Context
0100 and 0021 set the AI engine and write safety. The owner’s answers P14, AI1, AI4 and AI5 (mem L399, L781, L784, L785, 2026-10-20) add provider drivers, the data rules for threads and memory, and guardrails. P14 changes 0100 decision 15, which said AgentCore is not a driver.Decision
- Hosting driver (P14, AI6). A managed agent runtime, such as AgentCore, is a deferred hosting driver behind the
Promptableport. Tools, approval, evidence and audit stay in the action pipeline, whatever the hosting driver. - Model providers (AI1). Drivers for Bedrock (the SaaS default), Anthropic, OpenAI and Google, and local vLLM or Ollama for on-prem and air-gapped installs. A routing table per task type can be overridden per tenant, and tenants can bring their own keys through connections (0107). This closes the provider half of gap C5.
- Threads and memory (AI4). Threads are encrypted with the tenant key and kept 90 days by default. They can be exported and erased. Scoped long-term memory is explicit, can be viewed, and can be deleted. Customer data is never used for training.
- Guardrails and evals (AI5). Guardrails are layered. Each agent and each built-in prompt has an eval suite. Token budgets are enforced with meters.
- Decision 3 of 0021 and decision 9 of 0100 are restated under these rules, not changed in meaning.
- Open: the sources give no revival trigger for the deferred AgentCore driver. The owner must name one.
Consequences
- Swapping a provider is a driver change and a routing change, not a rewrite of agents.
- Thread retention is a default, so a tenant that needs longer or shorter has to change a setting within bounds.
Enforcement
planned — the eval suites run in CI for each agent and built-in prompt, and the meter check blocks a run over its token budget.Alternatives
- AgentCore as the runtime: deferred; it is a hosting driver, not the engine.
- AgentCore as “not a driver” (0100 decision 15): superseded by P14 (C-29).
Supersedes and sources
Supersedes: none. Amends: 0100 decisions 2, 9 and 15; 0021 decision 3. Sources: owner answers P14 and AI6 (stackra-decisions-2026-10-19.md L399, L786), AI1 (L781), AI4 (L784), AI5 (L785), all 2026-10-20; gap C5 (provider half).
Open question: the revival trigger for the AgentCore hosting driver.