Knowledge check

Check your knowledge

Choose an answer to see why it is right or wrong.

JavaScript is off, so every explanation is shown at once.

1. 01What is the difference between Namzu and an agent application framework?

   • Namzu is a kernel: it owns lifecycle, isolation, scheduling, and the event stream, and ships no interface, no hosted service, and no favoured vendor.Correct. The things it refuses to own are the point - your frontend, your storage, and your model choice stay your decisions.
   • Namzu bundles a chat interface and a dashboard so you can demo faster.Incorrect. That is precisely what a kernel does not do. Namzu renders no interface at all.
   • Namzu is a hosted service you sign into and connect your agents to.Incorrect. There is no hosted service and no control plane; the kernel is a package you install.

2. 02You need to move from a local model to a hosted one. What changes?

   • The provider registration - the import and the type. The code below it is unchanged.Correct. Vendors are drivers in separate packages, and every driver returns the same response shape, so nothing downstream has to know which one answered.
   • Every call site, because each vendor returns a different response shape.Incorrect. The uniform shape - id, model, message, finishReason, usage - is exactly what the kernel guarantees.
   • Nothing, because the kernel picks a vendor for you automatically.Incorrect. You choose the vendor explicitly by registering its driver. Installed alone, the kernel answers from MockLLMProvider.

3. 03In defineTool, what does permissions: [] assert?

   • That the tool may compute and reach nothing else - authority is an allow-list, and an empty list grants nothing.Correct. Permissions are declared, not inferred. An empty set is the narrowest possible grant, not a missing value.
   • That permissions have not been decided yet, so the kernel grants defaults.Incorrect. There is no implicit default grant. Nothing is available because it happened to be reachable.
   • That the tool inherits whatever the surrounding process can do.Incorrect. Inheriting ambient authority is the failure mode this model exists to prevent.

4. 04A tool call keeps failing on malformed input, and widening the tool's permissions would make the error stop. What do you do?

   • Leave the permissions alone and fix the cause - authority follows behaviour you can prove safe, not the reverse.Correct. A declaration widened to silence an error has removed the only evidence that a passing result meant anything.
   • Widen the permissions until the error stops appearing.Incorrect. That inverts the security model: the declaration is supposed to constrain the behaviour, not accommodate it.
   • Remove the input schema so validation cannot fail.Incorrect. The schema is why your execute only ever sees well-formed arguments; removing it moves the failure into your code.