Canonical terms for AI Notes. Prefer these in prose and code. (Mirrors manuscript/terminology.md.)
| Term | Meaning |
| Model / LM / LLM | Next-token (or multimodal) predictor used as a component |
| Completion | Single model call → continuation |
| Chain | Fixed sequence of model/tool steps |
| Workflow | Code-owned control flow; model fills steps |
| Agent | Stateful decision system: loop over actions under a policy with state & environment |
| Autonomous system | Agent (or fleet) with broad action rights; not the default goal of this book |
| Environment | External world + tools + humans that produce observations |
| Observation (o) | Data returned after an action |
| Action (a) | Element of a closed or constrained action space |
| State (s) | Structured system state (not only chat text) |
| Policy (\pi) | Mapping from state/context to action choice; may be hybrid |
| Control loop | observe → decide → act → update state → (repeat / terminate) |
| Episode / case | One bounded unit of work (e.g. ShopOps case O-1001) |
| Hybrid control | Model proposes; deterministic code constrains/permits/executes |
| Belief (b(s)) | Distribution over hidden state under partial observability |
| Term | Meaning |
| Context / working context | Tokens presented to the model this call |
| Context assembler | Builds context under budget + precedence |
| Token budget | Hard/soft limit on assembled context |
| Context poisoning | Untrusted or conflicting content steering behaviour |
| KV cache | Cached key/value tensors for prior tokens during decoding |
| Prompt / prefix cache | Reuse of prefix across requests when bytes stable |
| Lost-in-the-Middle | Empirical drop in use of mid-context evidence |
| Term | Meaning |
| Tool | Typed API exposed to the agent |
| Tool registry | Name → schema → handler catalog |
| Executor | Runs tools after policy checks |
| Idempotency key | Client key making retries safe |
| Dry run | Validation/path without committing side effects |
| MCP | Protocol for agent↔tool edges |
| Term | Meaning |
| FSM | Explicit finite-state control |
| Checkpoint | Durable snapshot enabling resume |
| Working / semantic / episodic / procedural memory | Memory kinds with different semantics |
| Retrieval | Fetch external docs (≠ memory write) |
| Memory controller | Policy for write/forget/supersede |
| Provenance | Where a fact came from |
| Term | Meaning |
| Orchestrator | Assigns tasks, budgets, approvals |
| Ledger | Append-only ordered log of shared events/beliefs |
| A2A | Agent-to-agent task/artifact protocol across boundaries |
| Conflict | Contradictory assertions recorded as data |
| Trace | Structured record of a run’s decisions and I/O |
| Audit / evidence pack | Exportable justification for a consequential action |
| Term | Meaning |
| Policy-as-code | Deterministic permit/deny rules versioned in code |
| HITL | Human-in-the-loop as architecture |
| Injection | Untrusted content influencing instructions/actions |
| Authz | Authorization independent of the model |
| Term | Meaning |
| ShopOps | Book’s e-commerce post-purchase operations system |
| Case | One customer order exception / order-exception workflow instance |
| Profile / Strategy / Compliance / Contact | Specialised components (modules or processes) |
| Avoid | Prefer |
| Brain | Model / policy |
| Memory (unqualified) | Name the type |
| Autonomous (default) | Agent with explicit permissions |
| Agent for every function | Module / workflow step |