Glossary

Artifact : Immutable compiled backend material bound to a workflow revision and frozen again when a run starts.

Attempt : A recorded executor effort for one effect, such as an EVM read, notification delivery, Safe preparation, or EOA call.

Capability envelope : The enforceable allowlist of effect kinds, networks, accounts, targets, HTTP hosts, and notification access declared by a revision.

Controlled account / execution account : An organisation Safe or EOA that a transaction effect may execute from.

Effect : A stable-keyed durable request from workflow code for an external observation, wait, human response, notification, or transaction.

EOA : Externally owned account controlled by one private key or wallet.

Idempotency key : A caller-supplied key that makes an exact agent mutation replay return its original result instead of duplicating work.

MCP : Model Context Protocol, used by agent hosts to discover and call txcast v2 tools.

Observation : One immutable result from an EVM or HTTP snapshot, including provenance and digest evidence.

Program manifest : Backend-neutral identity of normalized source, bundle, schemas, capabilities, compiler versions, and call sites.

Revision / version : An immutable, valid, compiled workflow program in one linear history. A changed save appends and activates the next version.

Run : An execution pinned to one revision with frozen input, references, artifacts, capabilities, backend authority, and limits.

Safe Transaction Service (STS) : Safe’s coordination/indexing service for proposals and signatures. The Safe contract and chain remain authoritative.

Source refresh : A manual new observation for a completed EVM/HTTP snapshot; it updates dashboard history without rewriting consumed program state.

Sourcify : A public source of verified contract metadata and ABIs used only when explicitly importing a contract.

Workflow : An organisation-scoped, member-owned TypeScript program with one current revision and immutable linear history.