Governed autonomous delivery.

1. 01

   First / Make execution identity explicit

   Separate Model, Agent, Harness, Runtime, Sandbox, and Work Graph records

   Extend the Execution Profile and Attempt manifest with distinct immutable references for Model Profile, Agent Definition, Harness Version, Capability Implementations, Runtime Artifact, Sandbox Profile, Work Graph Version, Orchestrator policy, and Control Plane policy bundle. Show the same boundary map in admission, run inspection, evidence, and incident views.

   Proof before expansion: A failed Attempt can be attributed to one boundary without reconstructing identity from logs. Replacing one component changes only its reference, requires current qualification, and never silently widens authority.

2. 02

   First / Close the operating loop

   Make one real outcome inspectable end to end

   Connect the existing Plan, readiness, Attempts, evidence, human decision, release, and observation records. Present missing proof, unresolved cost, and the next responsible owner in one decision brief.

   Proof before expansion: A controlled workload can be reconstructed after refresh and restart, including failure and recovery. Verification, acceptance, release, and observed value remain distinct.

3. 03

   Next / Qualify capability decisions

   Explain route eligibility and full outcome cost

   Extend the existing routing and inference accounting work with current qualification, rejection reasons, budget reservations, provider reconciliation, and accepted-outcome cost coverage. Reuse the existing capability and Attempt identities.

   Proof before expansion: A separately authorized real cohort proves attributable costs and a qualified fallback. Missing billing stays unknown and an outage cannot trigger an unauthorized substitute.

4. 04

   Next / Prove safe improvement

   Turn observed failures into tested factory changes

   Join production observations and incident records to advisory learning proposals, regression cases, version comparison, and human promotion. Extend containment one control and target at a time.

   Proof before expansion: One observed failure yields a reproducible regression, an evaluated candidate version, an explicit decision, and a separately proven restoration path.

5. 05

   Later / Expand from measured demand

   Add fair scheduling and broader coordination

   Extend bounded scheduling, parent/child budget conservation, integration verification, and tenant isolation when the initial operating loop proves the need. Keep one shared control plane and reuse qualified capabilities.

   Proof before expansion: Representative contention, cancellation, stale-worker, cross-scope denial, and partial-success drills pass before increasing concurrency or repository scope.

Read the engineering playbook and readiness questions →

1. 01
   Impact graph and blast-radius query

   Traverse Factory Versions, Execution Profiles, capabilities, WorkOrders, Attempts, effects, evidence, approvals, releases, environments, and outcomes with currentness and explicit unknown states.

2. 02
   Incident command and decision timeline

   Bind severity, owners, hypotheses, decisions, commands, acknowledgements, observed enforcement, communications, handoffs, and evidence to one durable incident identity.

3. 03
   Scoped containment and degraded modes

   Extend the qualified pause path one subject and control at a time. Reserve capacity for cancellation and reconciliation, require step-up authority, and keep restoration separately authorized.

4. 04
   Saga recovery and effect reconciliation

   Show partial dependency-graph state, operation receipts, unknown effects, orphaned work, compensation choices, and the exact safe boundary for a replacement Attempt.

5. 05
   Known-good restoration and verified closure

   Bind recovery candidates to exact artifacts and configuration, then require independent recovery evidence, residual risk, backlog disposition, and governed corrective actions before closure.

Read the production reliability and incident operations playbook →