GitHub

DeerFlow 2.0: Durable Agentic Work

How runs coordinate capabilities, state, side effects, and evidence

8 chapters100 min total
Keywords
DeerFlow 2.0executionharnessGatewaysandboxcheckpointsdelegationMCPmemoryartifacts
Overview

DeerFlow 2.0 is an open-source execution harness that turns model requests into managed runs with tools, skills, sandboxes, structured state, delegation, durable tasks, and evidence. The series moves from run control and capability boundaries to checkpoints, memory, scheduling, security, and deployment choices. Its central test is whether work has a clear owner, bounded side effects, continuity, recovery, and inspectable delivery; receipts and persistence do not prove semantic correctness.

Learning outcomes
  • DeerFlow 2.0 makes model-driven work durable, bounded, and inspectable, but it does not replace human or domain judgment.
  • Availability, authorization, execution, delivery, and correctness are distinct; receipts prove runtime action, not truth.
  • Checkpoints, summaries, durable context, memory, and goals preserve different lifecycles; none automatically rewinds external side effects.
  • Keep coupled work in the lead run; add delegation, batches, schedules, or durable MCP only when their lifecycle benefit outweighs coordination cost.
Keywords
DeerFlow 2.0executionharnessGatewaysandboxcheckpointsdelegationMCPmemoryartifacts

Chapters

Preview every chapter · Unlock full text, audio, and video from chapter 4

Plans
Ch.1-3 FreeCh.4-8 Premium

FAQ

What is DeerFlow 2.0?

DeerFlow 2.0 is an open-source execution harness that surrounds a language model with managed runs, tools, skills, sandboxes, structured state, continuity, and evidence.

When should you use DeerFlow 2.0 instead of a chatbot?

Use DeerFlow 2.0 when work is multi-step, has bounded side effects, needs continuity or coordination, or benefits from inspectable delivery; a simple tool-free question may not justify its overhead.

How does DeerFlow 2.0 handle long-running work?

DeerFlow 2.0 handles long-running work with checkpoints, compaction, durable context, memory, goals, persistent batches, schedules, and remote-task records, while each mechanism preserves a different lifecycle and has its own limits.

Are DeerFlow 2.0 receipts proof that an agent is correct?

No. A DeerFlow 2.0 receipt proves that the runtime executed a named action and retained bounded provenance; it does not prove the source was truthful, the inference valid, or the final artifact correct.