ActionContract

A proposal to do one thing, addressed by the hash of its own content.

Immutable, and why that is not pedantry

A contract is never edited. Amending one creates a new contract that records which contract it supersedes.

The reason is that a contract is the thing an approval is attached to. If a contract could change after approval, then "this was approved" would mean nothing: the text a person read and the text that ran could differ, and no record would show it. Making the identity of a contract its content hash means any change produces a different identity, and an approval attached to the old one does not travel.

What it carries

The capability it requests, the steps it would take, the consequence bearer, and the evidence plan: what would have to be true afterwards for the action to count as done.

An action with no verification plan is not refused. It says so, plainly, and a human decides whether to accept an action whose outcome cannot be checked.