Protocol events

The 148 canonical event types a Harbor Runtime can publish, read from the live event-type registry (internal/events) as the production driver set populates it. Subscribe via GET /v1/events (SSE) — see methods.md and the streaming semantics guide.

How payloads reach a subscriber

Every SSE frame's data: line is one JSON object: type, sequence (the reconnect cursor), occurred_at, the flat identity (tenant / user / session / run), and payload. Two payload classes exist:

Safe payloads — types the declaring subsystem marked as carrying no secret-shaped data. The bus skips the audit redactor; the subscriber receives the typed shape below verbatim. Field keys are whatever encoding/json emits: most payloads carry no struct tags, so their keys are the Go field names (e.g. TaskID, capital T); a payload whose fields ARE tagged uses the tag name. The Wire key column below is authoritative per payload — read it, don't assume the casing.
Redacted payloads — everything else is walked by the audit redactor on publish; the subscriber receives a redacted key/value map derived from the declared shape.

`agent.config.reverted`

Payload ConfigRevertedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`RevisionID`	`string`
`FromRevisionID`	`string`
`OccurredAt`	`time.Time`

`agent.config.revised`

Payload ConfigRevisedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`RevisionID`	`string`
`ParentRevisionID`	`string`
`ContentHash`	`string`
`OccurredAt`	`time.Time`

`agent.deregistered`

Payload AgentDeregisteredPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`RegistrationKey`	`string`
`DeregisteredAt`	`int64`

`agent.drained`

Payload AgentControlPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`Command`	`string`
`Reason`	`string`
`IssuedAt`	`int64`

`agent.force_stopped`

Payload AgentControlPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`Command`	`string`
`Reason`	`string`
`IssuedAt`	`int64`

`agent.health`

Payload AgentHealthPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`Health`	`string`
`ReportedAt`	`int64`

`agent.paused`

Payload AgentControlPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`Command`	`string`
`Reason`	`string`
`IssuedAt`	`int64`

`agent.registered`

Payload AgentRegisteredPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`RegistrationKey`	`string`
`Incarnation`	`uint64`
`VersionHash`	`string`
`Hosting`	`string`
`RegisteredAt`	`int64`

`agent.restart_requested`

Payload AgentControlPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`Command`	`string`
`Reason`	`string`
`IssuedAt`	`int64`

`agent.restarted`

Payload AgentRestartedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`RegistrationKey`	`string`
`Incarnation`	`uint64`
`VersionHash`	`string`
`VersionHashChanged`	`bool`
`RestartedAt`	`int64`

`agent_config.llm_provider.installed`

Payload LLMProviderSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ProviderName`	`string`
`Provider`	`string`
`InferenceBroker`	`string`
`OccurredAt`	`time.Time`

`agent_config.oauth_provider.installed`

Payload OAuthProviderSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ProviderName`	`string`
`CredentialBroker`	`string`
`RevisionID`	`string`
`OccurredAt`	`time.Time`

`agent_config.oauth_provider.removed`

Payload OAuthProviderSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ProviderName`	`string`
`CredentialBroker`	`string`
`RevisionID`	`string`
`OccurredAt`	`time.Time`

`agent_config.retirement.completed`

Payload RetirementEventPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`OperationHash`	`string`
`Stage`	`string`
`class`	`string`	optional (`omitempty`)
`Completed`	`int`
`Total`	`int`
`Generation`	`uint64`
`OccurredAt`	`time.Time`

`agent_config.retirement.progress`

Payload RetirementEventPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`OperationHash`	`string`
`Stage`	`string`
`class`	`string`	optional (`omitempty`)
`Completed`	`int`
`Total`	`int`
`Generation`	`uint64`
`OccurredAt`	`time.Time`

`agent_config.retirement.started`

Payload RetirementEventPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`AgentID`	`string`
`OperationHash`	`string`
`Stage`	`string`
`class`	`string`	optional (`omitempty`)
`Completed`	`int`
`Total`	`int`
`Generation`	`uint64`
`OccurredAt`	`time.Time`

`artifacts.deleted`

Payload ArtifactDeletedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`artifact_id`	`string`

`artifacts.uploaded`

Payload ArtifactUploadedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`artifact_id`	`string`
`mime_type`	`string`	optional (`omitempty`)
`size_bytes`	`int64`
`source`	`string`	optional (`omitempty`)
`namespace`	`string`	optional (`omitempty`)

`audit.admin_scope_used`

Two emit sites publish distinct shapes: the bus's admin-filter Subscribe emit (first shape) and the Protocol-edge admin/impersonation audit emit (second shape).

Payload AdminScopeUsedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tenant`	`string`
`User`	`string`
`Session`	`string`
`SubscriberID`	`uint64`

Payload AdminScopeUsedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`auth.IdentityTriple`
`Requester`	`auth.IdentityTriple`
`Impersonating`	`auth.IdentityTriple`
`Reason`	`string`
`Method`	`string`

`audit.redaction_failed`

Payload AuditRedactionFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`OriginalType`	`events.EventType`
`Reason`	`string`

`auth.rejected`

Payload AuthRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Reason`	`string`
`KID`	`string`
`Issuer`	`string`
`Subject`	`string`

`bus.dropped`

Payload BusDroppedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`FromSeq`	`uint64`
`ToSeq`	`uint64`
`DroppedCount`	`uint64`
`SubscriberID`	`uint64`

`bus.subscription_idle_closed`

Payload SubscriptionIdleClosedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SubscriberID`	`uint64`
`IdleSeconds`	`float64`

`control.applied`

Payload ControlLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Type`	`string`
`Outcome`	`string`
`Err`	`string`

`control.received`

Payload ControlLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Type`	`string`
`Outcome`	`string`
`Err`	`string`

`control.rejected`

Payload ControlRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Type`	`string`
`Reason`	`string`
`CallerScope`	`string`

`dev.draft.created`

Payload DraftCreatedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`DraftID`	`string`
`Template`	`string`
`FileCount`	`int`

`dev.draft.discarded`

Payload DraftDiscardedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`DraftID`	`string`

`dev.draft.previewed`

Payload DraftPreviewedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`DraftID`	`string`
`OK`	`bool`

`dev.draft.saved`

Payload DraftSavedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`DraftID`	`string`
`OutputDir`	`string`
`FileCount`	`int`

`dev.draft.updated`

Payload DraftUpdatedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`DraftID`	`string`
`Path`	`string`
`Size`	`int`

`distributed.bus_envelope`

Payload BusEnvelopePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Envelope`	`distributed.BusEnvelope`

`flow.budget_exceeded`

Payload BudgetExceededPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`FlowName`	`string`
`Axis`	`string`

`flows.page_viewed`

Payload FlowsPageViewedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Method`	`string`
`FlowID`	`string`
`AdminScoped`	`bool`

`flows.run_invoked`

Payload FlowsRunInvokedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`FlowID`	`string`
`RunID`	`string`

`governance.budget_exceeded`

Payload BudgetExceededPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Tier`	`string`
`Model`	`string`
`TotalCost`	`float64`
`Ceiling`	`float64`
`Currency`	`string`
`OccurredAt`	`time.Time`

`governance.failover`

Payload GovernanceFailoverPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`FromProvider`	`string`
`ToProvider`	`string`
`HopIndex`	`int`
`AccumCostUSD`	`float64`
`Reason`	`string`

`governance.key_rotated`

Payload KeyRotatedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`Provider`	`string`
`Fingerprint`	`string`
`OccurredAt`	`time.Time`

`governance.maxtokens_exceeded`

Payload MaxTokensExceededPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Tier`	`string`
`Model`	`string`
`Requested`	`int`
`Cap`	`int`
`OccurredAt`	`time.Time`

`governance.posture_read_admin`

Payload PostureReadAdminPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`RequestedTenant`	`string`
`OccurredAt`	`time.Time`

`governance.posture_set`

Payload GovernancePostureSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`DefaultTierBefore`	`string`
`DefaultTierAfter`	`string`
`TierCountBefore`	`int`
`TierCountAfter`	`int`
`TiersBefore`	`[]string`
`TiersAfter`	`[]string`
`OccurredAt`	`time.Time`

`governance.rate_limited`

Payload RateLimitedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Tier`	`string`
`Model`	`string`
`Requested`	`int`
`Available`	`int`
`Capacity`	`int`
`RefillTokens`	`int`
`RefillEvery`	`time.Duration`
`OccurredAt`	`time.Time`

`governance.tenant_overrides_set`

Payload TenantOverridesSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`Tenant`	`string`
`Model`	`string`
`SetModel`	`bool`
`SetExtraInstructions`	`bool`
`SetTemperature`	`bool`
`SetMaxTokens`	`bool`
`SetReasoningEffort`	`bool`
`OccurredAt`	`time.Time`

`llm.completion.chunk`

Payload CompletionChunkPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`TaskID`	`string`
`RunID`	`string`
`Delta`	`string`
`Done`	`bool`
`Kind`	`string`
`OccurredAt`	`time.Time`

`llm.context.prepared`

Payload ContextPreparedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`OccurredAt`	`time.Time`
`Sections`	`llm.RequestTokenSections`
`EstimatedTokens`	`int`
`ContextWindowTokens`	`int`
`InputLimitExclusive`	`int`
`OutputReserved`	`int`
`OutputLimitKnown`	`bool`
`CapacityExceeded`	`bool`
`MessageCount`	`int`
`ToolCount`	`int`
`WorkingInputTarget`	`int`
`PlannerStep`	`int`
`Attempt`	`int`
`Retry`	`int`
`Downgrade`	`int`
`FallbackHop`	`int`
`AttemptKnown`	`bool`
`MaintenanceOrdinal`	`int`
`History`	`*llm.ContextHistory`	optional (`omitempty`)

`llm.context_leak`

Payload ContextLeakPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`LeakSite`	`string`
`SizeBytes`	`int64`
`Threshold`	`int`
`OccurredAt`	`time.Time`

`llm.context_window_exceeded`

Payload ContextWindowExceededPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`EstimatedTokens`	`int`
`ContextWindowTokens`	`int`
`ContextWindowReserve`	`float64`
`OccurredAt`	`time.Time`

`llm.cost.recorded`

Payload CostRecordedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`Cost`	`llm.Cost`
`Usage`	`llm.Usage`
`ContextWindowTokens`	`int`
`OccurredAt`	`time.Time`

`llm.image.materialized`

Payload ImageMaterializedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`ArtifactRef`	`string`
`MIME`	`string`
`SizeBytes`	`int64`
`OccurredAt`	`time.Time`

`llm.mode_downgraded`

Payload ModeDowngradedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`FromMode`	`llm.OutputMode`
`ToMode`	`llm.OutputMode`
`From`	`llm.ResponseFormatKind`
`To`	`llm.ResponseFormatKind`
`Reason`	`string`
`OccurredAt`	`time.Time`

`llm.posture_read_admin`

Payload PostureReadAdminPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`RequestedTenant`	`string`

`llm.provider_credential_fetched`

Payload LLMProviderCredentialFetchedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`RuntimePrincipal`	`string`
`Broker`	`string`
`Provider`	`string`
`KeyFingerprint`	`string`
`Phase`	`string`
`Outcome`	`string`
`OccurredAt`	`time.Time`

`llm.provider_file.uploaded`

Payload ProviderFileUploadedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Provider`	`string`
`Model`	`string`
`ArtifactRef`	`string`
`MIME`	`string`
`Modality`	`string`
`FileID`	`string`
`SizeBytes`	`int64`
`OccurredAt`	`time.Time`

`llm.retry_with_feedback`

Payload RetryWithFeedbackPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Model`	`string`
`Attempt`	`int`
`MaxRetries`	`int`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.app_available`

Payload AppAvailablePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`AgentID`	`string`
`Binding`	`string`
`ServerID`	`tools.ToolSourceID`
`ToolCallID`	`string`
`ToolName`	`string`
`ResourceURI`	`string`
`DisplayMode`	`string`
`RawHTMLTrusted`	`bool`
`OccurredAt`	`time.Time`

`mcp.artifact_egressed`

Payload ArtifactEgressedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ServerID`	`tools.ToolSourceID`
`ToolName`	`string`
`Records`	`[]artifactegress.Record`
`OccurredAt`	`time.Time`

`mcp.connection.added`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.auth_required`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.discovery_origins_set`

Payload MCPDiscoveryOriginsSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`RevisionID`	`string`
`Granted`	`[]string`
`Revoked`	`[]string`
`OccurredAt`	`time.Time`

`mcp.connection.failed`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.paused`

Payload MCPConnectionPausedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`RevisionID`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.pending`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.reattach_failed`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.reattached`

Payload MCPConnectionLifecyclePayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`Transport`	`string`
`State`	`string`
`RevisionID`	`string`
`PauseToken`	`string`
`Reason`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.removed`

Payload MCPConnectionRemovedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`RevisionID`	`string`
`OccurredAt`	`time.Time`

`mcp.connection.resumed`

Payload MCPConnectionResumedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Author`	`identity.Quadruple`
`AgentID`	`string`
`ServerID`	`string`
`RevisionID`	`string`
`OccurredAt`	`time.Time`

`mcp.raw_html_trust_toggled`

Payload MCPRawHTMLTrustToggledPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`ServerName`	`string`
`Trusted`	`bool`
`OccurredAt`	`time.Time`

`mcp.resource_offloaded`

Payload ResourceOffloadedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ArtifactID`	`string`
`Source`	`string`
`SizeBytes`	`int64`
`OccurredAt`	`time.Time`

`mcp.resource_updated`

Payload ResourceUpdatedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Source`	`tools.ToolSourceID`
`URI`	`string`
`OccurredAt`	`time.Time`

`memory.caller_block_admitted`

Payload CallerBlockAdmittedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`bytes`	`int`
`tier`	`string`
`key`	`string`

`memory.health_changed`

Payload HealthChangedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`PriorHealth`	`memory.Health`
`NewHealth`	`memory.Health`
`Reason`	`string`

`memory.identity_rejected`

Payload MemoryIdentityRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Operation`	`string`
`Reason`	`string`

`memory.item_deleted`

Payload MemoryMutationPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Operation`	`string`
`Key`	`string`

`memory.item_put`

Payload MemoryMutationPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Operation`	`string`
`Key`	`string`

`memory.recovery_dropped`

Payload RecoveryDroppedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Reason`	`string`

`notification.auth_required`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.governance_budget_exceeded`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.identity_rejected`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.pause_requested`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.task_completed`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.task_failed`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.task_group_cancelled`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.task_group_resolved`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`notification.tool_approval_requested`

Payload NotificationPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Class`	`events.EventType`
`Severity`	`notifications.Severity`
`Summary`	`string`
`DeepLink`	`string`
`OriginEventType`	`events.EventType`
`OriginEventSequence`	`uint64`
`TaskID`	`string`
`GroupID`	`string`
`Members`	`[]notifications.MemberOutcomeSummary`
`MembersTruncated`	`bool`
`MemberSucceeded`	`int`
`MemberFailed`	`int`
`MemberCancelled`	`int`

`pause.payload_artifact_routed`

Payload PausePayloadArtifactRoutedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Token`	`string`
`ArtifactID`	`string`
`PayloadBytes`	`int`
`ThresholdBytes`	`int`

`pause.requested`

Payload PauseRequestedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Token`	`string`
`Reason`	`string`

`pause.resumed`

Payload PauseResumedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Token`	`string`
`Reason`	`string`
`Decision`	`pauseresume.Decision`

`planner.action_extra_field_dropped`

Payload ActionExtraFieldDroppedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Field`	`string`
`OccurredAt`	`time.Time`

`planner.decision`

Payload DecisionPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`DecisionKind`	`string`
`Tool`	`string`
`ReasoningChars`	`int`
`ReasoningTrace`	`string`
`OccurredAt`	`time.Time`

`planner.error`

Registered anchor — no canonical emit path in this version (planner failures surface as task.failed).

`planner.finish`

Registered anchor — no canonical emit path in this version (a planner's terminal decision is observable via planner.decision with DecisionKind: Finish and the task.* lifecycle events).

`planner.max_steps_exceeded`

Payload MaxStepsExceededPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`MaxSteps`	`int`
`StepsObserved`	`int`
`LastTool`	`string`
`OccurredAt`	`time.Time`

`planner.repair_exhausted`

Payload RepairExhaustedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Attempts`	`int`
`ConsecutiveArgFailures`	`int`
`Reasons`	`[]string`
`OccurredAt`	`time.Time`

`planner.repair_guidance_injected`

Payload RepairGuidanceInjectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`Tier`	`string`
`Counter`	`string`
`Count`	`int`
`OccurredAt`	`time.Time`

`planner.tool_declaration_collision`

Payload ToolDeclarationCollisionPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`DeclaredName`	`string`
`DeclaredTool`	`string`
`DroppedTool`	`string`
`OccurredAt`	`time.Time`

`run.hook_dispatched`

Payload RunHookDispatchedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tool`	`string`
`Outcome`	`string`
`DurationMS`	`int64`
`TranscriptBytes`	`int`
`EntryCount`	`int`

`run.hook_failed`

Payload RunHookFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tool`	`string`
`Outcome`	`string`
`ErrorClass`	`string`

`runs.overrides_set`

Payload RunOverridesSetPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Actor`	`identity.Quadruple`
`SessionID`	`string`
`SetReasoningEffort`	`bool`
`SetTemperature`	`bool`
`SetMaxTokens`	`bool`
`SetSystemPrompt`	`bool`
`SetExtraInstructions`	`bool`
`SetModel`	`bool`
`OccurredAt`	`time.Time`

`runtime.error`

Payload RuntimeErrorPayload — redacted on the wire (audit-redactor walk; subscribers receive a redacted map).

Wire key	Go type	Notes
`Message`	`string`
`Fields`	`map[string]any`

`runtime.run_cancelled`

Payload RunCancelledPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`RunID`	`string`
`CancelledAt`	`int64`
`DroppedEnvelopeCount`	`int64`

`runtime.warning`

Reserved for future runtime-warn emits — registered, no production Runtime emit path in this version; published only by the Protocol conformance suite as a driver-certification fixture.

`session.closed`

Payload SessionClosedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`ClosedAt`	`int64`
`Reason`	`string`

`session.erased`

Payload SessionErasedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`StateRecordsDeleted`	`int`
`ArtifactsDeleted`	`int`
`MemoryPurged`	`bool`
`ErasedAt`	`int64`

`session.gc_reaped`

Payload SessionGCReapedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`ReapedAt`	`int64`
`Reason`	`string`

`session.naming_failed`

Payload SessionNamingFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`ErrorClass`	`string`

`session.opened`

Payload SessionOpenedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`OpenedAt`	`int64`

`session.reopened`

Payload SessionReopenedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`ReopenedAt`	`int64`
`PriorClosedReason`	`string`

`session.title_changed`

Payload SessionTitleChangedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`Source`	`string`

`session.touched`

Payload SessionTouchedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`SessionID`	`string`
`LastSeen`	`int64`

`skill.deleted`

Payload SkillDeletedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Name`	`string`

`skill.identity_rejected`

Payload SkillIdentityRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Operation`	`string`
`Reason`	`string`

`skill.pack_overwrite_refused`

Payload SkillPackOverwriteRefusedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Name`	`string`
`ExistingOrigin`	`skills.Origin`
`IncomingOrigin`	`skills.Origin`

`skill.proposed`

Payload SkillProposedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Name`	`string`
`Origin`	`skills.Origin`
`Scope`	`skills.Scope`
`OriginRef`	`string`
`ContentHash`	`string`
`Result`	`string`
`Reason`	`string`
`RedactedTitleExcerpt`	`string`
`RedactedTriggerExcerpt`	`string`
`Promotion`	`bool`

`skill.search_executed`

Payload SkillSearchExecutedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`QueryHash`	`string`
`Path`	`string`
`Limit`	`int`
`ResultN`	`int`

`skill.upserted`

Payload SkillUpsertedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Name`	`string`
`Origin`	`skills.Origin`
`Scope`	`skills.Scope`
`ContentHash`	`string`
`Idempotent`	`bool`

`task.background_acknowledged`

Payload TaskBackgroundAcknowledgedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`

`task.cancelled`

Payload TaskCancelledPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`Reason`	`string`
`Cascaded`	`bool`

`task.completed`

Payload TaskCompletedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`NotifyOnComplete`	`bool`

`task.failed`

Payload TaskFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`ErrorCode`	`string`

`task.group_cancelled`

Payload TaskGroupCancelledPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Completion`	`tasks.GroupCompletion`
`Origin`	`tasks.CancelOrigin`

`task.group_created`

Payload TaskGroupCreatedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`GroupID`	`tasks.TaskGroupID`
`OwnerTaskID`	`tasks.TaskID`
`RetainTurn`	`bool`
`FailFast`	`bool`
`Description`	`string`

`task.group_resolved`

Payload TaskGroupResolvedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Completion`	`tasks.GroupCompletion`

`task.group_sealed`

Payload TaskGroupSealedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`GroupID`	`tasks.TaskGroupID`
`Members`	`[]tasks.TaskID`
`SealedAt`	`int64`

`task.input_disposition.resolved`

Payload InputDispositionResolvedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`identity`	`identity.Quadruple`
`task_id`	`string`
`artifact_id`	`string`
`mime`	`string`
`disposition`	`string`
`layer`	`string`
`degraded`	`bool`
`degraded_from`	`string`	optional (`omitempty`)
`degradation_reason`	`string`	optional (`omitempty`)
`tool`	`string`	optional (`omitempty`)
`occurred_at`	`time.Time`

`task.patch_applied`

Payload TaskPatchAppliedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`PatchID`	`string`

`task.patch_rejected`

Payload TaskPatchRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`PatchID`	`string`

`task.paused`

Registry-driver scope: emitted by the task registry's MarkPaused transition, which no V1 production caller drives on the live pause path — a paused run stays running in the task projection and pause state travels on the pause.* events (see the pause model).

Payload TaskPausedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`

`task.prioritised`

Payload TaskPrioritisedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`PriorPriority`	`int`
`NewPriority`	`int`

`task.progress`

Payload TaskProgressPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`update_id`	`string`
`TaskID`	`tasks.TaskID`
`ParentTaskID`	`tasks.TaskID`
`Fraction`	`*float64`
`Phase`	`string`
`Message`	`string`
`Tags`	`[]string`
`ReportedAt`	`int64`

`task.resumed`

Registry-driver scope: emitted by the task registry's MarkResumed transition, which no V1 production caller drives on the live pause path — subscribe to pause.resumed for live resume signals (see the pause model).

Payload TaskResumedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`

`task.spawned`

Payload TaskSpawnedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`Kind`	`tasks.TaskKind`
`ParentTaskID`	`tasks.TaskID`
`Priority`	`int`
`IdempotencyKey`	`string`

`task.started`

Payload TaskStartedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`TaskID`	`tasks.TaskID`
`PriorState`	`tasks.TaskStatus`

`tool.approval_requested`

Payload ToolApprovalRequestedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tool`	`string`
`PauseToken`	`string`
`Reason`	`string`
`Tags`	`[]string`
`ArgsSummary`	`any`

`tool.approved`

Payload ToolApprovedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tool`	`string`
`PauseToken`	`string`
`ApproverReason`	`string`

`tool.auth_completed`

Payload ToolAuthCompletedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Source`	`string`
`BindingScope`	`string`
`State`	`string`
`PauseToken`	`string`

`tool.auth_required`

Payload ToolAuthRequiredPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Source`	`string`
`SourceName`	`string`
`BindingScope`	`string`
`AuthorizeURL`	`string`
`State`	`string`
`PauseToken`	`string`
`Scopes`	`[]string`

`tool.completed`

Payload ToolCompletedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ToolName`	`string`
`Transport`	`tools.TransportKind`
`Attempts`	`int`
`DurationMS`	`int64`

`tool.credential_exchanged`

The AudienceVerified field is true only when the general tokenexchange path read a JWT aud claim and it included the declared RFC 8707 resource. Signed-capability exchanges prove the destination from the broker response and leave this field false.

Payload ToolCredentialExchangedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Source`	`string`
`BindingScope`	`string`
`SubjectKind`	`string`
`BrokerHost`	`string`
`GrantedScopes`	`[]string`
`ExpiresAt`	`time.Time`
`AudienceVerified`	`bool`
`ActorAsserted`	`bool`

`tool.failed`

Payload ToolFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ToolName`	`string`
`Transport`	`tools.TransportKind`
`Attempts`	`int`
`ErrorClass`	`tools.ErrorClass`
`ConfiguredBudget`	`int`	optional (`omitempty`)
`ErrorMessage`	`string`
`ScopeShortfall`	`*tools.ScopeShortfallDetail`	optional (`omitempty`)

`tool.invalid_args`

Payload ToolInvalidArgsPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ToolName`	`string`
`Transport`	`tools.TransportKind`
`ValidationError`	`string`

`tool.invoked`

Payload ToolInvokedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ToolName`	`string`
`Transport`	`tools.TransportKind`
`StartedAt`	`time.Time`

`tool.policy_exhausted`

Payload ToolPolicyExhaustedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`ToolName`	`string`
`Transport`	`tools.TransportKind`
`Attempts`	`int`
`LastClass`	`tools.ErrorClass`
`ConfiguredBudget`	`int`	optional (`omitempty`)
`LastError`	`string`

`tool.provider_credential_fetch_failed`

Payload ProviderCredentialFetchFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Provider`	`string`
`Endpoint`	`string`
`Reason`	`string`

`tool.provider_credential_fetched`

Payload ProviderCredentialFetchedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Provider`	`string`
`Endpoint`	`string`
`FormatVersion`	`int`
`ExpiresAt`	`time.Time`

`tool.rejected`

Payload ToolRejectedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Tool`	`string`
`PauseToken`	`string`
`Reason`	`string`

`topology.changed`

Payload TopologyChangedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Projection`	`types.TopologyProjection` — see `TopologyProjection`

`trajectory.compressed`

Payload TrajectoryCompressedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`StepsBefore`	`int`
`StepsAfter`	`int`
`TokenEstimate`	`int`
`OccurredAt`	`time.Time`

`trajectory.compression_failed`

Payload TrajectoryCompressionFailedPayload — safe payload (delivered typed, verbatim).

Wire key	Go type	Notes
`Identity`	`identity.Quadruple`
`StepsObserved`	`int`
`TokenEstimate`	`int`
`ErrorCode`	`string`
`ErrorMessage`	`string`
`OccurredAt`	`time.Time`

Protocol events ​

How payloads reach a subscriber ​

agent.config.reverted ​

agent.config.revised ​

agent.deregistered ​

agent.drained ​

agent.force_stopped ​

agent.health ​

agent.paused ​

agent.registered ​

agent.restart_requested ​

agent.restarted ​

agent_config.llm_provider.installed ​

agent_config.oauth_provider.installed ​

agent_config.oauth_provider.removed ​

agent_config.retirement.completed ​

agent_config.retirement.progress ​

agent_config.retirement.started ​

artifacts.deleted ​

artifacts.uploaded ​

audit.admin_scope_used ​

audit.redaction_failed ​

auth.rejected ​

bus.dropped ​

bus.subscription_idle_closed ​

control.applied ​

control.received ​

control.rejected ​

dev.draft.created ​

dev.draft.discarded ​

dev.draft.previewed ​

dev.draft.saved ​

dev.draft.updated ​

distributed.bus_envelope ​

flow.budget_exceeded ​

flows.page_viewed ​

flows.run_invoked ​

governance.budget_exceeded ​

governance.failover ​

governance.key_rotated ​

governance.maxtokens_exceeded ​

governance.posture_read_admin ​

governance.posture_set ​

governance.rate_limited ​

governance.tenant_overrides_set ​

llm.completion.chunk ​

llm.context.prepared ​

llm.context_leak ​

llm.context_window_exceeded ​

llm.cost.recorded ​

llm.image.materialized ​

llm.mode_downgraded ​

llm.posture_read_admin ​

llm.provider_credential_fetched ​

llm.provider_file.uploaded ​

llm.retry_with_feedback ​

mcp.app_available ​

mcp.artifact_egressed ​

mcp.connection.added ​

mcp.connection.auth_required ​

mcp.connection.discovery_origins_set ​

mcp.connection.failed ​

mcp.connection.paused ​

mcp.connection.pending ​

mcp.connection.reattach_failed ​

mcp.connection.reattached ​

mcp.connection.removed ​

mcp.connection.resumed ​

mcp.raw_html_trust_toggled ​

mcp.resource_offloaded ​

mcp.resource_updated ​

memory.caller_block_admitted ​

memory.health_changed ​

memory.identity_rejected ​

memory.item_deleted ​

memory.item_put ​

memory.recovery_dropped ​

notification.auth_required ​

notification.governance_budget_exceeded ​

notification.identity_rejected ​

Protocol events

How payloads reach a subscriber

`agent.config.reverted`

`agent.config.revised`

`agent.deregistered`

`agent.drained`

`agent.force_stopped`

`agent.health`

`agent.paused`

`agent.registered`

`agent.restart_requested`

`agent.restarted`

`agent_config.llm_provider.installed`

`agent_config.oauth_provider.installed`

`agent_config.oauth_provider.removed`

`agent_config.retirement.completed`

`agent_config.retirement.progress`

`agent_config.retirement.started`

`artifacts.deleted`

`artifacts.uploaded`

`audit.admin_scope_used`

`audit.redaction_failed`

`auth.rejected`

`bus.dropped`

`bus.subscription_idle_closed`

`control.applied`

`control.received`

`control.rejected`

`dev.draft.created`

`dev.draft.discarded`

`dev.draft.previewed`

`dev.draft.saved`

`dev.draft.updated`

`distributed.bus_envelope`

`flow.budget_exceeded`

`flows.page_viewed`

`flows.run_invoked`

`governance.budget_exceeded`

`governance.failover`

`governance.key_rotated`

`governance.maxtokens_exceeded`

`governance.posture_read_admin`

`governance.posture_set`

`governance.rate_limited`

`governance.tenant_overrides_set`

`llm.completion.chunk`

`llm.context.prepared`

`llm.context_leak`

`llm.context_window_exceeded`

`llm.cost.recorded`

`llm.image.materialized`

`llm.mode_downgraded`

`llm.posture_read_admin`

`llm.provider_credential_fetched`

`llm.provider_file.uploaded`

`llm.retry_with_feedback`

`mcp.app_available`

`mcp.artifact_egressed`

`mcp.connection.added`

`mcp.connection.auth_required`

`mcp.connection.discovery_origins_set`

`mcp.connection.failed`

`mcp.connection.paused`

`mcp.connection.pending`

`mcp.connection.reattach_failed`

`mcp.connection.reattached`

`mcp.connection.removed`

`mcp.connection.resumed`

`mcp.raw_html_trust_toggled`

`mcp.resource_offloaded`

`mcp.resource_updated`

`memory.caller_block_admitted`

`memory.health_changed`

`memory.identity_rejected`

`memory.item_deleted`

`memory.item_put`

`memory.recovery_dropped`

`notification.auth_required`

`notification.governance_budget_exceeded`

`notification.identity_rejected`