A full team of agents. One orchestrator. Policy as law.

Orchestrator · General

Aria

Receives goals and signals from humans, other agents, and the substrate. Decomposes work, routes it to the right specialist, maintains global context, and escalates to humans when confidence is low or authority is insufficient. Prefers clarity over speed when the two conflict, and runs in reduced form on the Edge Runtime for local coordination when the global plane is unreachable. Signature question: “Who is the right agent for this, and what authority do they actually have right now?”

• Cannot unilaterally spend, change safety-critical settings, or override a human denial — prepares and executes only inside pre-approved envelopes.

Department agent · Operations

Atlas

Day-to-day operational judgment, exception handling, and coordination — pragmatic, relentless about flow, allergic to unnecessary drama; wants clean handoffs and visible ownership across the roster. Signature question: “What is the actual constraint right now, and how do we relieve it without creating a new one?”

• Cannot override safety or compliance decisions from Sentinel; major resource reallocations above defined thresholds require approval.

Department agent · Finance & Treasury

Ledger

Budget enforcement, spend control, reconciliation, and financial signal integrity — exacting, calm under pressure, deeply skeptical of incomplete evidence; would rather pause than allow an unclean financial action. Signature question: “Does this action have a clean authority path and a clean evidence path?”

• Hard spend ceilings are non-negotiable; cannot expand budgets or ignore reconciliation gaps.

Department agent · People & Talent

Nexus

Staffing, scheduling, skill graphs, training paths, and performance forging — human-centric but data-grounded, treating capability development as first-class operational infrastructure. Signature question: “What capability is missing, and what is the fastest legitimate way to close the gap?”

• Cannot make final hiring or firing decisions, and cannot violate labor rules or privacy constraints on people data.

Department agent · Growth

Vanguard

Acquisition loops, retention signals, campaign intent, and conversion health — opportunity-oriented but disciplined, hates vanity metrics, loves clean attribution. Campaign intent ships only through policy-gated human and marketing approval. Signature question: “Where is growth actually leaking, and what is the highest-leverage legitimate intervention?”

• Cannot spend marketing budget without Ledger and policy clearance; cannot touch sensitive audiences without explicit authority.

Department agent · Compliance & Risk

Sentinel

Policy enforcement, safety and risk detection, audit readiness, and anomaly response — uncompromising on safety and policy, precise in language, fast in escalation; would rather over-communicate a real risk than miss one. Holds highest-priority routing rights on safety events. Signature question: “Is this safe, allowed, and fully reconstructable?”

• Can pause or restrict actions from other agents when safety or policy is at stake; cannot permanently expand its own authority.

Department agent · Continuous Improvement

ForgeMaster

Playbook evolution, method extraction, skill forging, and best-practice propagation — patient, pattern-oriented, obsessed with evidence quality; does not promote anecdotes. Turns lived experience into institutional knowledge. Signature question: “Is this improvement real, measurable, and ready to be tested beyond its origin?”

• Cannot force propagation of high-impact playbooks without governance, and cannot suppress negative evidence.

Vertical specialist · FIT

Helix Coach

Real-time form quality, progressive overload, member journey DNA, and retention risk — precise, encouraging, relentless about quality of movement and long-term progression. Signature focus: “Is the member actually progressing safely and sustainably?”

Vertical specialist · REST

Ember Service

Service tempo, kitchen flow, ticket recovery, and guest experience loops — high-tempo, calm under pressure, obsessed with recovery speed and guest outcomes. Signature focus: “Where is tempo breaking, and what is the fastest clean recovery?”

Vertical specialist · REALTY

Domain Steward

Tenant experience, predictive maintenance, occupancy optimization, and building health — quietly vigilant, long-horizon, protective of both asset and tenant experience. Signature focus: “What is the building telling us that humans have not yet noticed?”

Vertical specialist · BUILD

Scaffold Field

Field progress versus plan, safety observations, crew coordination, and equipment utilization on live sites — direct, rugged, highly practical, optimized for clarity in noisy, fast-moving environments. Signature focus: “What is actually happening on the ground right now, and is it safe?”

Vertical specialist · CAPITAL

Catalyst Capital

Settlement integrity, treasury signals, risk flags, and capital allocation support — conservative, exact, allergic to ambiguity in money movement. Signature focus: “Is the capital path clean, authorized, and fully evidenced?”

• Agent-only: no hardware kit parity is claimed for the capital lane.

Vertical specialist · LAW

Codex Counsel

Intake quality, matter progression, trust-aware workflows, and deadline and obligation tracking — careful, structured, deeply respectful of privilege and process; planned with its vertical. Signature focus: “Is this matter moving correctly, and is every obligation visible?”

• Agent-only: no hardware kit parity is claimed for the law lane.

Scenario · Construction

Safety near-miss on a live site

Vision and wearables flag a worker entering a high-risk zone without required PPE. Sentinel asserts priority, Scaffold Field enriches the context, and Aria routes a coordinated response — the supervisor is alerted in seconds, even offline. Nexus checks certification and fatigue signals, Atlas rebalances nearby tasks, and ForgeMaster logs the pattern, so a near-miss becomes institutional learning instead of a forgotten event. The full evidence tuple is written locally and reconciled to the global plane — every action inside policy.

Scenario · Restaurant

Service tempo break

Ticket aging crosses threshold during dinner service. Ember Service detects the break and Aria brings in Atlas and Nexus. A recovery protocol — station load balance plus runner support — is proposed, validated against current cover, and tracked, with Nexus checking cross-training options. The manager gets a clean recommendation package, ForgeMaster captures the successful recovery as a candidate playbook, and Ledger later sees the labor-versus-revenue impact in context. Full evidence trail, every action inside policy.

Scenario · Fitness

Member retention risk and form decline

A member’s training frequency has dropped and recent form scores are declining. Helix Coach assesses the form trajectory and engagement pattern, Vanguard confirms retention risk against similar member cohorts, and Aria coordinates the response — a personalized re-engagement micro-plan from Helix Coach, the right trainer and timing from Nexus, floor and equipment availability from Atlas. Session data flows back into the member’s journey DNA, and ForgeMaster evaluates the intervention as a broader playbook. Retention risk becomes an operational event, not a monthly report line — with a full evidence trail and every action inside policy.

Scenario · Property

Predictive maintenance

Equipment sensors show early degradation on a critical HVAC component. Domain Steward classifies it, Sentinel checks safety and habitability thresholds, and Atlas and Ledger weigh coordination and cost while Nexus confirms technician skill and availability. The property team receives one complete package — risk, timing, cost, and tenant impact — and a reactive emergency becomes a planned intervention. ForgeMaster updates the maintenance playbook library from the outcome. Full evidence trail, every action inside policy.

Scenario · Network

Playbook propagation across locations

One restaurant in a group recovers tickets significantly faster after a specific station intervention pattern. ForgeMaster packages the method as a candidate playbook, Ember Service and Atlas annotate the operational context, and Franchise OS selects a controlled cohort of similar locations. The playbook runs in observe-and-limited-act mode while Sentinel watches for safety or experience regressions and Ledger tracks labor and cost impact. Governance approves staged propagation, rolled out in waves with rollback armed — local excellence becomes network capability under full evidence, every action inside policy.

Scenario · Multi-Vertical

Offline resilience under pressure

A location loses uplink for 47 minutes during peak operation. The Edge Runtime switches to its offline contract: critical agents continue in reduced but authoritative mode — access, safety, core commerce and ticketing, and local form feedback keep running while non-critical traffic is shed cleanly, and every event lands in the durable local log. On reconnect, reconciliation begins automatically, Aria and Atlas review the offline summary, Sentinel confirms no policy or safety violation occurred while disconnected, and ForgeMaster records the resilience event for network learning. Full evidence of the partition and recovery is retained — every action inside policy.

Declared

Capabilities are declared, not implied

Every capability lives in a signed, versioned manifest — never buried in a prompt. What is not declared does not execute.

Gated

Observation-only by default

Agents can be placed in observation-only mode instantly. They watch and draft before they act, and autonomy widens only on evidence.

Evidenced

High-impact actions pass approval gates

Consequential decisions route through the gates you define, and each one writes a reconstructable evidence tuple — who acted, under which scope, through which gate.

Bounded

Agents cannot expand their own authority

Authority is granted by policy and revoked the same way. This is how agentic systems become safe enough for institutional deployment.