# RAPP/1 Reference Vault > The reference vault for the RAPP production guide in the AIBAST Agents Library: every step of the > 14-step guide expanded, and the RAPP/1 protocol it rests on, as linked Markdown notes. Notes that > restate the RAPP/1 specification are pinned to upstream commit 0b24e7d60786d39d97265338add9ca784bf5a7ab (MIT; see NOTICE.md). - [Production guide](https://microsoft.github.io/aibast-agents-library/docs/vault/../rapp-guide.html): the 14-step RAPP production process - [All notes as one file](https://microsoft.github.io/aibast-agents-library/docs/vault/llms-full.txt) - [Obsidian vault download](https://microsoft.github.io/aibast-agents-library/docs/vault/rapp1-vault.zip) ## Vault - [Welcome](https://microsoft.github.io/aibast-agents-library/docs/vault/README.md): What this vault is, who it is for, and where to start. - [Index](https://microsoft.github.io/aibast-agents-library/docs/vault/_index.md): Every note in the vault, grouped by section. - [Notice](https://microsoft.github.io/aibast-agents-library/docs/vault/NOTICE.md): Where the vault's content and viewer come from, and the licences that apply. ## Start Here - [How to Use This Vault](https://microsoft.github.io/aibast-agents-library/docs/vault/Start%20Here/How%20to%20Use%20This%20Vault.md): How do I read, search, download and share this vault? - [Reading Paths](https://microsoft.github.io/aibast-agents-library/docs/vault/Start%20Here/Reading%20Paths.md): Which notes should I read, in what order, for my role? ## Production Guide - [Production Guide Overview](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Production%20Guide%20Overview.md): What the 14-step RAPP production process is, who runs each step, and where the six human quality gates sit. - [Step 01 Discovery Call](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2001%20Discovery%20Call.md): How to run the discovery call whose transcript becomes the foundation for every later step. - [Step 02 Transcript Analysis](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2002%20Transcript%20Analysis.md): How the transcript is turned into structured project JSON and audited at Quality Gate 1. - [Step 03 Generate MVP Poke](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2003%20Generate%20MVP%20Poke.md): What an MVP poke is, what goes in it, and how it is sent to the customer before any code is written. - [Step 04 Customer Validation](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2004%20Customer%20Validation.md): How the customer signs off on the MVP scope at Quality Gate 2, and what to do for each possible answer. - [Step 05 Generate Agent Code](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2005%20Generate%20Agent%20Code.md): How the locked MVP becomes Python agent files that follow the BasicAgent pattern. - [Step 06 Code Quality Review](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2006%20Code%20Quality%20Review.md): What a reviewer checks in generated agent code at Quality Gate 3 before it is deployed. - [Step 07 Deploy Prototype](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2007%20Deploy%20Prototype.md): How reviewed agents get running locally, in Azure, and in Copilot Studio, and how to verify the deployment. - [Step 08 Demo Review](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2008%20Demo%20Review.md): How the customer first sees the working prototype, and how Quality Gate 4 decides what happens next. - [Step 09 Generate Video Demo](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2009%20Generate%20Video%20Demo.md): How to turn the approved prototype into a produced, narrated demo for executives. - [Step 10 Final Demo Review](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2010%20Final%20Demo%20Review.md): How the customer approves the produced video demo for executive sharing at Quality Gate 5. - [Step 11 Production Planning](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2011%20Production%20Planning.md): How the prototype's requirements for security, compliance, and rollout are defined before production. - [Step 12 Security Sign-off](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2012%20Security%20Sign-off.md): How IT, Security, and Compliance formally approve production deployment at Quality Gate 6. - [Step 13 Production Deployment](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2013%20Production%20Deployment.md): How the approved system is deployed to the customer's environment and rolled out to pilot users. - [Step 14 Post-Deployment Review](https://microsoft.github.io/aibast-agents-library/docs/vault/Production%20Guide/Step%2014%20Post-Deployment%20Review.md): How the pilot is measured against the MVP targets and how Phase 2 is planned. ## Protocol - [Canonicalization](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Canonicalization.md): How does rapp/1 turn any JSON value into one exact byte string? - [Conformance Classes](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Conformance%20Classes.md): What does an implementation have to do to claim it conforms to rapp/1, and what extra rules apply to the Grail kernel and production operations? - [Content Addressing](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Content%20Addressing.md): How does rapp/1 hash things, and why is every hash tagged with a space? - [Identity and the Rappid](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Identity%20and%20the%20Rappid.md): What is a rappid, how is it minted, and when may it ever change? - [Protocol at a Glance](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Protocol%20at%20a%20Glance.md): What is rapp/1, and what does it promise in one page? - [Protocol Layers](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Protocol%20Layers.md): How is rapp/1 split into layers, and what may each layer do? - [Security Considerations](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Security%20Considerations.md): Which threats does rapp/1 defend against, which ones do hashes alone not stop, and what control covers each? - [The Egg](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/The%20Egg.md): How does rapp/1 package a whole agent, application, or space so anyone can verify it before using it? - [The Frame](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/The%20Frame.md): What is a rapp/1 frame, what are its eleven fields, and how is it verified? - [The Registry](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/The%20Registry.md): What is the estate registry, why is it the root of trust, and how does a consumer know it is genuine and current? - [The Wire](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/The%20Wire.md): How do RAPP systems talk to each other, and what exactly does POST /chat accept and return? - [Trust and Signatures](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Trust%20and%20Signatures.md): What does a rapp/1 signature prove, how is it checked, and how do key rotation and revocation work? - [Versioning and Evolution](https://microsoft.github.io/aibast-agents-library/docs/vault/Protocol/Versioning%20and%20Evolution.md): How does rapp/1 change over time without breaking verification of anything already published? ## Operations - [RAPP CICD](https://microsoft.github.io/aibast-agents-library/docs/vault/Operations/RAPP%20CICD.md): How does one exact AI release candidate earn promotion toward production under rapp/1? - [RAPP Deploy](https://microsoft.github.io/aibast-agents-library/docs/vault/Operations/RAPP%20Deploy.md): How does a qualified rapp/1 release reach users safely and stay provably healthy afterward? - [RAPP Work](https://microsoft.github.io/aibast-agents-library/docs/vault/Operations/RAPP%20Work.md): How does rapp/1 bind a work organization to its catalog, releases, migrations, and rollback targets without granting hidden authority? ## Building - [Conformance and Drift](https://microsoft.github.io/aibast-agents-library/docs/vault/Building/Conformance%20and%20Drift.md): How do you prove an implementation conforms to rapp/1, and how do you find and fix drift in real artifacts? - [Distros and Pinning](https://microsoft.github.io/aibast-agents-library/docs/vault/Building/Distros%20and%20Pinning.md): How does this library ship the Brainstem kernel pinned by a species contract and drift-ledgered, with every difference recorded in `rapp/KERNEL-DRIFT.md`, and its own catalog around it? - [Implementing the Protocol](https://microsoft.github.io/aibast-agents-library/docs/vault/Building/Implementing%20the%20Protocol.md): In what order should you build a rapp/1 implementation, and how do you know it is done? - [The Agent Contract](https://microsoft.github.io/aibast-agents-library/docs/vault/Building/The%20Agent%20Contract.md): What exactly must a Brainstem agent file look like, and how does it reach the user through POST /chat? - [The Brainstem Kernel](https://microsoft.github.io/aibast-agents-library/docs/vault/Building/The%20Brainstem%20Kernel.md): What is the Brainstem kernel this library ships, and what does it guarantee to every agent and host? ## ms-rapp-1 - [Microsoft Foundry](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/Microsoft%20Foundry.md): How is ms-rapp/1 used in Microsoft Foundry, and what does a Foundry agent see? - [ms-rapp-1 Overview](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/ms-rapp-1%20Overview.md): What is ms-rapp/1, and how does it stay backward compatible with rapp/1 and the Brainstem? - [One Concept Across the Stack](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/One%20Concept%20Across%20the%20Stack.md): How does one Step file show up in Copilot Studio, Microsoft 365 Copilot, Foundry, the Agent Framework and the Agents SDK? - [RAPP Runtime](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/RAPP%20Runtime.md): What is RAPP Runtime, and how does each of its pieces map to the Brainstem? - [Run Receipts and Change Control](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/Run%20Receipts%20and%20Change%20Control.md): How does ms-rapp/1 keep an AI step auditable, and how does a new Step get into production? - [Steps](https://microsoft.github.io/aibast-agents-library/docs/vault/ms-rapp-1/Steps.md): What does a Step file look like, and why does it load unchanged in a Brainstem? ## Reference - [Failure Atlas](https://microsoft.github.io/aibast-agents-library/docs/vault/Reference/Failure%20Atlas.md): When a frame is refused, which check failed and what usually caused it? - [Glossary](https://microsoft.github.io/aibast-agents-library/docs/vault/Reference/Glossary.md): What does each rapp/1 term mean, in plain words? - [Sources and Provenance](https://microsoft.github.io/aibast-agents-library/docs/vault/Reference/Sources%20and%20Provenance.md): Where does this vault's protocol content come from, and which text is authoritative?