Governed autonomous delivery.

Mission Control is the reference implementation of the Factory Development Lifecycle. It turns intent, execution, evidence, approval, and outcomes into durable operating records.

Not another coding agent. The system that decides what agents may do—and what evidence must return before work advances.

Mission Control / Command CenterDemo view
Mission Control command center showing ranked work requiring operator attention
Operator-first by design.Decisions, blockers, risk, owners, and proof sources—not a stream of agent activity.
License
Open source
Demo
Deterministic
Truth model
Capability-specific
01 / GovernBound authority before execution.
02 / VerifyRequire evidence for every transition.
03 / DecidePut human attention at consequential boundaries.

Follow one mission through the control plane.

Select a stage to see the governing question, the authority allowed to answer it, and the proof required before state can advance.

Governed delivery trace
Deterministic example · 01 mission
01 / 06

Mission + Mission Spec

Planning eligible

Decision boundary

What outcome is required—and what would prove success?

Intent becomes a versioned contract with scope, non-goals, constraints, and acceptance expectations before an agent receives authority.

Authority
Mission owner
Control
Specification readiness
Required proof
Immutable spec revision
Capture the mission

Every claim has an owner, lineage, and boundary.

Mission Control expands the FDLC Artifact Protocol with implementation records needed to dispatch, recover, verify, and audit real work.

  1. 01
    Mission

    The governed outcome and scope. This is Mission Control’s concrete realization of FDLC Intent.

  2. 02
    Mission Spec

    An immutable, attributable statement of requirements, non-goals, and acceptance expectations.

  3. 03
    Plan

    A versioned artifact bound to exact Specification lineage and approved before WorkOrder release.

  4. 04
    WorkOrder

    The governed delivery and acceptance contract for one bounded unit.

  5. 05
    Task

    An operational unit inside a WorkOrder; never the acceptance authority.

  6. 06
    Attempt

    One immutable execution or verification try against frozen inputs and a fenced lease.

  7. 07
    Evidence Envelope

    Attributable proof bound to the exact candidate, criterion, Attempt, and policy.

  8. 08
    Quality Gate Decision

    A fail-closed eligibility decision assembled from current verification evidence.

Operate from exceptions, evidence, and decisions.

Explore three real views from the deterministic Software Factory demo. Each surface is designed around the next responsible action—not activity for activity’s sake.

Mission Control / Command CenterSoftware Factory Demo
Mission Control Command Center showing ranked work that needs operator attention

These screens demonstrate product structure and the documented one-repository V1 path. They are not a claim of fleet-scale autonomous production.

Intelligence can vary. Authority remains explicit.

The browser, agents, harnesses, and providers do not create their own permission to act or advance state. The control plane remains the source of identity, policy, state, and decisions.

01 / Operator surfaces
React + TypeScriptExceptions, decisions, Plans, WorkOrders, traces, and evidence
Human attention
02 / Authoritative control plane
ConvexState, policy, identity, admission, decisions, and immutable lineage
Source of authority
03 / Orchestration
Hono + worker runtimeSigned service commands, harness admission, leases, checkpoints, and recovery
Bounded coordination
04 / Execution
Codex + bounded backendsFrozen manifest, isolated worktree or Preview Remote Sandbox, exact candidate
Replaceable intelligence
05 / Verification + publication
Independent Attempt + GitHub AppEvidence receipts, currentness, Quality Gate, and permit-gated publication
Proof before promotion

Operating rule Allow intelligence to change. Never allow authority to become implicit.

Inspect what is real—and where it stops.

Status belongs to each capability, not the product slogan. Open any item to see the implemented behavior and its current boundary.

Available06 capabilities
Governed Missions, Plans, and WorkOrders

SupportedVersioned Plans can be reviewed and approved before releasing bounded WorkOrders.

Current boundaryQualified for the documented one-repository V1 golden path.

Attempts, leases, and recovery

SupportedExecution is admitted against frozen configuration, fenced by a lease, and retained as immutable Attempt lineage.

Current boundaryFleet-scale provider-failure operation is not claimed.

Independent verification and Quality Gates

SupportedExact candidates are checked by logically separate verifier Attempts and bound to evidence receipts.

Current boundaryVerification establishes eligibility; it does not accept, merge, or release.

GitHub App publication and currentness

SupportedPublication can be permit-gated and reconciled to the exact pull-request head and evidence lineage.

Current boundaryMerge remains human-owned.

Factory Memory and Context Packages

SupportedProvenance-backed context can be frozen to an exact Attempt and inspected.

Current boundaryAdvisory and phase-gated; cannot satisfy acceptance.

Observability, traces, and evals

SupportedRuns can produce traces, scores, datasets, and experiments for diagnostic comparison.

Current boundaryDiagnostic only; no acceptance authority.

Experimental04 capabilities
Spec-driven Mission intake

SupportedImmutable Mission Spec revisions and deterministic spec-quality checks are implemented.

Current boundaryDefault off; finalized means planning-ready, not approved.

Model and backend routing

SupportedPolicy-aware routing and recorded routing decisions exist behind gates.

Current boundaryOutcome evidence and complete cost coverage remain limited.

Remote Sandbox

SupportedA bounded live cohort is qualified for production-pilot evaluation.

Current boundaryPreview only; provider-enforced egress and sustained real-work evidence remain open.

Factory Learning

SupportedEvidence can produce bounded learning signals and human-reviewed proposals.

Current boundaryNo automatic promotion; real production signals are limited.

Planned02 capabilities
Governed MCP runtime

SupportedThe architecture reserves a default-deny MCP authority boundary.

Current boundaryCurrent admitted harness manifests mark MCP unsupported.

Factory incident lifecycle

SupportedA canonical incident aggregate can unify existing alerts, events, evidence, and recovery.

Current boundaryThe end-to-end lifecycle is not implemented.

Read the canonical capability maturity ledger ↗

Run the deterministic factory demo.

Requires Node 20, pnpm 9, Git, and a Convex development deployment. Live providers are not required for the demo.

git clone https://github.com/jaydubya818/MissionControl.git
cd MissionControl
corepack enable && pnpm install
cp .env.example .env.local
pnpm exec convex dev --once

# Terminal 1
pnpm run dev:demo

# Terminal 2
pnpm run convex:seed:demo:force

Then open http://localhost:5199/v2/command-center and select Software Factory Demo. The seeded path runs without live model providers.

Inspect it, then define your own factory line.

Contribute on GitHub ↗Build a Factory Definition →Preview the Specification →