1200inspect_lineagelineageactive150
OP_0940sign_outputexportdraft155
OP_1000approve_contractgovernancedraft160
OP_1300trigger_agentagentactive160
OP_1010override_policygovernancedraft165
OP_1020deprecate_routegovernancedraft170
OP_1100register_artifact_referenceregistrydraft175
OP_1110sync_registry_stateregistrydraft180
OP_1210replay_command_pathlineagedraft185
OP_1310resolve_agent_suggestionagentdraft190
OP_1400push_to_external_systemintegrationdraft195
OP_1410pull_from_external_systemintegrationdraft200
(37 rows)

ZAMG should map:

  • operation_key -> opcode deterministically from this registry.

And validate:

  • artifact_type -> allowed opcode before a manifest can be approved.



GitHub RepoRequest for Change (RFC)