agent/harmonia_agent/agent_models.py; shared application representations live in src/lib/types.ts. Pydantic models forbid unknown fields and deterministic validators reject ungrounded or authority-expanding output.
The Strands root is HarmoniaCoordinator, a deterministic BaseAgent. Specialist selection comes from host-owned session state. Models cannot choose arbitrary recipients or establish workflow authority through prose.
Evidence identifiers form a closed world per invocation: references not supplied in the input are invalid. Memory facts retain DynamoDB provenance and remain advisory. See the agent team for role-by-role detail.
Durable handoffs
Every cognitive delegation includes a host-createdharmonia.handoff/v1 envelope. Its identity is derived from the operation, receiver, and canonical input digest. The paired acknowledgement repeats the handoff identity and expected output contract. Neither object is authored by the specialist.
Evidence namespaces
All models forbid extra fields. Unknown references, empty grounding, skill references used as facts,
memory used as authorization, and role-expanding claims fail closed. See
Agent skills, tools, prompts, and traces for the runtime inventory.
