Academic foundations for DUMBER and BREWERY. Every letter maps to 3–5 validated methods. The composition is the contribution.
Individual letters are conventional. Per-letter composition is hybrid. Cross-framework integration is novel. This page builds that argument with 32 citations.
Governance Gate Stack
Six properties that every autonomous agent action must satisfy before execution. Not a workflow — a constraint envelope.
Same inputs produce the same classification every time.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Turing, 1936 | Deterministic computation: inputs map to outputs with no randomness | Mission state transitions have exactly one valid successor per state |
| Lamport TLA+, 2002 | Formal specification of state machines; model checking finds violations pre-runtime | Mission lifecycle is a finite state machine with gated transitions |
| AWS REL04-BP04, 2024 | Idempotent operations: repeated execution = single execution | Re-dispatching an ACTIVE mission is a no-op, not a duplicate |
| Lean-Agent, 2026 | Lean 4 formal verification for deterministic agent compliance | Same concept — deterministic classification before execution |
"Lean-Agent provides stronger guarantees via theorem proving." Rebuttal: Lean-Agent is a paper; DUMBER is deployed at a care home processing 222+ missions.
Every action maps to exactly one tier with no overlap.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Meyer DbC, 1988 | Preconditions + postconditions create unambiguous contracts | Every DUMB gate returns binary ok/fail; no “maybe” states |
| Hoare, 1969 | Hoare triples {P}C{Q}: guaranteed postcondition if precondition holds | Autonomy tier classification: each action class maps to exactly one tier |
| POSIX, 1988 | 0 = success, non-zero = failure. Universal binary signaling. | Mission completion: success (debrief accepted) or failure (escalation) |
| gRPC, 2015 | 16 well-defined status codes with machine-readable semantics | T-chain returns structured result: resolved/escalated + evidence payload |
"This is just enum-based dispatch." Rebuttal: The innovation is the enforcement point — classification before execution, not annotation after.
Every execution is counted, rate-limited, and budgeted.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Beyer et al., 2016 | Four Golden Signals: latency, traffic, errors, saturation | Fleet metrics snapshot every 5 min; healthcheck sweep hourly |
| Deming, 1986 | “In God we trust; all others bring data.” Measurement-driven PDCA. | Every E-R tier attempt is logged via git commit, QdB observation |
| Astrom & Murray, 2008 | PID controllers: proportional-integral-derivative feedback regulation | Scheduler backoff: exponential, SQLite-persisted — a digital feedback controller |
"Every SaaS does application metrics." Rebuttal: The metering target is autonomous agent decisions at a regulated facility where every event has compliance implications.
Actions have explicit time and resource limits.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Nygard, 2007 | Circuit breaker: monitor failures, trip breaker, prevent cascading failure | Circuit breakers per session in fleet.db; quarantine after N failures |
| Clarke et al., 2001 | Bounded model checking: explore state space up to bound K | Max 3 auto-retries per mission; escalate after bound is reached |
| Jacobson, 1988 | TCP exponential backoff with jitter to avoid thundering herd | Scheduler 429 backoff: exponential, SQLite-persisted, fleet-wide |
"Circuit breakers are table stakes." Rebuttal: Agreed — for infrastructure. Applying them to AI agent sessions where “failure” is a stuck reasoning loop requires adapting the pattern to a new failure mode.
Failures increase human involvement, never decrease it.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Armstrong, 2003 | OTP supervision trees: hierarchical failure handling with restart/stop/escalate | T-chain: T^1 (direct) → T^2 (scaffold) → T^3 (extend) → T^4 (one-shot) → HITL |
| ITIL, 2007 | Hierarchical + functional escalation: severity triggers, SLA-driven timeouts | Escalation is monotonic: once elevated, never silently downgraded |
| Akka, 2009 | Supervisor strategies: restart, stop, resume, escalate to parent | Resolution engine: auto-Enter → kill-and-retry → human escalation |
"ITIL escalation is decades old." Rebuttal: ITIL requires human judgment at every tier. TEAOS exhausts 4 automated tiers before reaching a human.
Post-execution state is verified against expected state.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Shapiro et al., 2011 | Strong eventual consistency: replicas converge through monotonicity | fleet.db as SSOT; JSON views regenerated from SQLite on demand |
| K8s Controllers, 2014 | Reconciliation loop: compare desired vs. actual state, converge | reconcile_missions() syncs mission state against live tmux sessions |
| Garcia-Molina, 1987 | Sagas: long-lived transactions with compensating actions | Mission campaigns with state extraction; salvage_aborted_missions() |
"K8s reconciliation is the standard." Rebuttal: K8s reconciles infrastructure state. TEAOS reconciles cognitive work products — missions with debriefs, evidence ratios, and compliance artifacts.
Lifecycle Phase Engine
Seven phases that run as a daemon every 30–60 minutes. Each phase is DUMBER-constrained.
Scan fleet state, define scope for this cycle.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| PMI WBS, 2006 | 100% rule: scope is explicitly bounded before work begins | Phase B gathers session counts, active/idle, briefed missions to define cycle boundary |
| Scrum, 1995 | Timeboxed iteration with defined scope; no mid-sprint changes | Each BREWERY cycle is timeboxed at 30–60 min |
| Tsang, 1993 | Constraint satisfaction: define variables, domains, constraints before solving | Scheduler budget constraints: max concurrent, per-domain limits, 429 window |
Dispatch missions, refine priorities via scheduler-gated selection.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Deming, 1986 | PDCA: iterative improvement through measured cycles | Each BREWERY cycle is a PDCA iteration; refinement dispatches work |
| Ohno/Kaizen, 1988 | Continuous small improvements compound over time | Priority sorting: CRITICAL > HIGH > NORMAL > LOW; refined each cycle |
| Korf, 1985 | Iterative deepening: explore depth K, then K+1; optimal resource use | LIGHT missions first, MEDIUM when budget allows, HEAVY only off-peak |
Run tests, verify handoffs, assess fleet health.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Hoare, 1969 | Formal verification: prove correctness against specifications | self_check.py verifies 8 subsystems; /fleet/healthcheck returns GREEN/RED |
| Beck TDD, 2002 | Tests define “done”; code is not complete until tests pass | Phase E runs pytest — tests define the fleet’s acceptance criteria |
| Hardy Tiers | LATENT/HYPOTHETICAL/PRESTIGE: evaluation rigor scales with confidence | New code gets LATENT scrutiny (every phase); battle-tested gets PRESTIGE (milestones only) |
Extract patterns, commit knowledge, update rules.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Alexander, 1977 | 253 patterns forming a generative language for recurring problems | .claude/rules/core/ directory: 12+ extracted rules, each a named pattern |
| GoF, 1994 | 23 reusable software patterns with intent, structure, consequences | Pattern extraction skill: solve a problem, name the pattern, codify as rule |
| Nonaka & Takeuchi, 1995 | SECI: knowledge spirals from tacit to explicit | Lessons pipeline: operational experience → lessons.ndjson → .claude/rules/ → session behavior |
Reap completed sessions, free resources, produce deliverables.
| Source | Principle | TEAOS Implementation |
|---|---|---|
| Goldratt, 1984 | Theory of Constraints: exploit the bottleneck, subordinate everything else | Phase Y reaps dead sessions to free tmux slots (the constraint) |
| Ohno/Muda, 1988 | Eliminate waste: overproduction, waiting, inventory, defects | Auto-reap removes INACTIVE sessions (waste); ghost_reaper cleans orphans |
| Church, 1936 | Y-combinator: fixed-point enabling self-referential computation | Y yields the next boundary — output of one cycle becomes input of the next |
Adaptive Autonomy Tiers
Hardy Confidence maps Level of Autonomy to three named tiers. The academic lineage runs through graduated autonomy models, confidence-based escalation, and interrupt/resume patterns.
| Tier | Checkpoint Cadence | Autonomy Level | Academic Analogue |
|---|---|---|---|
| LATENT | Every phase | Lowest — plan approval required | LangGraph interrupt(); HITL design patterns |
| HYPOTHETICAL | Every 2–3 phases | Medium — periodic checkpoints | 3-tiered governance (IIAP/Singapore); OWASP Agentic Top 10 |
| PRESTIGE | Major milestones only | Highest — trusted execution | Human-on-the-loop (HOTL); graduated autonomy literature |
Individual letters are conventional. Each maps to well-established academic fields.
Per-letter composition is hybrid. No single paper covers the full DUMB gate stack nor the E-R engine.
Cross-framework integration is novel. DUMBER gates embedded in BREWERY phases, running on a 30–60 minute daemon cycle at a regulated care facility, has no external precedent.
Every BREWERY phase is DUMBER-constrained. The Boundary phase is Deterministic. The Refinement dispatch is Unambiguous and Bounded. Evaluation is Metered. And the shared E-R phases bridge both frameworks through the same escalation and reconciliation foundations.
The closest external analogues each cover 2–3 of these dimensions. Kubernetes does reconciliation but not governance gates. Temporal does durable lifecycle but not cognitive prosthesis. ITIL does escalation but not automated pre-human resolution. The integration is the contribution.
32 citations: 19 academic papers and books, 8 industry standards and frameworks, 5 contemporary agent governance sources. Full analysis in Why BREWERY? Why DUMBER?
InfiniTEA · Architecture Provenance · The tea is the thesis.