The operating idea
The core principle is simple: The model does not constitute the system. AI may classify intent, reason about a path, and produce a recommendation, but the surrounding control plane owns governance, approval, execution scope, and audit evidence.
Plan, approve, execute, audit
The reference implementation is organised around a Plan, Approve, Execute, Audit flow. The orchestrator structures the request, governance evaluates deterministic rules, approval keeps authority with humans, the gateway enforces scoped execution tokens and allowlists, and audit evidence records what happened.
Implemented today
- Governance evaluator covering GR-001 to GR-011.
- Execution token validation for actor, tenant, action, resource, expiry, approval state, and rollback reference checks.
- Approval workflow scaffolding with approved-token issuance paths.
- Domain-agent framework and reference domain agents.
- OpenAPI contract, HLD, ADRs, threat model, RBAC model, and runbooks.
- CI checks for tests, lint, OpenAPI validation, security scan, UI type-check, and build.
Current evidence
The public repository currently reports 36 unit tests across governance, execution gateway, and approval workflow paths. It also includes an explicit STATUS.md file so implementation evidence and maturity boundaries stay visible.
Boundary
EAAP is a production-oriented reference implementation and personal architecture experiment. It is not presented as a certified standard, a production-ready enterprise platform, or an autonomous infrastructure operator.