Architecture teardown of Goose's source code

[NeuZhou]

I did a source-level architecture analysis of Goose and wrote it up with diagrams.

Some things that stood out:

• The Agent struct contains zero tool execution logic -- everything lives in extensions via McpClientTrait. You could swap out the developer extension for an external process and the agent loop wouldn't notice.
• The 5-inspector security pipeline (Security ? Egress ? Adversary ? Permission ? Repetition) is one of the most thorough I've seen in any open source agent.
• The 6-flavor extension taxonomy (sse, stdio, builtin, platform, streamable_http, frontend) is a clever way to make a monolithic binary behave like a distributed system.

Full writeup with architecture diagrams: https://github.com/NeuZhou/awesome-ai-anatomy/tree/main/goose

Happy to discuss any of the architectural decisions or correct anything I got wrong.