The record protocol

The records Sworn writes
are an open protocol.

Baton defines what a legitimate handoff between agents looks like: who may decide what, what evidence each decision requires, and how every step is recorded. It is a public specification, independent of any engine or model vendor. Sworn is the engine that implements it.

Receipts, not trust

Every authority-bearing step leaves a receipt on a Git ref.

Approved plans bind exact bytes, revisions, and target commits. Slice contracts pin canonical digests. Captain decisions, verifier verdicts, and merges append receipts that any conformant reader can replay and check. No conversation memory carries authority; the records do.

The specification, conformance corpus, and check prompts are public. A second engine can implement Baton without asking anyone.