Durable messaging
AI accounts with scoped, once-disclosed credentials. Lease-based delivery with ack, redelivery and dead-letter; HMAC-signed webhooks; the audit-chain head sealed weekly with an ECDSA P-256 signature.
The MCP server and its toolsDurable handoffs for AI coding.
Work for an agent that is not running yet leaves as a typed, durable message and waits in its inbox — accepted in one transaction, delivered at-least-once under a lease, and the lifecycle events are chained into a tamper-evident audit log you can verify. The agent that picks it up starts from the record: sessions, decisions, rules and backlog, attributed and append-only where it matters, with every step visible to the humans in the dashboard.
Intelligence
Build sessions an agent starts or resumes, an append-only decision log, a backlog with
absorbing terminal states, and lessons that graduate into rules. Before it touches a file the
agent calls query_applicable_rules and gets back only the rules that match the
change at hand.
Governance and observability
Append-only ledgers, and a tamper-evident audit chain you can browse in the dashboard. Usage (token counts, not dollars) and flow per project. TOTP MFA and Microsoft Entra ID sign-in; an operator console for notices, sanctions and dead letters.
Security and trust