MHS-PROFInformative

OpenMHS Optional Profiles

OpenMHS 0.9 development draft4 min read920 words
On this page 3 sections
  1. 1. The profiles
  2. 2. Which layer is each chapter
  3. 3. Sim, Fidelity and Replay in one page

OpenMHS is an independent open-source project, not affiliated with or endorsed by Anthropic, and not a reimplementation or compatible dialect of Anthropic's MHS research preview (appendix D).

FieldValue
Documentprofiles.md (normative index)
StatusOpenMHS 0.9 development draft
EditorThe OpenMHS Authors
Layerindex of the optional profiles; the rules live in the chapters it points to
Precedencebelow core.md and driver-profile.md (README §1)

core.md is what every endpoint and driver must satisfy. An optional profile adds behaviour the SDK implements but that a driver author does not need to know about: a driver never declares a profile, and an endpoint, host or registry claims one by implementing its chapter. This page lists the profiles, the chapters that define them, the requirement areas they own and where the reference implementation lives. Do not confuse them with the conformance profiles MHS-Sim, MHS-Device, MHS-Bridge, MHS-Host and MHS-Registry of 01, which name what a conformance report is about. The key words of RFC 2119 and RFC 8174 apply in the chapters, not in this index.

1. The profiles

ProfileWhat it addsDefined inRequirement areasReference implementation
Sessions and Permitsmhs.session.*, grants and their limits, principals, permits and approvals, least privilege02 §5, 04 §6-§7SESS, SAFE-030..SAFE-037mhs.server (sessions, permits), mhs.client
Evidencethe hash-chained evidence log, export and offline verification, retention, signing02 §14, 04 §8EVIDmhs.evidence, mhs.canonical, mhs.run (ledger check)
Sim, Fidelity and Replaythe dual-world rule, the fidelity contract, determinism, snapshot and restore, recordings and replay, hybrid authority, simulated and physical identity05MODE, FIDmhs.bridge.gymnasium, mhs.bridge.mujoco, mhs.bridge.replay, mhs.reference
Eventssubscriptions, mhs.event notifications, sequencing, gaps, backpressure, SSE and stdio delivery02 §8 and §12, 08 §3.2EVTmhs.server (SubscriptionHub)
Hostwhat an agent harness does with an endpoint: discovery, tool surface, sessions, approvals, evidence ledger, prohibitions09HOSTmhs.mcp, mhs.run; the OpenAI4S reference host in integration/openai4s is an informative annex
Registryregistry records, federation, trust, search, privacy, task cards and triage07REG, PRIVmhs.registry, MHS/registry
Governancethe RFC process, versioning, deprecation, disclosure, licensing, editorial rules10GOVnone (process)

Composition is reserved. mhs.composition.run, cap.internal.composition_run.v1 and the COMP requirements (02 §15.1) describe a deterministic multi-step document executed by an endpoint. No 0.9 endpoint implements it: the reference endpoint answers MHS.PROTOCOL.METHOD_NOT_FOUND. The name and the requirements stay reserved so that a later profile can fill them without renumbering. Multi-step procedures in 0.9 are code files (core.md §10.3), which run on the client and cannot do more than the same calls made one by one.

2. Which layer is each chapter

README §1 orders the chapters below the Core and the Driver Profile. Each carries a Layer row in its header table; sections that belong to a different layer say so.

ChapterLayer
01 conformancecore (levels, profiles, suite, reports)
02 wire protocolcore; §5 Sessions and Permits; §8 and §12 Events; §14 Evidence; §15.1 Composition (reserved)
03 capability registrycore
04 safetycore (§1-§5, §9-§10); §6-§7 Sessions and Permits; §8 Evidence
05 fidelityoptional profile: Sim, Fidelity and Replay (MODE-001 to MODE-004 apply to every device)
06 adaptersDriver Profile companion: adapters, bridges and bindings
07 registryoptional profile: Registry
08 transportscore (stdio, HTTP, MCP, CLI, code API); the WebSocket binding and the SSE delivery rules are Events
09 hostoptional profile: Host
10 governanceoptional profile: Governance

3. Sim, Fidelity and Replay in one page

These rules are kept here because the Core points at them (core.md §8):

  • The twin rule. A simulator is a different device from the hardware it models: it has its own device_id and instance_id, mode simulated or hybrid, and models: [physical device_id] when it models a specific device; a physical manifest never declares models; trust, conformance and approvals are never transferred between them; and a call never silently crosses the sim and hardware boundary (FID-045 to FID-049).
  • The fidelity contract. A simulated or hybrid device carries fidelity: engine, fidelity_level (F0 to F3), determinism (exact, seeded, statistical, none, with seed_control), timestep_ms, realtime_factor, reset, snapshot_restore, honest gaps, authority for a hybrid device, and validation for F3 (FID-001, FID-005, FID-006, FID-040 to FID-044). A fake backend is F0 with gaps.
  • fidelity.clock. An optional member that says who advances simulated time: lockstep (only commands advance it; the Gymnasium and MuJoCo family drivers declare it), free_running (the simulator runs on its own clock) or external (an outside scheduler). A host does not assume wall-clock pacing from realtime_factor (FID-013, FID-014).
  • Replay. A replay device is read-only and serves recorded state; it advertises the replay.seek feature (MODE-005, FID-022 to FID-029).