OpenMHS Optional Profiles
On this page 3 sections
OpenMHS is an independent open-source project, not affiliated with or endorsed by Anthropic, and not a reimplementation or compatible dialect of Anthropic's MHS research preview (appendix D).
| Field | Value |
|---|---|
| Document | profiles.md (normative index) |
| Status | OpenMHS 0.9 development draft |
| Editor | The OpenMHS Authors |
| Layer | index of the optional profiles; the rules live in the chapters it points to |
| Precedence | below core.md and driver-profile.md (README §1) |
core.md is what every endpoint and driver must satisfy. An optional profile adds behaviour the SDK implements but that a driver author does not need to know about: a driver never declares a profile, and an endpoint, host or registry claims one by implementing its chapter. This page lists the profiles, the chapters that define them, the requirement areas they own and where the reference implementation lives. Do not confuse them with the conformance profiles MHS-Sim, MHS-Device, MHS-Bridge, MHS-Host and MHS-Registry of 01, which name what a conformance report is about. The key words of RFC 2119 and RFC 8174 apply in the chapters, not in this index.
1. The profiles
| Profile | What it adds | Defined in | Requirement areas | Reference implementation |
|---|---|---|---|---|
| Sessions and Permits | mhs.session.*, grants and their limits, principals, permits and approvals, least privilege | 02 §5, 04 §6-§7 | SESS, SAFE-030..SAFE-037 | mhs.server (sessions, permits), mhs.client |
| Evidence | the hash-chained evidence log, export and offline verification, retention, signing | 02 §14, 04 §8 | EVID | mhs.evidence, mhs.canonical, mhs.run (ledger check) |
| Sim, Fidelity and Replay | the dual-world rule, the fidelity contract, determinism, snapshot and restore, recordings and replay, hybrid authority, simulated and physical identity | 05 | MODE, FID | mhs.bridge.gymnasium, mhs.bridge.mujoco, mhs.bridge.replay, mhs.reference |
| Events | subscriptions, mhs.event notifications, sequencing, gaps, backpressure, SSE and stdio delivery | 02 §8 and §12, 08 §3.2 | EVT | mhs.server (SubscriptionHub) |
| Host | what an agent harness does with an endpoint: discovery, tool surface, sessions, approvals, evidence ledger, prohibitions | 09 | HOST | mhs.mcp, mhs.run; the OpenAI4S reference host in integration/openai4s is an informative annex |
| Registry | registry records, federation, trust, search, privacy, task cards and triage | 07 | REG, PRIV | mhs.registry, MHS/registry |
| Governance | the RFC process, versioning, deprecation, disclosure, licensing, editorial rules | 10 | GOV | none (process) |
Composition is reserved. mhs.composition.run, cap.internal.composition_run.v1 and the COMP requirements (02 §15.1) describe a deterministic multi-step document executed by an endpoint. No 0.9 endpoint implements it: the reference endpoint answers MHS.PROTOCOL.METHOD_NOT_FOUND. The name and the requirements stay reserved so that a later profile can fill them without renumbering. Multi-step procedures in 0.9 are code files (core.md §10.3), which run on the client and cannot do more than the same calls made one by one.
2. Which layer is each chapter
README §1 orders the chapters below the Core and the Driver Profile. Each carries a Layer row in its header table; sections that belong to a different layer say so.
| Chapter | Layer |
|---|---|
| 01 conformance | core (levels, profiles, suite, reports) |
| 02 wire protocol | core; §5 Sessions and Permits; §8 and §12 Events; §14 Evidence; §15.1 Composition (reserved) |
| 03 capability registry | core |
| 04 safety | core (§1-§5, §9-§10); §6-§7 Sessions and Permits; §8 Evidence |
| 05 fidelity | optional profile: Sim, Fidelity and Replay (MODE-001 to MODE-004 apply to every device) |
| 06 adapters | Driver Profile companion: adapters, bridges and bindings |
| 07 registry | optional profile: Registry |
| 08 transports | core (stdio, HTTP, MCP, CLI, code API); the WebSocket binding and the SSE delivery rules are Events |
| 09 host | optional profile: Host |
| 10 governance | optional profile: Governance |
3. Sim, Fidelity and Replay in one page
These rules are kept here because the Core points at them (core.md §8):
- The twin rule. A simulator is a different device from the hardware it models: it has its own
device_idandinstance_id,modesimulatedorhybrid, andmodels: [physical device_id]when it models a specific device; a physical manifest never declaresmodels; trust, conformance and approvals are never transferred between them; and a call never silently crosses the sim and hardware boundary (FID-045 to FID-049). - The fidelity contract. A simulated or hybrid device carries
fidelity:engine,fidelity_level(F0toF3),determinism(exact,seeded,statistical,none, withseed_control),timestep_ms,realtime_factor,reset,snapshot_restore, honestgaps,authorityfor a hybrid device, andvalidationfor F3 (FID-001, FID-005, FID-006, FID-040 to FID-044). A fake backend isF0with gaps. fidelity.clock. An optional member that says who advances simulated time:lockstep(only commands advance it; the Gymnasium and MuJoCo family drivers declare it),free_running(the simulator runs on its own clock) orexternal(an outside scheduler). A host does not assume wall-clock pacing fromrealtime_factor(FID-013, FID-014).- Replay. A replay device is read-only and serves recorded state; it advertises the
replay.seekfeature (MODE-005, FID-022 to FID-029).