ECM Contracts: Contract-Aware, Versioned, and Governable Capability Interfaces for Embodied Agents

TL;DR

This paper introduces ECM Contracts, a comprehensive contract-based interface model for embodied agent capabilities, enabling safer composition, upgrade, and governance of modular functionalities in robotics.

Contribution

It proposes a six-dimension contract model for embodied capabilities, along with a compatibility framework and release discipline, improving safety and stability in embodied agent ecosystems.

Findings

Contract-aware composition reduces unsafe module combinations.

Contract-guided upgrades enhance safety and rollback readiness.

Prototype implementation demonstrates practical benefits in robotics settings.

Abstract

Embodied agents increasingly rely on modular capabilities that can be installed, upgraded, composed, and governed at runtime. Prior work has introduced embodied capability modules (ECMs) as reusable units of embodied functionality, and recent research has explored their runtime governance and controlled evolution. However, a key systems question remains unresolved: how can ECMs be composed and released as a stable software ecosystem rather than as ad hoc skill bundles? We present ECM Contracts, a contract-based interface model for embodied capability modules. Unlike conventional software interfaces that specify only input and output types, ECM Contracts encode six dimensions essential for embodied execution: functional signature, behavioral assumptions, resource requirements, permission boundaries, recovery semantics, and version compatibility. Based on this model, we introduce a compatibility framework for ECM installation, composition, and upgrade, enabling static and pre-deployment checks for type mismatches, dependency conflicts, policy violations, resource contention, and recovery incompatibilities. We further propose a release discipline for embodied capabilities, including version-aware compatibility classes, deprecation rules, migration constraints, and policy-sensitive upgrade checks. We implement a prototype ECM registry, resolver, and contract checker, and evaluate the approach on modular embodied tasks in a robotics runtime setting. Results show that contract-aware composition substantially reduces unsafe or invalid module combinations, and that contract-guided release checks improve upgrade safety and rollback readiness compared with schema-only or ad hoc baselines. Our findings suggest that stable embodied software ecosystems require more than modular packaging: they require explicit contracts that connect capability composition, governance, and evolution.