types ← identity-auth ← agent-account ← delegation ← mcp-runtime
types ← custody → agent-account, delegation
key-custody → delegation · tool-policy → mcp-runtime
orchestration (core) ← orchestration-anthropic (adapter)
coordination ⟂ orchestration — composed only by the runtime
edge, brokers, workload identity: leaf bindings, depend inward
Ring 0 is packages and contracts. Products live in their own repositories and import the packages: the Home and its estate in ap-home, the single-chain shared services (naming, the public graph, registries) in ap-town, the cross-chain public ground in ap-federation, and your application in yours. Integrations with other people's protocols (ERC-8004, ANS, HCS, DNS-AID, OASF) live outside too, importing inward, never the reverse.
That is what lets you take one offering without the rest, and what keeps a vertical's vocabulary out of the primitives: the packages are generic trust building blocks; branding, verticals and deployment specifics are the application's job.
Package map and quickstart