Feature Matrix

August 1, 2026 ยท View on GitHub

The exhaustive capability index the README links to as its full feature matrix. Every row is verified against src/bernstein/ on the current main.

The "Docs status" column reflects whether a page-level reference exists (Full) or whether the capability is documented in source / module docstrings only (Brief). Full rows link to their reference page.

Rows still marked Brief are deliberate: the capability is reachable from the surface named in its Notes column, but is documented in source and module docstrings rather than on its own reference page. Every row names a surface an operator can invoke; tests/unit/test_cli_server_route_parity.py additionally holds the CLI's server calls to the registered route table.


Core orchestration

CapabilityDocs statusNotes
Goal-based run (-g)FullMain entry flow
Seed-file run (bernstein.yaml)FullAuto-discovery supported
Plan-file execution (stages/steps)Fullbernstein run plan.yaml
Retry + escalation plumbingFullIn task lifecycle, with configurable retries
Completion verification (janitor + signals)FullAPI + getting started coverage
Process-aware stop/drainFullGraceful and force stop, drain mode
Multi-cell orchestrationFullImplemented in multi_cell.py
Fast-path executionFullTrivial tasks skip the LLM agent entirely (fast_path.py)
Plan mode (human approval)Full--plan-only, --from-plan, approval routes
Headless modeFull--headless for CI/overnight
Dry-run modeFull--dry-run previews the plan without spawning
Typed activity boundaryFullOne hash-in/hash-out contract for coding, research, browser, data, and ops activities, verified by bernstein activity verify <run> (core/orchestration/activity.py). Browser is the one non-coding modality with a CLI dispatch verb (bernstein activity browser run), the rest are Python-API only; dispatching a non-coding modality from a seed, plan, or backlog file is not wired yet, see "Reachability today"
Missions (multi-phase goals)FullPhases run under isolated budget envelopes; a halted phase seals a halt receipt and leaves runnable siblings active (core/orchestration/missions.py)
Durable task suspend/resumeFullA waiting task parks with an attested receipt that frees its seat, sandbox, and budget; resume reconstructs byte-identically (core/tasks/suspension.py)
Tournament runsFullParallel attempts selected by deterministic evaluators; the winner carries a signed selection receipt (core/tournament/)
Fleet steeringFullPause, resume, guidance, redirect, and abort each land a signed steering receipt before any effect runs (core/orchestration/steering.py)
Detached run serviceFullSubmit a goal, disconnect, and reattach later against a supervised run service (core/run_service/)
Named resource poolsFullLease-backed admission with chain-anchored grant and release receipts (core/admission/)
Spec-to-graph compileFullbernstein plan compile runs the draft/approve/compile pipeline offline into a gated task graph with a chain-anchored receipt (plan_compile_cmd.py)

State and persistence

CapabilityDocs statusNotes
File-based state in .sdd/FullPrimary operating model
Metrics/trace persistenceFullPaths documented, JSONL schema
Lessons/memory persistenceFullStored and injected at spawn time
Storage backends (memory/postgres/redis)FullConfig + doctor coverage
Session persistence (fast resume)Fullsession.py resumes after stop/restart
Bulletin board (cross-agent messaging)FullAppend-only, used by agents for handoff
Content-addressed artifact storeFullContent-addressed deduplication for artifacts (core/persistence/cas_store.py)
Cloud artifact sinksFullLocal, S3, GCS, Azure Blob, and R2 sinks behind an async ArtifactSink protocol

Observability

CapabilityDocs statusNotes
/status and task APIFullCore API documented
Prometheus /metricsFullEndpoint is real; Grafana dashboards are user-defined
OTLP telemetry initializationFullWiring exists in core/observability/
OTel GenAI span projectionFulltrace project projects a run journal into signed OTel GenAI spans; trace verify-projection recomputes span ids
Live OTLP bridgeFullThe signed span projection streams to any OpenTelemetry collector live or via telemetry export-otel; telemetry verify-span recomputes a span id from its journal entry (core/telemetry/)
Retrospective reporting (retro)FullCLI coverage present
Cost analysis (cost, history/anomaly hooks)Fullbernstein cost, cost anomaly detection active
Per-agent token progressFullTracked in api_usage.py, surfaced in bernstein status
Session analyticsFullbernstein recap shows session-level stats
Debug bundleFullbernstein debug collects logs/state/config for triage

Safety and governance

CapabilityDocs statusNotes
Quality gates (lint, type-check, tests)FullIn the run flow; extended with coverage, benchmark, arch-conformance, and mutation-testing gates
PII scan quality gateFullActive, auto-installed via log_redact.py
Rule enforcement (.bernstein/rules.yaml)FullEnforcement behavior documented
Log redaction (PII filter)FullActive
Lethal-trifecta capability gateFullTaint-aware egress denial: a chain that unions private data, tainted input, and external comms is refused even when static tags would pass (core/security/capability_matrix.py)
Circuit breakerFullHalts misbehaving agents, writes SHUTDOWN signal
Token growth monitorFullAuto-intervention on runaway consumption
Cost anomaly detectionFullZ-score based, acts via task completion
Agent loop detectionFullKills agents in edit-loop cycles
Deadlock detectionFullWait-for graph, automatic victim selection
Cross-model verificationFullA different model reviews completed diffs (opt-in)
Behaviour anomaly detectionFullFlags agents whose runtime metrics deviate statistically from baseline (core/observability/behavior_anomaly.py)
Context degradation detectorFullMonitors quality over time, restarts when degraded
Agent trust tiersBriefbernstein agents trust; tiers accrue from task outcomes in .sdd/trust/ and map to an AgentPermissions profile (core/agents/agent_trust.py)

Verifiability and provenance

CapabilityDocs statusNotes
Unified lineage spineFullThe journal head is sealed into a single lineage root at run finalization; artifact provenance and replay identity share that root (core/lineage/)
Always-on event journalFullMerkle-chained per-run EventJournal; the head hash is the run identity (core/replay/journal.py)
HMAC-chained audit logFullTamper-evident, daily rotation, cross-process append lock (core/security/audit_chain.py)
Execution WALFullHash-chained write-ahead log for crash recovery and determinism fingerprinting
Deterministic replay + forkFullreplay --verify recomputes the journal head; fork --from-step rebuilds state at a journal step into an isolated run (core/replay/)
Audit-chain exportFullProjects a chain range into COSE_Sign1, in-toto, and DSSE receipts re-verifiable offline with no Bernstein imports (core/security/audit_export.py)
Provenance trust classesFullEvery tool result carries a trust class; effective trust is the minimum over the lineage closure, recomputed offline by audit taint (core/lineage/provenance.py)
Gate adjudication recordsFullGate panel decisions are recomputable; gate verify confirms the inputs hash
In-process verification gatesFullVerification-gate hooks rendered into capable adapters so the check runs inside the agent (adapters/hook_gate_render.py)
Evidence bundlesFullSealed verification-evidence bundle, projectable as a tracker comment (core/evidence/bundle.py)
Intent capsulesFullApproval compiles the goal into a signed capsule; a deterministic drift monitor escalates divergence, verified by intent verify (core/security/intent_capsule.py)
Query receipts (datasources)FullRead-only SQL results become content-addressed signed receipts; datasource verify --re-execute reports MATCH or DRIFT (core/datasources/)
Compaction receiptsFullContext and template compaction is recorded as a chain-anchored, reversible receipt (core/tokens/compaction_receipt.py)
Tamper-evident memoryFullMemory entries are hash-chained with provenance; memory verify/why/forget proves authorship, traces origin, and tombstones (core/memory/chain.py)
Review / autofix / escalation / consent / webhook-node receiptsFullSigned, journal-anchored receipts verified offline (review-receipt verify, escalation verify, webhook verify)
Stall escalation receiptsFullA stalled worker produces a signed escalation receipt embedding the last audit entries and a deterministic recommended action (supervisor escalate)
C2PA content credentialsFullArtifact lineage projected into signed C2PA credentials (credential emit/verify)
Skill install receiptsFullInstall and usage links recomputable via skill verify / skill provenance
Adapter security-floor receiptsFullA below-floor adapter spawn is refused with a content-addressed, chain-anchored refusal receipt (adapters/security_floor.py)
Endpoint certificationFullLocal-model workers are conformance-tested and issued a signed certification (core/endpoints/certification.py)
SLA violation receiptsFullPer-goal SLA contracts evaluated read-only each tick; a breach becomes a signed, offline-verifiable violation receipt (core/planning/sla_store.py)
Signed daily mission digestsFullEach day's mission progress is a signed digest projecting that day's chain; mission digest verify re-derives it (core/orchestration/mission_digest.py)
Agent run manifestFullHashable workflow spec for SOC 2 evidence
RBAC / budget / seat projectionsFullAccess and budget verdicts re-derivable via governance verify
Unified event feedFullChain-projected event feed with a typed grammar and per-event receipts (core/events/feed.py)

Identity and delegation

CapabilityDocs statusNotes
Native subagent delegationFullThe scheduler delegates leaf execution to native subagents; schema-validated results anchor as subagent.delegation journal entries, chain verified via delegation verify (core/agents/subagent_delegation.py)
Attenuated capability tokensFullEach delegation hop is a signed, scope-attenuating token, so the principal to orchestrator to sub-agent authority chain verifies offline (core/security/capability_tokens.py)
Signed agent cardsFullAgentIdentityCard signed for A2A federation and served at /.well-known/agent-card.json (core/security/agent_card_signer.py)
A2A node + message receiptsFullCallable JSON-RPC node; a completed task returns an artifact whose parts carry a lineage receipt verified by a2a verify (core/interop/a2a_card.py)
HTTP message signaturesFullRFC 9421 Ed25519 signatures on outbound agent-facing requests; keys served as JWKS via identity keydir (core/identity/http_signing.py)
SPIFFE workload identityFullSPIFFE/SVID workload identity with spiffe id and spiffe verify-binding (core/identity/spiffe/)

Payments and cost governance

CapabilityDocs statusNotes
Spending mandatesFullAuthorized-spend mandates enforced before a paid action, with signed spend receipts (core/payments/)
Authorized-action mandatesFullmandate emit/verify/revoke binds, proves, and revokes an authorized-action mandate
Cost-policy receiptsFullThe live dispatch gate records batch, cache, and model policy verdicts as receipts (core/cost/scheduling/receipt.py)
Budget envelopesFullPer-phase and per-task budget envelopes with rollup by envelope (core/cost/cost_rollup_by_envelope.py)

Ecosystem and integrations

CapabilityDocs statusNotes
Agent catalog/discoveryFullbernstein agents sync/list/discover/match/showcase (40+ CLI agent adapters)
Browser / computer-use adapterFullAdapter family for autonomous browser and computer-use agents; every action is a content-addressed lineage anchor (adapters/computer_use.py)
GitHub App and CI fix flowsFullbernstein ci fix <url>, github setup
Trigger sourcesFullgithub, gitlab, slack, discord, file_watch, webhook, odata, and schedule source adapters (core/trigger_sources/)
OData trigger sourceFullPolls an OData endpoint into normalized trigger events (core/trigger_sources/odata_poll.py)
Webhook nodeFullOutbound webhook node with recomputable inbound-event and node hashes (core/trigger_sources/webhook_node.py, webhook verify)
Automation bridgeFullSigned trigger receipts and chain-anchored status callbacks for external automations (core/trigger_sources/automation_platforms.py)
Plugin hooks (pluggy)FullSDK docs in CONTRIBUTING.md
Cluster/worker primitivesFullbernstein worker --server URL, cluster routes documented
Multi-repo workspacesFullworkspace: in bernstein.yaml, workspace CLI
MCP server modeFullbernstein mcp, MCP server in mcp/server.py
MCP tool registryFullAuto-discovery and per-task config
MCP catalog clientFullbernstein mcp catalog browse/search/install installable server catalog (core/protocols/mcp_catalog/)
MCP input contractsFullSchema-validated, deny-by-default MCP tool-call input firewall (mcp/input_validation.py); the enforced schema is also the advertised inputSchema
Stateless MCP anchoringFullA stateless MCP client can poll a run and verify it offline; calls anchor as mcp.stateless_call journal entries (core/protocols/mcp/stateless_core.py)
Runtime capability cards (MCP)FullPer-server capability cards for the MCP server (mcp/capability.py)
ACP native bridgeFullbernstein acp serve --stdio|--http :PORT IDE-native bridge (core/protocols/acp/); see reference/acp-bridge.md
Protocol negotiationFullprotocol_negotiation.py runtime protocol-version handshake
Schema registryFullschema_registry.py versioned message schemas for protocols
Credential vaultFullbernstein connect <provider>, bernstein creds list/revoke/test OS-keychain token storage (core/security/vault/)
Autofix CI daemonFullbernstein autofix start/stop/status/attach watches PRs and dispatches repair runs on CI failure (core/autofix/)
Dev previewFullbernstein preview start/stop/list/status exposes an agent dev server via tunnel with configurable auth (core/preview/)
Fleet dashboardFullbernstein fleet [--web HOST:PORT] cross-session multi-instance view (core/fleet/)
Notification sinksFullbernstein notify test --sink <id> pluggable notification backends (core/notifications/)
PR review responderFullbernstein review-responder start/status/tick auto-responds to PR review comments (core/review_responder/)
Review pipeline DSLFullbernstein review --pipeline review.yaml YAML-driven multi-phase review (core/quality/review_pipeline/)
Plan archivalFullbernstein plan ls/show list and inspect archived plans (core/planning/lifecycle.py)
Slack integrationFullSlash commands and events API endpoints
Webhook ingestionFullPOST /webhooks/ for external event routing
Adaptive parallelismFullAuto-tunes concurrency from observed success rates (core/orchestration/adaptive_parallelism.py)
Warm poolFullPre-spawned agent pool to cut spawn latency (core/agents/warm_pool.py)
Pluggable sandbox backendsFullWorktree, Docker, E2B, and Modal backends behind a SandboxSession protocol
microVM sandbox backendBriefIsolation tier with content-addressed snapshots for deterministic fork-and-race (--sandbox microvm)
Named sandbox poolsFullChain-projected pool manifests with capability and egress ceilings and signed worker enrolment (core/sandbox/pool.py)
Cache policy engineFullContent-addressed key recipes, drift expiry, and fleet dedup with signed duplicate-of receipts (core/persistence/cache_policy.py)
Sovereign deployment profileFullSigned residency-posture attestation; posture drift at spawn is a signed refusal (core/security/deployment_profile.py)
Workflow DSLFullbernstein workflow validate/list/show
Chaos engineeringFullbernstein chaos agent-kill/file-remove/status/slo
Benchmark suiteFullbernstein benchmark run/compare/swe-bench
Eval harnessFullbernstein eval run/report/failures
SWE-Bench harnessFullVerified eval in benchmarks/swe_bench/run.py
Graduation systemFullAgent promotion stages, routes in routes/graduation.py
Semantic cachingFullsemantic_cache.py prompt deduplication
Cascade router (intra-Claude tier escalation)FullTier escalation within a single provider (core/routing/cascade_router.py)
Cascade fallback manager (cross-adapter failover)FullCross-adapter provider failover (core/routing/cascade.py)
Batch routerFullTask batching for non-urgent work
Prompt cachingFullSHA-256 system prefix deduplication
Output style customizationBrief.bernstein/output-styles/*.md, selected by output_style: in bernstein.yaml, injected into the spawn prompt
Installation mismatch detectionFullDetects adapter/installation gaps
Worker badge identityFullProcess identification in ps/Activity Monitor
Keybinding system (TUI)FullConfigurable TUI keyboard shortcuts
Diff folding displayBriefbernstein diff --fold; the TUI agent log also folds long diffs in its historical tail
Word-level diff renderingBriefbernstein diff --word-diff highlights only the tokens that changed
Contextual tips systemBriefOne cooldown-limited hint after an interactive command; BERNSTEIN_NO_TIPS opts out
Security review commandBriefbernstein security-review pattern-scans a diff for secrets, injection, and weak crypto
Commit attribution statsFullPer-agent commit statistics
Away summary generationBriefbernstein recap --since 6h builds the report from workspace files, no server needed
Plugin trust warningBriefTrust tier and score per plugin in bernstein plugins (--trust-details for the signal breakdown)
Cumulative progress trackingFullProgress tracking across runs

CLI commands

CommandDocs statusNotes
bernstein -g GOALFullInline goal
bernstein run plan.yamlFullPlan file execution
bernstein initFullWorkspace setup
bernstein stopFullGraceful/force stop
bernstein liveFullTUI dashboard
bernstein dashboardFullWeb dashboard
bernstein statusFullTask summary
bernstein psFullProcess list
bernstein costFullSpend breakdown
bernstein doctorFullPre-flight health check
bernstein recapFullPost-run summary
bernstein retroFullRetrospective report
bernstein trace IDFullDecision trace
bernstein logsFullAgent log tail
bernstein diff IDFullPer-task git diff
bernstein planFullTask backlog
bernstein plan compileFullCompile a spec into a gated task graph offline
bernstein replay IDFullDeterministic replay
bernstein checkpointFullSession snapshot
bernstein wrap-upFullEnd session with summary
bernstein demoFullZero-config demo
bernstein quickstartFullFlask TODO demo (3 tasks)
bernstein agents ...FullCatalog management
bernstein evolve ...FullSelf-improvement
bernstein ci fixFullCI autofix
bernstein github setupFullGitHub App setup
bernstein workerFullJoin cluster as worker
bernstein mcpFullRun as MCP server
bernstein chaosFullFault injection
bernstein auditFullCryptographic audit (seal/verify/export/taint/pack/slice)
bernstein verifyFullMerkle/HMAC verification
bernstein benchmarkFullBenchmark suite
bernstein evalFullEvaluation harness
bernstein workspaceFullMulti-repo workspace
bernstein configFullConfiguration management
bernstein quarantineBriefCross-run task quarantine read from .sdd/runtime/quarantine.json (list, clear)
bernstein cacheFullResponse cache management
bernstein test-adapterFullAdapter smoke test
bernstein add-taskFullInject task via CLI
bernstein cancelFullCancel task
bernstein review/approve/reject/pendingFullReview workflow
bernstein syncFullSync backlog with server
bernstein manifestFullRun manifest inspection
bernstein gatewayFullMCP gateway proxy
bernstein workflowFullWorkflow DSL
bernstein watchFullDirectory file watcher
bernstein listenFullVoice commands (experimental)
bernstein completionsFullShell completion scripts
bernstein selfFullProvenance-verified update lifecycle: signed feed, chain-anchored advisory, pre-install wheel verification, pin, receipted rollback
bernstein self-updateFullCompatibility alias for bernstein self
bernstein pluginsFullList active plugins
bernstein install-hooksFullInstall git hooks
bernstein debugFullGenerate debug bundle for triage
bernstein acp serveFullACP bridge (--stdio or --http :PORT)
bernstein autofix ...FullCI autofix daemon (start/stop/status/attach)
bernstein connectFullCredential vault setup for a provider
bernstein creds ...FullCredential management (list/revoke/test)
bernstein preview ...FullDev server preview (start/stop/list/status)
bernstein fleetFullFleet dashboard (optionally --web HOST:PORT)
bernstein fleet steerFullMid-run steering: pause/resume/guidance/redirect/abort
bernstein mcp catalog ...FullMCP catalog browser (browse/search/install)
bernstein notify testFullNotification sink smoke test
bernstein plan ls/showFullList and inspect archived plans
bernstein review-responder ...FullPR review responder (start/status/tick)
bernstein review --pipelineFullReview with YAML pipeline DSL
bernstein fork --run --from-stepFullFork a run at a journal step into a new isolated run
bernstein gate verifyFullRecompute a gate panel's inputs hash and confirm the adjudication
bernstein mandate emit/verify/revokeFullBind, prove, and revoke authorized-action mandates
bernstein payment-mandate issue/show/spendFullIssue and spend against authorized-spend mandates with signed receipts
bernstein governance verifyFullRecompute access and budget verdicts for a run
bernstein webhook verifyFullRecompute inbound-event and outbound webhook-node hashes
bernstein review-receipt emit/verifyFullBind and offline-verify PR review receipts (issue + plan + tool calls + diff)
bernstein escalation show/verifyFullProject and reconstruct escalation receipts from the journal
bernstein supervisor status/escalateFullSupervise stalled workers and seal stall escalation receipts
bernstein delegation verifyFullReconstruct and verify a run's delegation chain
bernstein credential emit/verifyFullProject an artifact's lineage into a signed C2PA credential and verify it
bernstein skill provenance/verifyFullRecompute a skill's install receipt and usage-provenance graph
bernstein schedule verify/audit, schedule show --atFullReplay recorded fires, chain-check fire receipts, project a schedule at a time
bernstein sla add/list/show/verify/reportFullAttach per-goal SLA contracts; a breach is an offline-verifiable violation receipt
bernstein trace project/verify-projectionFullProject a run journal into signed OTel GenAI spans and verify the projection
bernstein telemetry export-otel/verify-spanFullStream the span projection to an OTLP collector and verify a single span offline
bernstein thread verifyFullProve a streamed TUI thread equals its executed journal
bernstein memory verify/why/forgetFullProve authorship, trace origin, and tombstone a memory entry
bernstein replay --verify/--from-stepFullRecompute the journal head or rebuild state to a step
bernstein intent show/verifyFullProject and recompute an intent capsule's conformance offline
bernstein a2a verify/publishFullVerify an A2A message receipt and publish the agent card
bernstein activity verifyFullVerify a typed activity's replay hashes (activity browser run for browser checks)
bernstein datasource register/query/verifyFullRegister read-only SQL datasources and verify content-addressed query receipts
bernstein evidence show/verifyFullProject and verify a sealed evidence bundle
bernstein events query/verifyFullQuery the unified event feed and verify its chain projection
bernstein endpoints certify/verifyFullConformance-certify a local-model endpoint and verify its certification
bernstein ledger verify/anchor/fetchFullVerify, anchor, and fetch work-ledger segments
bernstein mission define/status/verifyFullDefine multi-phase missions and verify mission status (mission digest verify for digests)
bernstein tournament show/verifyFullInspect a tournament run and verify its selection receipt
bernstein spiffe id/verify-bindingFullPrint the SPIFFE id and verify a workload-identity binding
bernstein spec check/auto-fixFullEvaluate and auto-fix a spec against the quality checklist
bernstein run-service submit/attach/statusFullSubmit a detached run, then reattach to it later
bernstein compaction logFullInspect chain-anchored compaction receipts
bernstein identity keydir/decode/verifyFullPrint the JWKS key directory and decode/verify install identity
bernstein pool register/list/show/verifyFullManage lease-backed named resource pools

Cloud / Cloudflare

CapabilityDocs statusNotes
Workers RuntimeBridgeFullbridges/cloudflare.py agents on Workers + Durable Objects
Workflow Bridge (durable execution)Fullbridges/cloudflare_workflow.py auto-retry, approval gates
Browser Rendering BridgeFullbridges/browser_rendering.py screenshots, scraping, PDFs
R2 Workspace SyncFullbridges/r2_sync.py content-addressed delta sync
Workers AI Provider (free LLMs)Fullcore/routing/cloudflare_ai.py Llama, Mistral, Gemma, Qwen
D1 Analytics & BillingFullcore/cost/d1_analytics.py usage metering, billing tiers
MCP Remote TransportFullmcp/remote_transport.py streamable HTTP for remote MCP
Cloud CLI (bernstein cloud)Fullcli/commands/cloud_cmd.py login, run, status, cost, deploy
Codex-on-Cloudflare AdapterBriefadapters/codex_cloudflare.py experimental; targets a REST API that does not yet exist and refuses fast