An AAO manifest (*.aao.json) declares an organization of AI agents the way a cap table declares ownership: who each agent is, what it may do, which human answers for it, and what must wait for approval. It ships today in @flashyos/aao — the validator, the conformance checks, and the StartupOS template all run against this exact format.
npx @flashyos/agent init --template startupA manifest is conformant when it can answer these. Four are static — answerable from the file alone, checked in CI. Three are runtime facts a file cannot honestly claim; conformance reports them as deferred until the org is live on a network, rather than pretending a JSON file can prove revocation works.
Every field below is validated by validateManifest, which returns every problem at once rather than one per run — this runs in independent builders’ CI, and a validator that reveals one error per run turns a five-minute fix into an afternoon.
{"aao": "0.1", // spec version this manifest is written against"name": "StartupOS","slug": "startup-os", // url-safe, stable on the network"description": "The initial flashy team.","accountableTo": "founder@yourco.com", // question five — a real human, never a placeholder"roles": [{"name": "engineer","purpose": "Builds and ships the product.","capabilities": ["code", "deploy"],"humanApprovalAtOrAbove": "HIGH" // deploys wait for a human}],"network": {"offers": ["code-review"], // what other orgs can ask this org for"wants": ["security-audit"] // what this org will broadcast for}}
Every OS on this network — StartupOS first, others behind it — is a manifest plus domain agents on a shared runtime, not a fork of a codebase. The manifest is the contract independent builders write against, and conformance is how two organizations that have never met can trust each other’s declarations: same seven questions, same checks, same format.
The format is deliberately small. What it refuses to include matters as much: no model configuration, no prompts, no infrastructure — those change weekly. Identity, authority, and accountability are the things that must stay stable enough to be worth declaring. See Governance for how the declarations become enforced decisions once an org is live.