# Task packs

Task packs are deterministic, auditable workflows executed by Task Runner.
They are distributed as signed bundles and can run online or offline.

Pack structure
- pack.yaml manifest
- assets, schemas, docs
- provenance and signatures

Key features
- Deterministic plan and execution graph
- Approval gates and policy gates
- Evidence bundles with plan hashes and artifacts
- RBAC scopes for discover, run, and approve

Determinism and validation
- Canonical plan hash and inputs lock file
- Stable ordering and fixed timestamps
- Fail closed if approvals or hashes are missing

Publishing
- Validate, build, sign, and push to registry or OCI
- Offline bundles must satisfy packs offline schema

Related references
- docs/task-packs/spec.md
- docs/task-packs/authoring-guide.md
- docs/task-packs/runbook.md
- docs/task-packs/registry.md