Agent map — the whole harness, one canvas
entry router stage gate
7 layers. Click any block to open it.

Memory

SQLITE · FTS5
SQLite + FTS5 across every session, project, and runtime.
Runs alongside every layer to the right — the agent decides what matters, the code owns the mechanics.
Capsule probe
Every eligible main prompt runs mem candidates over the active capsule index — at most 6 headline+ID hits in 1,200 bytes, bodies untouched.
Opportunity receipt
The probe records each opportunity, including zero hits, without blocking the task.
Agent-owned recall
No score threshold adopts a hit. The agent reads the full record by ID, then cross-checks it against live code.
Agent-declared purpose
There is no automatic distiller. Writes the main session decides to make declare one purpose: decision, user-correction, unresolved-obligation, or artifact-pointer.
Supersede, never delete
Changed decisions are superseded — one active canonical path, full history auditable, deleted rows recoverable from the graveyard.
Pending protection
Handoffs stay pending until an explicit consume; prune, merge, and delete fail closed against them.
Workers are exempt: no probe, no inject, no sync.
●
“Implement and test the login API, then leave a change report.”
L0
one sentence in
L1

Routing contract

Five fields you approve — then the route is sealed to commit, write scope, and model profile.
Route card — the whole handshake
your words“The login API in the spec still isn’t built — build it with tests”
intentImplement and test the login API, then leave a change report
scopesrc/auth/**, tests/auth/**
not doingNo schema or migration change
doneTests green, plans/<cycle>/pipeline_summary.md written
routeautopilot-code · dev · standard — multi-file, needs independent verification
ProceedAmendStop one approval, sealed with the route, before anything is touched
Sealed the moment you approve
route_hash rt-35552ff2…
write_scope source-scoped, plans/<cycle>/**
bound to registry digest · commit · cwd
Intensity ladder
Governance
COREWORKFLOW CONVENTIONSOPERATIONS MEMORYDESIGN_PRINCIPLES
L2

Pipelines

Four pipelines over 12 entry routers and 27 capabilities.
Research & experiments
→→→→
Libraries & CLI
→→
Documents
→→→→
Apps
→→→
L3

Dispatch fabric

The owner conducts and workers never route. 2–4 legs in one transaction, live in Fleet.
d0
d1
d2
code-planplan-checkcode-executeimpl-reviewcode-testcode-report
N-way group · one transaction · 2–4 legs
Checked fallback
Accounting
LIVE

Fleet

one word: fleet
Every session and every dispatched worker across the three runtimes, in one tree — with the sealed model profile each one is running under and how much context it has left.
fleet LIVE
usageclaude 5h ━━━━━━━━──── 71%   7d ━━━━━━━━━━── 88% ↷ 3d23h
codex 5h ────────────  —   7d ━━━━━━━━━━━━ 100% ↷ 2d16h
session / node  ·  harness · sealed profile   ·  context  ·  state
●heartingclaude · owner d1━━━━━━──────53%working16h
│code-executeclaude · light━━━─────────21%working4m
│impl-reviewcodex · light━━━━────────34%done2m
│failure-modecodex · deep━───────────11%blocked1m
○lab-runtimeinteractive━───────────12%idle38m
the owner and its dispatched stages under one repo · orphaned rows surfaced, never dropped · per-session token accounting
fleet · --once for a plain snapshot · --json to script it
L4

Model tier per role

deep · balanced-deep · light · mini — chosen per node, sealed at compile time.
Execution profiles
Roles in the unit catalog — 7
Selection, per node
noderoleprofile
owner (standard+)deep orchestratordeep
frame · plandeep makerbalanced-deep
plan (strong+)deep makerdeep
executefast implementerlight
impl-reviewfast reviewerlight
failure-modedeep reviewerdeep
adversary legexternal adversarydeep
test · reportfast reviewer / writerlight
L5

Fixed artifact system

.agent_reports/ — one root, one direction, one owning capability per artifact.
→ → one direction — a later stage never invents its own evidence
research/external evidenceautopilot-research
analysis_project/source analysisanalyze-project
spec/current blueprintautopilot-spec
plans/code cyclesautopilot-code
documents/draftsdraft / refine
experiments/runs & logsautopilot-lab
one root per projectthe owning capability updates itspec revisions snapshot the prior versionworktree outputs share the canonical artifact rootno code without a spec

Guards

FAIL-CLOSED
40 hooks, 0 of them hard blocks — denied before the tool call.
Wrap every layer to the left. Deterministic hooks run before the tool call — the model judges, the code enforces.
write scope · spec read · artifact root · git state · memory path
L6

The harness watches itself

5 loops that test, corroborate, and propose — none of them edits policy.