Composable Workflow Orchestration

How /silver composes catalog-backed work: Process → Workflow → Atomic Flow → Flow Step. Classifies intent via ROUTE, selects a catalog workflow, and supervises subagent execution through the per-instance tracker .planning/workflows/<id>.md.

What Are Composable Flows?

Silver Bullet v0.48.3 is an Agentic Process Orchestrator (APO). Its hierarchy is Process → Workflow → Atomic Flow → Flow Step/Skill. /silver classifies the request via ROUTE, selects a catalog-backed workflow (for example silver-feature or silver-fast), and composes canonical atomic flow slugs from docs/apo-catalog.json.

Teams adopt process packs (PP-*) to reorder workflows, mandate gates, and require opted-in tools without forking atomic-flow definitions. The catalog remains the single source of truth; generated views (docs/composable-flows-contracts.md, docs/workflow-composition-matrix.md) are read-only renderings checked for freshness.

Each atomic flow is the natural delegated work unit: one subagent work package, declared inputs and outputs, mutation scope, dependency edges, and a local V-loop. Each flow step/skill also has a local V-loop that must roll up before the parent atomic-flow gate can pass.

Why composition instead of fixed pipelines? A feature composition includes PLAN, EXECUTE, REVIEW, VERIFY, SECURE, SHIP. A debug composition inserts DEBUG before EXECUTE. A release composition includes RELEASE but not EXECUTE. Fixed pipelines cannot express this variability cleanly — composable flows can.

Atomic Flow Catalog

The source of truth is docs/apo-catalog.json. Generated views such as docs/composable-flows-contracts.md, docs/workflow-composition-matrix.md, and docs/generated/atomic-flow-index.json are rendered from that catalog and checked for freshness. They are not hand-maintained workflow authorities.

v0.48.3 defines 27 canonical atomic flows, 22 workflows, and 85 flow-step contracts. Each flow step carries a local V-loop; evidence rolls up through atomic-flow gates to workflow intent gates. Legacy FLOW 1–18 labels are migration aliases only — not primary navigation.

Atomic flowSlugCapability classWork product
AF-ROUTEROUTEroute intentClassified user intent and selected workflow route.
AF-BOOTSTRAPBOOTSTRAPproject bootstrapInitialized or migrated Silver Bullet project surface.
AF-ORIENTORIENTcontext orientationCurrent codebase, planning, git, and runtime context map.
AF-CLARIFYCLARIFYscope clarificationResolved scope, assumptions, boundaries, and next route.
AF-SPECIFYSPECIFYrequirements specificationSpecification, requirements, and ingestion evidence.
AF-PLANPLANexecution planningAccepted implementation or operations plan.
AF-DESIGN-CONTRACTDESIGN_CONTRACTdesign contractUI/design contract or documented non-UI rationale.
AF-VALIDATEVALIDATEgap validationGap analysis with pass/fail status and repair inputs.
AF-DECIDEDECIDEdecision researchDecision record with rationale, tradeoffs, and risks.
AF-QUALITY-GATEQUALITY_GATEcross cutting quality gateQuality dimension gate results and required repairs.
AF-FAST-PATHFAST_PATHbounded fast pathMinimal safe workflow route for narrow low-risk work.
AF-EXECUTEEXECUTEimplementation executionScoped implementation changes and local execution notes.
AF-DEBUGDEBUGfailure diagnosisRoot-cause diagnosis and fix strategy for failing behavior.
AF-UI-QUALITYUI_QUALITYui quality reviewUI review findings, fixes, or accepted residual risk.
AF-VERIFYVERIFYverification and testingFresh verification evidence for behavior, tests, and artifacts.
AF-SECURESECUREsecurity and llm safetySecurity and AI-safety review evidence.
AF-REVIEW-REQUESTREVIEW_REQUESTreview requestReview request package with scope and evidence pointers.
AF-REVIEWREVIEWartifact and code reviewReview findings across code, artifacts, and domain gates.
AF-REVIEW-TRIAGEREVIEW_TRIAGEreview triage and fixTriaged findings, applied fixes, and dismissed-risk rationale.
AF-BLAST-RADIUSBLAST_RADIUSblast radius assessmentChange blast-radius analysis and rollback/risk controls.
AF-DEVOPS-ROUTEDEVOPS_ROUTEdevops toolchain routingDevOps provider/toolchain route and required gates.
AF-BRANCH-FINISHBRANCH_FINISHbranch hygieneBranch hygiene, commit readiness, and traceability evidence.
AF-COMPLETION-AUDITCOMPLETION_AUDITcompletion auditCompletion audit proving claimed outcomes are supported.
AF-SHIPSHIPship readinessBranch, PR, CI, deploy, or ship-readiness outcome.
AF-RELEASERELEASErelease managementRelease notes, versioning decision, tag, and release artifact.
AF-DOCUMENTDOCUMENTdurable documentationDurable documentation, handoff, or knowledge-capture artifact.
AF-PHASE-MANAGEPHASE_MANAGEphase and state managementPhase, backlog, thread, or state transition record.

Legacy alias map (migration reference only)

Secondary reference. The primary catalog is the table above. Use this map only when translating older docs, runtime queue tokens, or team runbooks that still say FLOW N. New compositions, help docs, and process packs must use atomic flow slugs from docs/apo-catalog.json.

Legacy label → canonical entity:

Legacy aliasCanonical catalog ID
FLOW 1AF-BOOTSTRAP
FLOW 2AF-ORIENT
FLOW 3AF-CLARIFY
FLOW 4AF-DECIDE
FLOW 5AF-SPECIFY
FLOW 6AF-PLAN
FLOW 7AF-DESIGN-CONTRACT
FLOW 8AF-EXECUTE
FLOW 9AF-UI-QUALITY
FLOW 10WF-REVIEW-TRIAD
FLOW 11AF-SECURE
FLOW 12AF-VERIFY
FLOW 13AF-QUALITY-GATE
FLOW 14WF-SHIP-READINESS
FLOW 15AF-DEBUG
FLOW 16 (DESIGN HANDOFF)AF-DOCUMENT
FLOW 17 (DOCUMENT)AF-DOCUMENT
FLOW 18AF-RELEASE

Post-Execution Sequencing

Runtime order is defined by catalog workflow composition and orchestrator queues, not by legacy FLOW numbering. For delivery composers, the reusable post-execution chain after EXECUTE is:

  1. UI_QUALITY when UI scope applies
  2. REVIEW_REQUESTREVIEWREVIEW_TRIAGE
  3. VERIFY (with verify-tests)
  4. SECURE (with VALIDATE as needed)
  5. QUALITY_GATE pre-ship
  6. BRANCH_FINISHCOMPLETION_AUDITSHIP

Each child atomic flow must pass its own V-gate before the parent workflow can roll up to final user-intent validation.

How Composition Works

When you invoke /silver, composition happens in five catalog-backed steps:

  1. Intent classificationROUTE maps the request, project state, and active artifacts to a workflow such as silver-feature, silver-bugfix, or a dynamic route.
  2. Catalog selection — the workflow contributes atomic flow slugs and reusable workflow components. No workflow tree is authored outside docs/apo-catalog.json.
  3. Dynamic prune/insert/substitute — runtime context may omit already-satisfied atoms, insert missing preconditions such as DEBUG, or substitute a smaller reusable workflow when catalog rules allow it.
  4. Subagent scheduling — each ready atomic flow becomes exactly one subagent work package; independent atoms can run in parallel, while conflicting mutation scopes serialize.
  5. V-loop rollup — flow-step V-loops roll into atomic-flow V-gates, atomic-flow V-gates roll into workflow gates, and the final gate validates material user intent.
Example feature composition: silver-feature starts with BOOTSTRAPORIENTSPECIFYPLAN atoms, executes EXECUTE, then joins post-execution gates (REVIEW_REQUEST → … → SHIP). A failing test or CI run can dynamically insert DEBUG; a UI scope keeps DESIGN_CONTRACT and UI_QUALITY.

Per-Instance Workflow Tracker

The active composition tracker lives at .planning/workflows/<id>.md. It is created when a composition begins and updated after every path completes.

What the workflow tracker contains

  • Active path — which path is currently executing
  • Completed paths — log of paths that have exited successfully, with timestamps
  • Deferred improvements — items noted during execution that are not blocking but should be addressed later
  • Dynamic insertions — catalog atoms inserted at runtime (e.g. DEBUG after a failure)
  • Composition plan — the full ordered chain proposed at composition time

Why the workflow tracker matters

The per-instance tracker gives both the user and the agent a shared, persistent view of what is happening. If a session is interrupted, .planning/workflows/<id>.md allows the next session to resume from the correct point in the chain without re-running completed paths. It also provides an audit trail for post-hoc review. The retired single-file WORKFLOW.md model is legacy only.

Supervision Loop

Each atomic flow in a composition runs under a local V-loop and parent supervision loop:

  1. Input contract check — prerequisites, dependency outputs, mutation scope, and selected flow steps are verified before dispatch.
  2. Subagent execution — the selected atomic flow runs as one subagent work package, and each owned flow step produces local evidence.
  3. V-gate verification — step V-loops roll up first; then the atomic-flow V-gate verifies and validates the work product against the input that selected it.
  4. Stall detection — If a path makes no progress for a configured timeout, a stall sentinel is surfaced to break the loop.
  5. Progress reporting — composition logs record selected atoms, dynamic deviations, subagent dispatch/join status, evidence, and final intent coverage.
VERIFY is non-skippable for delivery. The workflow cannot complete until verification evidence is fresh and rolled up. Even if the user asks to skip it, delivery hooks block premature PR, deploy, release, or completion claims.

See Also