<nil>NILScript

Reference

Glossary

Every key term in NILScript, defined in one line. When a definition leans on another term, that term has its own entry.

A – C

TermDefinition
Action nodeA DSL node that performs a verb with side effects; the only node type that produces a NIL COMMIT.
Append-only auditGuarantee G6: every envelope and decision is recorded to an immutable log.
Axioms (five)DSL design laws: atomic actions, dependency-only linking, human-in-the-loop, self-healing grammar, bounded reversibility.
BCP 47IETF standard for language tags; used to localize previews.
COMMITThe performative and endpoint that executes a previously proposed action; idempotent.
COMPENSABLEReversibility tier: no clean inverse, but an offsetting forward action exists (payment → refund).
Compensation tokenThe reference a ROLLBACK targets, emitted on the original COMMIT's EVENT.
Conformance classCore System (protocol + guarantees) or NIL-H (multi-tenant SaaS).
CRITICALThe highest tier; requires owner approval and a 300-second cooling delay before commit.

D – G

TermDefinition
DAGDirected acyclic graph; the shape of a program — nodes linked by backward-only references.
Data referenceA reference to a prior step's output: $.step_N.output.field; backward-only guarantees acyclicity.
DECIDEOwner-plane performative that records an approval or rejection.
Default-denyGuarantee G1: nothing is permitted unless a grant explicitly scopes it.
DeterminismSame program → same flow; non-determinism is quarantined to NIL activities.
DSLThe orchestration language: a declarative, event-driven JSON DAG an agent emits; version 0.1.
Durable runtimeThe execution layer that runs validated programs idempotently with partial-failure recovery.
EnvelopeThe immutable message wrapper for every NIL call; eight fixed fields.
EVENTThe performative and endpoint for async notifications; delivered as signed webhooks.
Generation layerThe first layer of the tri-layer machine: an LLM produces a candidate DSL program from intent.
GrantA scoped, budgeted, revocable authorization for a speaker in a workspace; default-deny.
Guard expressionA side-effect-free boolean used by condition nodes to branch flow.

H – N

TermDefinition
HIGHA tier; the action is parked pending owner approval before it can commit.
Hint vs resolved valueA hint is what the speaker supplies; a resolved value is the concrete entity the system matched.
Idempotency keyGuarantee G4: a repeated COMMIT with the same key returns the original outcome rather than acting twice.
Intent, not implementationA verb names what the speaker wants, not how the backend does it.
IRREVERSIBLEReversibility tier: no reversal exists; the default for any unmarked verb.
Least powerThe DSL is intentionally non-Turing-complete — the least expressive language that does the job.
LOW / MEDIUMTiers: LOW executes immediately; MEDIUM executes and notifies the owner.
NILThe Network Intent Layer — the wire protocol: envelopes, performatives, endpoints, refusals, guarantees.
NIL-HThe multi-tenant SaaS conformance class; adds workspace isolation and per-workspace sequencing.
NodeA unit in the DAG; closed set of eight types.

O – R

TermDefinition
on_errorA program field setting failure policy: halt, continue, or compensate.
PerformativeThe speech-act type of a NIL message; closed set of seven (+ DECIDE on the owner plane).
PipelineThe ordered list of nodes that make up a DSL program.
PreviewA system-rendered, human-readable statement of facts; localized per BCP 47.
ProfileA versioned definition for a family of verbs: args, tier floors, previews, modifiable facts.
PROPOSALThe reply to PROPOSE: a preview or a refusal; never a side effect.
PROPOSEThe first phase of two-phase execution; no side effects; returns a PROPOSAL.
QUERYThe read performative and endpoint; returns a typed response; never mutates.
RefusalA PROPOSAL that declines, returned with 200 OK and a typed code.
ResolutionMatching a hint to a concrete entity; ambiguity yields AMBIGUOUS, no match yields UNRESOLVED.
Reversibility tierHow far a verb can be undone: REVERSIBLE, COMPENSABLE, or IRREVERSIBLE.
ROLLBACKThe lifecycle-closing performative; requests a reversal, answered by a PROPOSAL, then committed.

S – Z

TermDefinition
SagaThe execution shape of a program: action nodes may declare compensation, unwound in reverse on failure.
Self-healing grammarThe validator emits diagnostics precise enough to regenerate a corrected program.
SEQRD-PCThe kernel mnemonic: STATUS · EVENT · QUERY · ROLLBACK · DECIDE · PROPOSE · COMMIT.
SentenceAn informal name for a single well-formed NIL envelope.
Six GuaranteesG1–G6: grants, two-phase, out-of-band approval, idempotency, budgets, append-only audit.
SpeakerAny agent that emits NIL messages under a grant.
STATUSThe performative and endpoint for checking the state of a prior operation.
StewardThe maintainer of the standard and its reference implementation — the Wosool project.
SwarmA group of speakers acting under one shared grant and one shared budget.
Tier / tier floorThe risk class of an action: LOW, MEDIUM, HIGH, CRITICAL; a profile sets the floor.
Tri-layer machineGeneration → Validation → Durable runtime.
Two-phaseGuarantee G2: every side effect requires a PROPOSE then a COMMIT; no direct-write.
VerbA domain action describing intent; standard only if it has a profile.
WorkspaceThe tenant / isolation unit; grants, budgets, audit, and sequencing are scoped to it.

NILScript is an open standard, stewarded by the Wosool project. The spec is extracted from running code.

Draft standard v0.3.0 · 0.x stage · NIL wire 0.1 · DSL 0.1