# AgentTeam-authored Agent prompt injection inventory

This is the reviewable source-of-truth inventory for semantic text that AgentTeam
places in an Agent runtime input. Every row has a corresponding entry in the
`promptcompiler` registry, or is a user/workspace payload explicitly rendered
through a registered wrapper block. Runtime drivers only serialize the compiled
carrier; they do not own wording.

| Existing path | Registered block / carrier | Event and slot | Template owner | Dynamic data |
| --- | --- | --- | --- | --- |
| `internal/promptcompiler/compile.go:compileThreadContract` platform identity | `platform.identity` | thread start/resume, base | `platform/identity.md` | `IdentityTemplateData` agent name/display name; platform description is template-owned |
| `internal/promptcompiler/compile.go:compileThreadContract` initial role | `agent_config.initial_role` | thread start/resume, base | `agent/initial_role.md` | role description |
| `compileThreadContract` AgentTeam identity/cooperation/startup | `platform.who_you_are`, `platform.cooperation`, `platform.agentteam.startup` | contract, base | corresponding `platform/*.md` | `EmptyTemplateData` and `PlatformLoopTemplateData` (runtime tool identifiers only) |
| `compileThreadContract` AgentTeam skill core/reference | `platform.agentteam.core`, `platform.agentteam.reference` | contract, base/reference | `wire/core.md`, `wire/reference.md` | `AgentTeamCoreTemplateData` / `AgentTeamReferenceTemplateData` tool facts; no Supplemental/pre-rendered fallback |
| `compileThreadContract` AgentTeam Memory capability | `platform.agentteam.memory_search` | contract, base | `platform/agentteam/memory_search.md` | `MemorySearchGuidanceTemplateData` runtime tool identifier; wording and fallback policy are template-owned |
| `compileThreadContract` external skill contributions | `platform.agentteam.external_skill_core`, `platform.agentteam.external_skill_reference` | contract, base/reference | `wire/external_skill_core.md`, `wire/external_skill_reference.md` | `ExternalSkillPayloadTemplateData.SkillText` explicitly labeled external-authored payload |
| `compileThreadContract` task/review/exec/extension guidance | `platform.agentteam.task_boards`, `platform.agentteam.review_context`, `platform.agentteam.exec`, `platform.agentteam.extension` | contract, base | platform templates plus `events/exec_guidance.md` / `events/extension_guidance.md` | `ExecGuidanceTemplateData` built-in action/domain facts; `ExtensionCatalogGuidanceTemplateData` verified catalog action facts |
| `compileThreadContract` workspace/memory rules | `platform.workspace_memory` | contract, base | `platform/workspace_memory.md` | `WorkspaceMemoryTemplateData` with compiler-selected local/remote fact and `memory:remote` tag |
| `compileThreadContract` Cloud Memory identity | `platform.agent_identity` | contract, base | `platform/agent_identity.md` | identity rules |
| `compileThreadContract` workspace `MEMORY.md` / `AGENTS.md` | `workspace.identity`, `agent_config.agents_md` | contract, base/developer | `events/workspace_identity.md`, `agent/agents_doc.md` | `WorkspaceDocumentTemplateData` (bounded document content) |
| workspace document budget degradation | `notice.workspace.identity_oversize`, `notice.agent_config.agents_md_oversize` | contract, base | `notices/workspace_doc_oversize_notice.md` | byte/character/token constraints |
| pending identity rename notice | `notice.identity` | turn, notice | `notices/identity_notice.md` | old/current identity names |
| fresh explicit message | `event.current_message` | fresh turn, turn | `events/current_message.md` | typed message, reply/thread/task/team context |
| `compileTurnContext` wake message or unread summary | `event.wake_context`, `event.unread_summary`, or `event.resume_context` | wake turn, turn | `events/wake_message.md`, `events/unread_summary.md`, `events/resume_idle.md` | `WakeContextTemplateData` / `ResumeContextTemplateData` carry typed `ThreadContextTemplateData`; unread facts are structured |
| resume idle/context reminder | `event.resume_context` | resume turn, turn | `events/resume_idle.md` | unread/message, memory reminder, and typed `ThreadContextTemplateData` |
| reply-thread full/compact guidance | `event.thread_context_guidance`, `event.thread_context_compact_guidance` plus wake/resume/delivery templates | wake/resume/delivery, turn/deliveryText | `events/thread_context.md`, `events/thread_context_compact.md`, `events/wake_message.md`, `events/resume_idle.md`, `events/delivery_message.md` | `threadcontext.ClassifyReplyThread` facts: target and optional runtime read-history tool; package authors no prose |
| deferred busy-turn replay | `event.deferred_continuation` | deferred turn, turn | `events/deferred_continuation.md` | message, remaining queue, authority, workflow context |
| normal active-task channel/DM/thread routing | `event.active_task_normal_routing` | wake/turn, turn | `events/active_task_normal_routing.md` | exact target and runtime tool names |
| agent-authored wake guidance | `event.agent_authored_wake_guidance` | wake/turn, turn | `events/agent_authored_wake_guidance.md` | typed actor kind/message type |
| OpenCode task-subtask continuation | `runtime.opencode_subtask_summary` | runtime continuation, turn | `events/opencode_subtask_summary.md` | runtime lifecycle event |
| Kimi restricted-agent system prompt | `runtime.kimi_restricted_system` | Kimi launch policy, named runtime surface | `events/kimi_restricted_system.md` | native-tools capability fact |
| memory resume reminder | `runtime.memory_resume_reminder` | wake/resume/deferred typed data | `events/memory_resume_reminder.md` | no caller-authored prose; empty typed fixture |
| participant visible-reply contract | `platform.agentteam.visible_reply_contract` | turn, turn | `events/visible_reply_contract.md` | runtime delivery tool/capability |
| resolved attachment manifest | `event.attachment_manifest` | launch/turn, turn | `events/attachment_manifest.md` | resolved path/URI/MIME/size |
| attachment preparation failure | `event.attachment_preparation_failure` | launch/turn, turn | `events/attachment_preparation_failure.md` | bounded error and source metadata |
| `compileDeliveryEnvelope` routed delivery envelope | `event.delivery_message` plus registered detail IDs | delivery, deliveryText | `events/delivery_message.md`, `event.message_header`, `event.message_details`, `event.attachment_details`, `event.thread_root`, `event.task_dispatch`, `event.workflow_edit`, `event.reaction_details` | `DeliveryMessageTemplateData` and normalized typed message/task/team/workflow/attachment facts, including compact `ThreadContextTemplateData` |
| `replyContextAttributionBlocks` | `renderer.reply_target_context` via `ConstructAttribution` | renderer attribution, turn | `events/reply_target_context.md` | `ReplyTargetTemplateData` for text and closed attribution facts |
| final visible-reply safety check | `agentteam.final_visible_reply_check` | final check, turn | `events/final_visible_reply_check.md` | grouped exact targets and send tool |
| same-session context compaction continuation | `agentteam.context_compaction_continuation` | recovery turn, turn | `events/context_compaction_continuation.md` | none (runtime event selects it) |
| output-token truncation continuation | `agentteam.output_truncation_continuation` | recovery turn, turn | `events/output_truncation_continuation.md` | none (runtime event selects it) |
| context-window recovery restart detail | `event.context_recovery_restart` | recovery lifecycle detail | `events/context_recovery_restart.md` | runtime boundary fact |
| fresh/resume/deferred checkpoint guidance | `event.recovery_checkpoint` | lifecycle checkpoint | `events/recovery_checkpoint.md` | checkpoint kind |
| runtime transient retry delivery | typed `RuntimeInput` carrying the original compiled delivery | retry boundary | delivery compiler output | original message ID/input and recovery state |
| Codex / Claude / OpenCode / Kimi / Pi startup | `CompiledPrompt` carrier plus named surfaces | runtime-specific startup | compiler renderers | carrier shape; Pi calls sealed `CompiledPrompt.InitialPrompt(resumed)`; no semantic additions |
| runtime stdin/protocol delivery | `CompiledPrompt` delivery surface plus typed attachment parts | delivery boundary | compiler renderer and registered detail templates | runtime transport/session IDs |
| Workflow Builder edit request and diagnostics | `event.workflow_edit` | delivery/turn, turn | `events/workflow_edit.md` | typed plan/revision/target/diagnostic facts |
| Task dispatch/discussion attributes and checklist | `event.task_dispatch`, `event.task_reply`, `event.task_scope_reply`, `event.task_attributes` | message/wake/delivery, turn | `events/task_dispatch.md` and task reply templates | typed task metadata, discussion actor/body, checklist items |
| `text_message.go` and delivery renderer detail calls | `event.message_header`, `event.message_details`, `event.attachment_details`, `event.thread_root`, `event.reaction_details`, `event.workflow_team_context` | message/delivery, turn/delivery | corresponding `events/*.md` | concrete message/detail structs, `WorkflowTeamPromptData`, and normalized facts |
| `CompileAgentTeamSkillPlan` / `compileThreadContract` skill materialization | `platform.agentteam.core`, `platform.agentteam.reference` | startup/contract | `wire/core.md`, `wire/reference.md` | `AgentTeamCoreTemplateData` / `AgentTeamReferenceTemplateData`; ordered slots, precedence, and budget decided by compiler |

## Executable registry call-site matrix

| Production call site | Registry ID | Concrete input | Template |
| --- | --- | --- | --- |
| `compileThreadContract` | `platform.identity` | `IdentityTemplateData` | `platform/identity.md` |
| `compileThreadContract` | `agent_config.initial_role` | `InitialRoleTemplateData` | `agent/initial_role.md` |
| `compileThreadContract` | `platform.who_you_are`, `platform.cooperation`, `platform.agent_identity` | `EmptyTemplateData` | corresponding platform templates |
| `compileThreadContract` | `platform.agentteam.startup`, `platform.agentteam.review_context` | `PlatformLoopTemplateData` | corresponding platform agentteam templates |
| `compileThreadContract`, `CompileAgentTeamSkillPlan` | `platform.agentteam.core` | `AgentTeamCoreTemplateData` | `wire/core.md` |
| `compileThreadContract`, `CompileAgentTeamSkillPlan` | `platform.agentteam.memory_search` | `MemorySearchGuidanceTemplateData` | `platform/agentteam/memory_search.md` |
| `compileThreadContract` external skill boundary | `platform.agentteam.external_skill_core` | `ExternalSkillPayloadTemplateData` | `wire/external_skill_core.md` |
| `compileThreadContract`, `referenceBlocks`, `CompileAgentTeamSkillPlan` | `platform.agentteam.reference` | `AgentTeamReferenceTemplateData` | `wire/reference.md` |
| `compileThreadContract` external skill boundary | `platform.agentteam.external_skill_reference` | `ExternalSkillPayloadTemplateData` | `wire/external_skill_reference.md` |
| `compileThreadContract` | `platform.agentteam.task_boards` | `EmptyTemplateData` | `platform/agentteam/task_boards.md` |
| `compileThreadContract` | `platform.agentteam.exec` | `ExecGuidanceTemplateData` (`Domains`, typed common action facts with catalog `ExampleJSON` payload) | `events/exec_guidance.md` |
| `compileThreadContract` | `platform.agentteam.extension` | `ExtensionCatalogGuidanceTemplateData` (verified extension/action facts) | `events/extension_guidance.md` |
| `compileThreadContract` | `platform.workspace_memory` | `WorkspaceMemoryTemplateData` | `platform/workspace_memory.md` |
| `compileThreadContract` | `workspace.identity` | `WorkspaceIdentityTemplateData` | `events/workspace_identity.md` |
| `compileThreadContract` | `agent_config.agents_md` | `WorkspaceDocumentTemplateData` | `agent/agents_doc.md` |
| `compileThreadContract` | `notice.workspace.identity_oversize`, `notice.agent_config.agents_md_oversize` | `WorkspaceDocOversizeTemplateData` | `notices/workspace_doc_oversize_notice.md` |
| `compileTurnContext` | `notice.identity` | `IdentityNoticeTemplateData` | `notices/identity_notice.md` |
| `compileTurnContext` | `event.current_message` | `CurrentMessageTemplateData` | `events/current_message.md` |
| `compileTurnContext` | `event.wake_context` | `WakeContextTemplateData` | `events/wake_message.md` |
| `compileTurnContext` | `event.resume_context` | `ResumeContextTemplateData` (nested `ThreadContextTemplateData`) | `events/resume_idle.md` |
| `compileTurnContext`, `RenderThreadContextGuidance` | `event.thread_context_guidance`, `event.thread_context_compact_guidance` | `ThreadContextTemplateData` | `events/thread_context.md`, `events/thread_context_compact.md` |
| `compileTurnContext` | `event.unread_summary` | `UnreadSummaryTemplateData` | `events/unread_summary.md` |
| `compileTurnContext` | `event.deferred_continuation` | `DeferredContinuationTemplateData` | `events/deferred_continuation.md` |
| `AgentTeamMemoryResumeReminder` | `runtime.memory_resume_reminder` | `EmptyTemplateData` | `events/memory_resume_reminder.md` |
| message/task render helpers | `event.message_header`, `event.message_details` | `MessageTemplateData`, `MessageDetailsTemplateData` | corresponding message templates |
| message/task render helpers | `event.attachment_details`, `event.thread_root`, `event.reaction_details` | corresponding concrete detail data | corresponding event templates |
| message/task render helpers | `event.active_task_routing`, `event.active_task_normal_routing` | `ActiveTaskTemplateData`, `ActiveTaskNormalRoutingTemplateData` | active-task templates |
| message/task render helpers | `event.workflow_context`, `event.workflow_edit`, `event.workflow_team_context` | workflow/team concrete data | corresponding workflow templates |
| message/task render helpers | `event.team_context` | `TeamPromptTemplateData` | `events/team_context.md` |
| message/task render helpers | `event.task_dispatch`, `event.task_scope_context`, `event.task_scope_reply`, `event.task_reply` | corresponding task concrete data | corresponding task templates |
| `RenderAttachmentResolution`, `compileTurnContext` | `event.attachment_manifest`, `event.attachment_preparation_failure` | `AttachmentTemplateData` | attachment templates |
| `AttachmentGuidanceBlockForMetrics`, attribution | `runtime_attachment_manifest`, `runtime_attachment_preparation_failure` | `AttachmentTemplateData` | attachment templates |
| delivery renderer | `event.delivery_message`, `event.delivery_header`, `event.delivery_reply`, `event.delivery_replay` | corresponding delivery concrete data; `DeliveryMessageTemplateData.ThreadContext` | corresponding delivery templates |
| delivery renderer | `event.reply_target_context` | `ReplyTargetTemplateData` | `events/reply_target_context.md` |
| renderer attribution | `renderer.reply_target_context` | closed `ConstructAttribution` token input | `events/reply_target_context.md` |
| generated lifecycle compiler | `agentteam.context_compaction_continuation`, `agentteam.output_truncation_continuation`, `runtime.opencode_subtask_summary`, `event.context_recovery_restart` | `RecoveryTemplateData` | corresponding recovery templates |
| generated lifecycle compiler | `event.recovery_checkpoint`, `event.runtime_retry` | `RecoveryCheckpointTemplateData`, `RuntimeRetryTemplateData` | corresponding recovery templates |
| generated lifecycle compiler | `agentteam.final_visible_reply_check` | `FinalVisibleReplyCheckTemplateData` | `events/final_visible_reply_check.md` |
| Kimi launch policy | `runtime.kimi_restricted_system` | `KimiRestrictedSystemTemplateData` | `events/kimi_restricted_system.md` |

## Cutover rules

* New AgentTeam-authored wording must be added to a markdown template and a typed
  registry entry before it can be compiled.
* Every semantic `PromptBlock` is materialized by `PromptBlockRegistry.Construct`
  (or its closed `ConstructAttribution` projection); `validateConstructedBlock`
  rejects forged IDs, paths, text, metadata, and provenance. Generated turns reject
  unknown IDs.
* `CompiledPrompt` is sealed by unexported representation. Adapters receive
  named carrier accessors and may not join, extract, or append semantic prompt
  text; the atomic launch compiler selects prompt/fresh/resume/system/native
  carrier surfaces before LaunchConfig is created.
* Attachment resolution is completed before launch/delivery compilation. The
  old `runtimeattachments.Render*` helpers remain compatibility utilities only;
  production compilation uses `AttachmentResolution` and compiler templates.
* This inventory intentionally excludes prompt audit/observability/trajectory
  features; token attribution records are not prompt authorship paths.