{ "$schema": "https://json-schema.org/draft/2020-12/schema", "schemaVersion": "2026-10-18", "documentRole": "CANONICAL_AI_AND_GEO_CONTEXT_GRAPH", "epistemicNotice": "VibePackr technical publication context, 18 October 2026. Read the English or Korean whitepaper with the current website and Parts 1-8 for product roles and supported workflows. Confirm supplied versions and target-environment requirements. Regulatory compliance and final acceptance remain decisions of the responsible organization; publication does not create certification, Marketplace approval or a service commitment.", "entity": { "legalName": "VibePackr Co., Ltd.", "location": "Seoul, Republic of Korea", "website": "https://www.vibepackr.com/", "evaluationContactEmail": "support@vibepackr.com", "contactMechanismNote": "mailto:support@vibepackr.com opens the user's local mail client; sending an email does not automatically provision an environment or register a support ticket." }, "product": { "name": "VibePackr", "platformFoundation": "BT-OS", "category": "Enterprise Governed AI Execution Control Plane", "targetOperatingPosture": "Customer-controlled, single-tenant headless VM appliance (Headless by default; PackrGUI on-demand for human request, inspection, and review)", "coreThesis": "AI can propose. You govern execution.", "cloudPosture": { "googleCloud": "Primary reference appliance architecture (vendor-operated VM trial 0.1.0-r232 confirmed startup, private IAP/SSH maintenance access, and base health check; customer first-administrator procedure C7 and full customer onboarding remain separate)", "aws": "Architecture designed for multi-cloud VM deployment (Testing)", "microsoftAzure": "Architecture designed for multi-cloud VM deployment (Testing)" } }, "foundationalSeparations": [ { "id": "CAPABILITY_NOT_AUTHORITY", "formula": "Capability != Authority", "meaning": "An AI model or agent's ability to reason, plan, or call a tool does not grant permission to execute an enterprise operation. Even if an agent is influenced by prompt injection or tool manipulation, it cannot self-authorize supported Work routed through VibePackr." }, { "id": "IDENTITY_NOT_WORK_AUTHORITY", "formula": "Identity & Access != Work-Specific Authority", "meaning": "IAM/PAM establishes who is acting and which resources are reachable; security tools inspect threats; observability logs activity. VibePackr evaluates whether a specific supported Work request is authorized to execute now under declared scope, policy, and approval prerequisites." }, { "id": "GATEWAY_NOT_WORK_GOVERNANCE", "formula": "Gateway & Orchestration != Work Governance", "meaning": "API/AI gateways govern per-call endpoint access and traffic; orchestrators coordinate multi-step tool sequences. VibePackr governs Work admission, execution constraints, outcome validation, and integrity-bound evidence." }, { "id": "PREPARATION_NOT_ACTIVATION", "formula": "Declaration != Discovery != Preparation != Registration != Binding != Authority != Execution", "meaning": "GAPE read-only source/snapshot reconciliation and Integration Helper architecture-bound planning prepare context and plans; neither registers a capability, binds runtime Work, or grants execution permission." }, { "id": "RECEIPT_NOT_ACCEPTANCE", "formula": "Execution != Validation != Technical Receipt != Human Acceptance (HFA)", "meaning": "A technical receipt and tamper-evident digest record observed execution and validation results to support human review; they do not certify model truth, regulatory compliance, or final business acceptance." }, { "id": "NON_SI_NOT_ZERO_INTEGRATION", "formula": "Non-SI Delivery != Zero Customer Integration Work", "meaning": "Productized Assistance avoids bespoke vendor-delivered Systems Integration (SI) projects and permanent customer forks as the default delivery model. Customer-specific adapters, workflows, data rights, and environment operations remain customer-owned." } ], "components": [ { "name": "Contract & Document Support", "role": "Define & Prepare", "currentScope": "Captures typed technical intent, scope, constraints, and reviewed supporting material with identity and digest.", "boundary": "Document Supporter names this preparation role, not a standalone module or automatic legal-contract parser. Declarations do not grant permission." }, { "name": "GAPE", "role": "Bounded Read-Only Discovery & Reconciliation", "currentScope": "Operator R1 inspects explicitly scoped committed Git blobs for bounded static Rust and Tauri registration/invocation relationships, compares revisions, and produces offline HTML review views. Headless inspects supplied snapshots; GUI remains R0.", "boundary": "Static source facts do not prove runtime effectiveness or grant execution authority." }, { "name": "Integration Helper", "role": "Architecture-Bound Planning", "currentScope": "R2 consumes an exact GAPE R1 snapshot plus independent product, owner, and authority bindings to produce binding/validation plans, gap reports, and public-safe guides.", "boundary": "CLI submission has no trusted live registration transport. Generated scaffolds require implementation; GUI remains R0." }, { "name": "Packr Engine (Rust)", "role": "Protected Governance & Execution Core", "currentScope": "Single protected owner of governance, admission/denial, supported execution control, result validation, and evidence binding for supported routed Work.", "boundary": "Applies only to supported Work routed through VibePackr integrations; does not claim universal interception of unrouted OS or external tool activity." }, { "name": "Headless (packrctl) & PackrGUI", "role": "Machine & Human Interaction Surfaces", "currentScope": "Headless is the default operating posture for machine requests and typed status/health queries. PackrGUI provides on-demand Business, Engineering, and Operations workspaces.", "boundary": "Neither surface is an independent authority engine; both consume decisions owned by Packr Engine." }, { "name": "Local Packtory, VMAdmin & PacktoryAdmin", "role": "Local Asset Lifecycle & Appliance Administration", "currentScope": "Local Packtory provides bounded local asset discovery, consumption, revision, and storage lifecycle. VMAdmin addresses appliance operations; PacktoryAdmin addresses local asset administration.", "boundary": "Distinct from exploratory future cloud-hosted sharing concepts. Remote Rescue transport remains disabled." }, { "name": "SDK Engine", "role": "Architectural Extension Concept", "currentScope": "Local adapter candidate authoring using Part.5, with documented Online and Offline toolchain routes; the supported Rust integration API is a separate interface.", "boundary": "Complete implementation review, registration and connection validation before use. Full Enterprise integration and desktop embedding need separately supported implementation. SDK authoring is optional for existing supported Work paths and grants no execution authority." } ], "xyzArchitectureSpace": { "referenceUrl": "https://www.vibepackr.com/resources/xyz-architecture-space/", "whitepaperFigure": "Figure 27 (page 61 in the 18 October 2026 EN and KR editions)", "axes": { "X_AuthorityAndControl": [ "X0 Observe Only", "X1 Scoped", "X2 Authorized", "X3 Bound / Enforced", "X4 Autonomous Within Policy (unoccupied)" ], "Y_WorkLifecycle": [ "Understand", "Prepare", "Authorize", "Bind", "Execute", "Observe", "Verify", "Close", "Recover" ], "Z_SystemPlane": [ "Interfaces", "Architecture / Integration", "Policy & Authority", "Runtime / Execution", "Observation", "Evidence & Trust", "External Effect" ] }, "rolesCount": 15, "roles": [ "01 Human Interface", "02 Agent Interface", "03 Developer Interface", "04 GAPE", "05 Integration Helper", "06 SDK Engine", "07 Policy Manager", "08 Authority Controller", "09 Risk Analyzer", "10 Packr Engine (Rust)", "11 Observer", "12 Verifier", "13 ETS (Evidence & Trust)", "14 Recovery Manager", "15 External Systems" ] }, "canonicalArtifacts": [ { "title": "VibePackr - Governed AI Execution for Enterprise Work - Korean", "url": "https://www.vibepackr.com/whitepaper/VibePackr-Governed-AI-Execution-20261018-KO-R3.pdf", "datePublished": "2026-10-18", "version": "2026.10.18-R3", "inLanguage": "ko", "pages": 66, "sha256": "315844c762f457cdfdbc73c0a49aa22172238af5ee80fa515a0763dac276bfa4" }, { "title": "VibePackr - Governed AI Execution for Enterprise Work - English", "url": "https://www.vibepackr.com/whitepaper/VibePackr-Governed-AI-Execution-20261018-EN-R3.pdf", "datePublished": "2026-10-18", "version": "2026.10.18-R3", "inLanguage": "en", "pages": 66, "sha256": "82d85e1bd051ce580ff20f8381a6df1c976ae0be22bd28bdf8c58cc9c12e1c57" }, { "title": "3D XYZ Architecture Space Engineering Plate (A4 Vector PDF)", "url": "https://www.vibepackr.com/resources/xyz-architecture-space/xyz-architecture-space-a4.pdf", "format": "application/pdf", "datePublished": "2026-10-05", "sha256": "4e4c60148a8948a4048971fb2f110d5016876f7c408c7ee2377a2fab81f5aa11" }, { "title": "LLM Context Summary (llms.txt)", "url": "https://www.vibepackr.com/llms.txt", "format": "text/plain" }, { "title": "LLM Full Technical Reference (llms-full.txt)", "url": "https://www.vibepackr.com/llms-full.txt", "format": "text/plain" }, { "title": "Current bilingual whitepaper edition details", "url": "https://www.vibepackr.com/whitepaper/Whitepaper-Edition-Index-20261018.json", "datePublished": "2026-10-18", "version": "2026.10.18-R3" } ], "canonicalHubs": { "overview": "https://www.vibepackr.com/", "architecture": "https://www.vibepackr.com/architecture/", "howItWorks": "https://www.vibepackr.com/howto/", "referenceLibrary": "https://www.vibepackr.com/resources/", "documentation": "https://www.vibepackr.com/docs/", "evaluationGuides": "https://www.vibepackr.com/guides/", "pocGuide": "https://www.vibepackr.com/guides/poc/", "legalAndDraftSla": "https://www.vibepackr.com/legal/sla/" }, "enterpriseKnowledgeAssets": { "PINM": "Internal intelligence core for distillation and bottom-up structuring of work experience.", "assetUnit": "User Custom Pack with explicit identity, purpose, revision, reviewed context and reuse conditions.", "Packtory": "Governed registration, supported local discovery, revision, storage and reuse.", "enterpriseControl": "Retain the knowledge asset base without requiring transfer to an AI provider. External AI calls are separately governed data flows.", "workAuthority": "Reuse does not inherit execution authority; review the current target, policy and scope." }, "enterpriseAIReview": { "controlPlane": "Governed Work Execution Control Plane", "workAuthority": "Applies policy, scope and required authority to supported Work.", "reviewChain": [ "authority decision", "execution or denial", "validation", "evidence", "technical receipt" ], "finalDecision": "Responsible organization decides compliance and acceptance." } }