# description
The canonical declarative action contract. A recipe declares what must be true when work is done and inside what guardrails, never the steps. The AI plans and calls every action at runtime under this contract.

# properties.id.description
Spec Standard id (rec_, agt_). Stable across versions.

# properties.intent.description
Plain-language mission for the executing AI.

# properties.inputs.items.properties.sensitivity.description
Only an explicit public lets this input's value flow to the cross-tenant shared cache. Default private.

# properties.outputs.items.properties.acceptance.description
The verification gate. How the harness confirms this output. Pass or fail.

# properties.connections.description
Abstract connection declarations resolved per tenant at run time. The moat indirection: an action names the connection it needs, never a credential.

# properties.tools.description
MCP-backed tool ids (tul_). Listing grants permission; omission denies.

# properties.constraints.description
Policy guardrails. Reusable con_ ids or inline strings. Moral-gate constraints attach here.

# properties.guidance.description
Non-binding suggested approach. Often seeded from a high-scoring past run's trace. Never a script.