Spec and Go
The two execution modes: spec writes an OpenSpec change with locked-down permissions, go builds it.
Palisade has two modes, spec and go. There is no third mode.
Both use the same agent. They differ in permissions and focus.
spec
spec writes an OpenSpec change.
The agent's permissions are locked down to planning and OpenSpec artifacts.
It does not implement the change.
go
go builds the change.
The agent may edit code, but Palisade still prompts you before execution and destructive operations.
Those prompts stay on unless you explicitly enable bypass.
OpenSpec is the source of truth
A spec in Palisade is an OpenSpec change. Palisade reads, validates, links, and archives OpenSpec changes. It never writes a spec file itself, and it has no competing spec format.
A thread keeps a link to its spec.