live · as of 2026-10-28
Consiliences
AI
The multi-agent system that runs everything else -- and the discipline that keeps it honest.
41agents
69tools
207souls
7927tests
5inference providers
Observe → Score → Discard → Surface
Most of what it sees, it throws away.
Each agent observes, scores against its standing goal, discards the overwhelming majority, and surfaces only what survives -- thousands of times a day, with no one watching. It is the loop many agents share; others do the work in the wall above.
OBSERVE
SCORE
SURFACE
Not chatbots waiting for a prompt
A capability map, with its limits attached.
Five families -- Watch, Think, Make, Govern, Evolve. Hover, focus or tap a tile for its scope and review status. This is a map of implemented and documented capabilities, not a count of agents currently running.
Scan & surface
score, discard, surface
Inherited catalogue entry; not rechecked
Scan & surface
The core loop: watch feeds, the corpus and the other agents, score against the standing goal, discard the noise, surface only survivors -- thousands of times a day.
Inherited catalogue entry; not rechecked
the heartbeatcontinuous
Read prediction markets
market-implied odds
Inherited catalogue entry; not rechecked
Read prediction markets
A no-LLM reader pulls live prediction-market positions into a desk note that rides the Observatory digest.
Inherited catalogue entry; not rechecked
polymarket oracledaily
Track readership
reads to lenses
Inherited catalogue entry; not rechecked
Track readership
Attributes anonymous Cloudflare analytics back to the lenses and personas that wrote each piece. Measurement only, no personal tracking.
Inherited catalogue entry; not rechecked
Cloudflare RUMdaily
Watch the macro
regime from FRED
Inherited catalogue entry; not rechecked
Watch the macro
Pulls DGS10, T10Y2Y, NFCI, and UNRATE from FRED each run to derive a coarse macro regime -- risk-on, neutral, or risk-off -- that rides the daily briefings.
Inherited catalogue entry; not rechecked
FRED macrodaily
Watch smart money
insider + 13F flow
Inherited catalogue entry; not rechecked
Watch smart money
Reads Finnhub Form-4 insider net direction and yfinance 13F holder-direction to produce a coarse accumulating/neutral/distributing tier alongside the momentum composite.
Inherited catalogue entry; not rechecked
Finnhub / yfinanceper-run
Ingest market data
prices, ratios, factors
Inherited catalogue entry; not rechecked
Ingest market data
Fetches price momentum, valuation ratios (pe/pb/fcf), and factor data from FMP and yfinance; falls back to a yfinance second pass when primary data returns a 402.
Inherited catalogue entry; not rechecked
yfinance / FMPper-run
Cross-ref clinical trials
live trial registry
Inherited catalogue entry; not rechecked
Cross-ref clinical trials
Queries ClinicalTrials.gov (via MCP + recognised search domain) as a live cross-reference for the medical / pharma signals -- e.g. the freq_pharma cluster -- during validation. A cross-reference, not a corpus-wide battery step.
Inherited catalogue entry; not rechecked
ClinicalTrials.gov MCPper pharma signal
ENSO / climate data
cached climate indices
Inherited catalogue entry; not rechecked
ENSO / climate data
Cached NOAA teleconnection indices (ONI / ENSO phase, AMO, NAO, PDO) that climate-adjacent Observatory signals draw on, re-fetched by the validators on a freshness window.
Inherited catalogue entry; not rechecked
NOAA cachecached
FAO / agri data
cached food-price data
Inherited catalogue entry; not rechecked
FAO / agri data
Cached FAO Food Price Index and USDA crop data that food-system and inflation signals cross-reference, re-fetched by the validators on a freshness window.
Inherited catalogue entry; not rechecked
FAO / USDA cachecached
Notice convergence
near-threshold signals
Inherited catalogue entry; not rechecked
Notice convergence
Scans dossiers daily for signals close to the next Whewell tier, surfacing them as a prioritised candidate queue so the operator can commission the right follow-up research.
Inherited catalogue entry; not rechecked
observatory candidatesdaily
Detect drift
freshness gates
Inherited catalogue entry; not rechecked
Detect drift
Age-gates validation data against configurable staleness thresholds and flags signals whose evidence base has not been refreshed within the expected cadence.
Inherited catalogue entry; not rechecked
freshness gatescontinuous
Web search
on-demand retrieval
Inherited catalogue entry; not rechecked
Web search
Issues structured web searches via Tavily on demand -- during research plans, validator runs, and cross-reference steps -- with results attributed in provenance logs.
Inherited catalogue entry; not rechecked
Tavilyon-demand
Web fetch
direct source pull
Inherited catalogue entry; not rechecked
Web fetch
Fetches full page content from a target URL when a search surface alone is insufficient; used by validators and the claim-verification step.
Inherited catalogue entry; not rechecked
fetch MCPon-demand
VIX / vol series
cached vol data
Inherited catalogue entry; not rechecked
VIX / vol series
A cached VIX / VIX3M / VVIX series the Observatory's market-timing signals draw on as a volatility-regime input, re-fetched by the validators.
Inherited catalogue entry; not rechecked
cached vol datacached
COT positioning
cached CFTC data
Inherited catalogue entry; not rechecked
COT positioning
A cached CFTC Commitments-of-Traders dataset (1986-present) that futures-positioning signals cross-reference; re-fetched by the validators, not polled live.
Inherited catalogue entry; not rechecked
CFTC cachecached
Credit spreads
cached risk gauge
Inherited catalogue entry; not rechecked
Credit spreads
Cached FRED credit-spread series the macro signals reference as a risk-appetite input, re-fetched on validator runs (distinct from the live FRED regime above).
Inherited catalogue entry; not rechecked
FRED cachecached
Cycle inputs
cached cycle data
Inherited catalogue entry; not rechecked
Cycle inputs
Cached labelled cycle-phase datasets (e.g. SILSO sunspot number, lunar-node tables) the Observatory's periodicity signals are anchored to.
Inherited catalogue entry; not rechecked
cached datasetscached
Dedupe GUIDs
seen-before check
Inherited catalogue entry; not rechecked
Dedupe GUIDs
Each agent maintains a seen_guids store so duplicate feed items, repeated commissions, and re-delivered events are filtered before any processing begins.
Inherited catalogue entry; not rechecked
seen_guidscontinuous
Scout patents
IP landscape watch
Inherited catalogue entry; not rechecked
Scout patents
A weekly patent-scout agent searches recent filings in configured technology domains and surfaces findings as structured research candidates.
Inherited catalogue entry; not rechecked
patent-scout-001weekly
Probe coverage
source availability check
Inherited catalogue entry; not rechecked
Probe coverage
Runs coverage probes against external data sources before committing to a design that depends on them -- a pre-build step that surfaced, for example, the unavailability of a free congressional-trades source.
Inherited catalogue entry; not rechecked
pre-build probeper-source
Notice missing jobs
silence is also a result
Source reviewed; runtime not checked
Notice missing jobs
Job-health records and cadence checks distinguish successful runs, failures and expected work that did not report. A quiet log alone is not evidence that a job is healthy.
Source reviewed; runtime not checked
job-health trackingscheduled checks
Decompose queries
query to sub-problems
Inherited catalogue entry; not rechecked
Decompose queries
Breaks an incoming research question into typed sub-queries routed to specialist analysts, with a contradiction-first path that maps disagreement before synthesis.
Inherited catalogue entry; not rechecked
query_decomposerper-query
Run research plans
multi-step reasoning
Inherited catalogue entry; not rechecked
Run research plans
Executes multi-step plans -- decompose, gather, cross-check, synthesise -- rather than answering in a single pass.
Inherited catalogue entry; not rechecked
observatory_convergenceper-cycle
Synthesise domains
cross-domain merge
Inherited catalogue entry; not rechecked
Synthesise domains
Merges outputs from parallel analyst lanes into a single coherent synthesis, deduplicated and attributed, with every source provenance rendered in the digest.
Inherited catalogue entry; not rechecked
llm_synthesiseper-plan
Falsify signals
designed to kill
Inherited catalogue entry; not rechecked
Falsify signals
Every candidate signal is run against a battery designed to falsify it; the ones that die are published on the kill list, not buried -- about one in six is killed outright.
Inherited catalogue entry; not rechecked
falsification batteryper-candidate
Monte-carlo battery
bootstrap significance
Inherited catalogue entry; not rechecked
Monte-carlo battery
Battery 1 runs a Monte Carlo permutation test to establish whether the observed effect survives chance at the configured alpha, with results stored flat in validator_results.json.
Inherited catalogue entry; not rechecked
battery 1per-signal
Held-out battery
out-of-sample check
Inherited catalogue entry; not rechecked
Held-out battery
Battery 2 tests signal persistence on a held-out time window not used during discovery, guarding against in-sample over-fit.
Inherited catalogue entry; not rechecked
battery 2per-signal
Robustness battery
sensitivity analysis
Inherited catalogue entry; not rechecked
Robustness battery
Batteries 3 and 4 probe robustness by varying key model assumptions and checking whether the effect survives plausible alternative specifications.
Inherited catalogue entry; not rechecked
battery 3/4per-signal
Detect clustering
echo not confirmation
Inherited catalogue entry; not rechecked
Detect clustering
Flags citations that cluster by domain, time window, or text similarity as narrative echo, not independent confirmation.
Inherited catalogue entry; not rechecked
domain/time/Jaccardper-query
Verify claims
source-anchored check
Source reviewed; runtime not checked
Verify claims
Checks generated claims against a declared evidence corpus and records unsupported or misattributed content. Closed-world support is not proof of truth beyond that corpus, and semantic judgements have measured limits.
Source reviewed; runtime not checked
closed-world provenanceper-claim
Build dossiers
structured evidence file
Inherited catalogue entry; not rechecked
Build dossiers
Assembles and maintains a dossier.json for each signal in the corpus, accumulating evidence layers, verdicts, battery results, and cross-references in a single queryable record.
Inherited catalogue entry; not rechecked
dossier.jsonper-signal
Debate contradictions
adversarial reasoning
Inherited catalogue entry; not rechecked
Debate contradictions
When the query decomposer detects conflicting sub-findings, a debate module stages the contradiction explicitly before the mediator synthesises a resolution.
Inherited catalogue entry; not rechecked
disagreement_mapper-query
Mediate debates
resolve disagreements
Inherited catalogue entry; not rechecked
Mediate debates
A mediator node weighs the debate output, names the strongest and weakest positions, and produces a reconciliation that the writer can use as a grounded foundation.
Inherited catalogue entry; not rechecked
mediatorper-debate
RALPH cycles
iterative refinement
Inherited catalogue entry; not rechecked
RALPH cycles
The RALPH engine runs configurable reflection-and-correction cycles on an initial answer, checking for factual drift and strengthening the evidence basis before final output.
Inherited catalogue entry; not rechecked
RalphEngineper-run
Map mechanisms
cross-cluster links
Inherited catalogue entry; not rechecked
Map mechanisms
A quarterly script maps mechanistic connections between signal clusters, surfacing tier-S convergence candidates where multiple independent lines point to the same underlying mechanism.
Inherited catalogue entry; not rechecked
cross_cluster_mechanism_mapquarterly
Score & route
conditional dispatch
Inherited catalogue entry; not rechecked
Score & route
A supervisor node scores the current state and selects the next graph branch -- debate, writer-critic, or output -- based on evidence quality and policy thresholds.
Inherited catalogue entry; not rechecked
supervisorper-node
Rank candidates
momentum, value, catalyst
Inherited catalogue entry; not rechecked
Rank candidates
The finance ranker screens a universe of equities on momentum, valuation, and catalyst factors, ranks by composite score, and deep-dives the top picks using enriched data.
Inherited catalogue entry; not rechecked
finance_rankerper-run
Whewell ceiling
evidence-tier cap
Inherited catalogue entry; not rechecked
Whewell ceiling
Enforces the Whewell verification ceiling: a signal's verdict tier is capped by the highest Whewell criterion it has actually satisfied, preventing inflation by narrative alone.
Inherited catalogue entry; not rechecked
verdict capper-signal
Tier signals
A / B / C classification
Inherited catalogue entry; not rechecked
Tier signals
Classifies each validated signal into a publication tier (static/attested, teaser-eligible, gated proprietary) that governs what content the pipeline can generate from it.
Inherited catalogue entry; not rechecked
validation tiersper-signal
Embed & retrieve
semantic search
Inherited catalogue entry; not rechecked
Embed & retrieve
FastEmbed runs locally to embed signals, personas, and story seeds; FAISS indexes enable cosine-similarity retrieval without any external embedding API call.
Inherited catalogue entry; not rechecked
FastEmbed / FAISScontinuous
Detect bias
scoring-bias check
Inherited catalogue entry; not rechecked
Detect bias
A lightweight check on every agent heartbeat flags when the recent scoring distribution shows signs of confirmation bias, surfacing the warning in structured logs.
Inherited catalogue entry; not rechecked
scoring_biascontinuous
Recall across sessions
cross-thread grounding
Inherited catalogue entry; not rechecked
Recall across sessions
Agents ground their planning in relevant history from prior conversations and prior runs, not just the current context window -- retrieved by meaning, not by keyword.
Inherited catalogue entry; not rechecked
cross-thread memoryper-plan
Pre-register hypotheses
prediction before outcome
Built; not armed
Pre-register hypotheses
The Popperian Engine contains hypothesis generators, admission gates and an append-only prediction ledger. It is built but not armed; judge calibration and the admission criterion remain open. No autonomous-discovery result is claimed.
Built; not armed
hypothesis engineon demand
Resolve against observations
objective outcome rules
Built; not armed
Resolve against observations
The hypothesis engine has oracle-based resolution and mechanical verdict folding after admission. That separates outcome evaluation from an LLM opinion. The engine remains unarmed.
Built; not armed
oracle resolutionon demand
Evaluate ranker skill
fixed-horizon cohorts
Source reviewed; runtime not checked
Evaluate ranker skill
Pairs saved rankings with later outcomes and reports how well individual scoring pillars order them, with date-clustered uncertainty intervals. This is an experimental evaluation tool, not evidence of a profitable edge.
Source reviewed; runtime not checked
cohort evaluationon demand
Keep signal state explicit
triggered, dormant, stale
Source reviewed; runtime not checked
Keep signal state explicit
An operator-selected signal desk evaluates configured conditions and separates triggered, neutral, dormant and stale inputs. It does not choose a portfolio or execute trades.
Source reviewed; runtime not checked
signal deskon demand
Inspect portfolio exposure
risk with explicit unknowns
Source reviewed; runtime not checked
Inspect portfolio exposure
Research tooling calculates exposure, correlations and hedge coverage from supplied holdings and price data. Missing hedge leverage is reported as unknown. It is an experimental readout, not a trading system.
Source reviewed; runtime not checked
book-risk calculationson demand
Track changing requirements
current authority matters
Source reviewed; runtime not checked
Track changing requirements
The claim-verification library can track revisions to requirements and flag a superseded citation, an unsettled revision or a change without the required authority. This is a library capability; no client deployment is implied.
Source reviewed; runtime not checked
versioned claimson demand
Write digests
recurring briefings
Inherited catalogue entry; not rechecked
Write digests
Composes and delivers recurring briefings -- markets Mon/Wed/Fri, platform health daily, the AI landscape -- each behind a leak-proof synthesis prompt.
Inherited catalogue entry; not rechecked
portfolio/doctor agentsscheduled
Commission news
story to publication
Inherited catalogue entry; not rechecked
Commission news
Picks the day's most significant story under a topic-diversity gate, commissions perspectives across dozens of personas and lenses, runs a quality gate, and publishes to Angles & Footnotes.
Inherited catalogue entry; not rechecked
A&F runnerdaily
Run the debate
multi-voice argument
Inherited catalogue entry; not rechecked
Run the debate
Stages a structured multi-persona debate on a news story, surfacing genuine disagreement across lenses before the mediator synthesises the final published piece.
Inherited catalogue entry; not rechecked
debate moduleper-story
Publish papers
long-cycle research
Inherited catalogue entry; not rechecked
Publish papers
The Institute publication pipeline takes Observatory signals through LLM drafting, an attribution gate, a per-paragraph operator review, and atomic Hugo publication to consiliences.com.
Inherited catalogue entry; not rechecked
the Institutelong-cycle
Publish essays
Phronopolis output
Inherited catalogue entry; not rechecked
Publish essays
Generates and publishes stand-alone analytical essays to Phronopolis, the operator's public-facing writing site, under the explicit --publish flag.
Inherited catalogue entry; not rechecked
Phronopolison-demand
Gate teasers
B-tier public content
Inherited catalogue entry; not rechecked
Gate teasers
The content pipeline generates Tier-B teaser posts -- free public previews of proprietary Tier-C research -- through the Institute's three-tier content flow.
Inherited catalogue entry; not rechecked
content pipelineper-paper
Rank & brief
daily equity brief
Inherited catalogue entry; not rechecked
Rank & brief
Screens a universe of equities, ranks on momentum/valuation/catalyst, deep-dives the top few, and ships a daily operational brief as an announced PDF, tracked against the S&P 500.
Inherited catalogue entry; not rechecked
stock-rankerweekday
Keep a scoreboard
track record vs SPY
Inherited catalogue entry; not rechecked
Keep a scoreboard
Maintains an active/archived lifecycle for every surfaced equity: entry and exit prices cached once, active picks re-priced daily, returns compared against SPY in the daily paper and the ops dashboard.
Inherited catalogue entry; not rechecked
scoreboarddaily
Reception notes
weekly engagement desk-note
Inherited catalogue entry; not rechecked
Reception notes
Aggregates the readership map by topic each week and delivers a structured Telegram desk-note summarising which subjects drew the most reader attention.
Inherited catalogue entry; not rechecked
reception-001weekly
Generate images
on-demand illustration
Inherited catalogue entry; not rechecked
Generate images
Calls the Google Imagen API to generate illustrative images for published content on demand, at roughly two cents per image.
Inherited catalogue entry; not rechecked
Imagenon-demand
Generate charts
data visualisations
Inherited catalogue entry; not rechecked
Generate charts
Renders data charts as static shortcodes embedded in Hugo pages, produced from signal data and updated on each site build.
Inherited catalogue entry; not rechecked
chart shortcodeson-demand
Build dashboards
ops stats JSON
Inherited catalogue entry; not rechecked
Build dashboards
Computes and writes a dashboard_stats.json payload at each site build, feeding the live platform metrics visible in the operator dashboard.
Inherited catalogue entry; not rechecked
build_dashboard_statsper-build
Deliver to Telegram
live notifications
Inherited catalogue entry; not rechecked
Deliver to Telegram
Routes digests, papers, approval requests, and alert findings to Telegram via a bot; every send primitive returns a typed result so silent-swallow failures are detectable.
Inherited catalogue entry; not rechecked
bot + notifierlive
Maintain the sites
atomic Hugo publish
Inherited catalogue entry; not rechecked
Maintain the sites
The publisher writes Hugo content files atomically, builds the static site, and manages the deploy pipeline for consiliences.com and the Angles & Footnotes newswire site.
Inherited catalogue entry; not rechecked
publisher.pyper-publish
Trade-desk notes
daily structured note
Inherited catalogue entry; not rechecked
Trade-desk notes
Produces a structured desk note combining the macro regime, smart-money tier, and equity ranking into a compact daily briefing that rides the Observatory digest.
Inherited catalogue entry; not rechecked
desk notedaily
Author disclosure
attribution gate
Inherited catalogue entry; not rechecked
Author disclosure
Enforces the four-sentence Author Disclosure for any Tier-A content attributed to the operator, checked by the audit gate before publication is permitted.
Inherited catalogue entry; not rechecked
attribution gateper-paper
Compose OG cards
social meta images
Inherited catalogue entry; not rechecked
Compose OG cards
Generates Open Graph image metadata for each published page so social sharing surfaces a consistent, informative preview card.
Inherited catalogue entry; not rechecked
og-imageper-page
Cross-wing links
site nav sync
Inherited catalogue entry; not rechecked
Cross-wing links
Synchronises the top-strip navigation links across all Consiliences-family sites at each build, keeping the cross-wing navigation consistent.
Inherited catalogue entry; not rechecked
top-strip syncper-build
Build sitemaps
sitemap + llms.txt
Inherited catalogue entry; not rechecked
Build sitemaps
Generates Hugo sitemaps and an llms.txt machine-readable index at each build, keeping crawlers and LLM agents oriented on the current site structure.
Inherited catalogue entry; not rechecked
sitemap / llms.txtper-build
Notify on new
event-driven alerts
Inherited catalogue entry; not rechecked
Notify on new
Maintains a notified.json dedup store so each distinct event -- new paper, new Observatory candidate, new commission -- generates exactly one Telegram notification.
Inherited catalogue entry; not rechecked
notified.jsonevent
Render provenance
tool-level attribution
Inherited catalogue entry; not rechecked
Render provenance
Renders the tool-call provenance chain in each digest, showing which data sources contributed to each synthesised claim rather than presenting conclusions without trail.
Inherited catalogue entry; not rechecked
tool provenanceper-digest
Caption honestly
as-of timestamps
Inherited catalogue entry; not rechecked
Caption honestly
Every rendered data view carries an as-of caption and a forward-test disclaimer so readers know exactly when the underlying data was last refreshed.
Inherited catalogue entry; not rechecked
as-of captionper-render
Draft under review
Tier-A gated draft
Inherited catalogue entry; not rechecked
Draft under review
Tier-A content attributed to the operator is always drafted with draft:true and requires per-paragraph HITL review before the operator promotes it to published.
Inherited catalogue entry; not rechecked
tier-A gateper-draft
Bundle papers
PDF + Telegram delivery
Inherited catalogue entry; not rechecked
Bundle papers
Renders completed research papers as announced PDFs and delivers them to Telegram via paper_notify, with weekday-gating and idempotency to prevent duplicate sends.
Inherited catalogue entry; not rechecked
paper_notifyper-paper
Paint its own art
local SVG lab-notes
Inherited catalogue entry; not rechecked
Paint its own art
A local two-stage pipeline -- an authored art-brief, then a painted SVG -- illustrates lab notes without calling any external image API.
Inherited catalogue entry; not rechecked
SVG lab-note pipelineper-note
Route to the frontier
quality-gated escalation
Inherited catalogue entry; not rechecked
Route to the frontier
Certain lens essays route to a frontier model when local output doesn't clear the quality bar -- decided by measured substance-score deltas, not a blanket preference for one model over another.
Inherited catalogue entry; not rechecked
frontier-writer lanestory-gated
Sync a second brain
bidirectional vault loop
Inherited catalogue entry; not rechecked
Sync a second brain
Pushes daily briefings into the operator's personal knowledge vault and reads back routed questions from a capture queue -- a two-way loop, not a one-way export.
Inherited catalogue entry; not rechecked
obsidian_syncscheduled
Draft short fiction
generation to reviewed collection
Source reviewed; runtime not checked
Draft short fiction
A separate fiction workflow drafts stories, applies mechanical checks and assembles publication files. Quality grading and final publication decisions remain manual.
Source reviewed; runtime not checked
fiction workflowhuman commissioned
Maintain a novel state
continuity across chapters
Source reviewed; runtime not checked
Maintain a novel state
A novel workflow carries a beat spine and structured story state through chapter drafting and review. Drafts, edits and quality judgements have separate records; a generated chapter is not automatically an accepted chapter.
Source reviewed; runtime not checked
long-form fiction workflowhuman commissioned
Prepare narrated audio
cast, freeze, correct, listen
Source reviewed; runtime not checked
Prepare narrated audio
The audio toolchain supports local narration, saved voice references and correction of drift across generated chunks. Measurements guide correction, while listening acceptance remains a separate step. This is production tooling, not a claim that every correction has passed.
Source reviewed; runtime not checked
narration toolchainhuman supervised
Audit itself
agent integrity check
Inherited catalogue entry; not rechecked
Audit itself
An auditor scores the integrity of the other agents and routes severity findings to the operator; it recommends suspension, it never silently suspends.
Inherited catalogue entry; not rechecked
auditorcontinuous
Monitor Observatory
pipeline watchdog
Inherited catalogue entry; not rechecked
Monitor Observatory
A dedicated monitor agent watches the Observatory research pipeline for stalls, missing output, and anomalous patterns, alerting the operator before issues compound.
Inherited catalogue entry; not rechecked
obs-monitorcontinuous
Close findings
escalation-only closer
Inherited catalogue entry; not rechecked
Close findings
The closer-consiliences agent scans findings for those close enough to resolution to escalate to the operator -- advisory only, with no autonomous write-back to signals.
Inherited catalogue entry; not rechecked
closer-consiliencesescalate-only
Gate by trust
four-tier model
Inherited catalogue entry; not rechecked
Gate by trust
Every agent sits at a trust tier -- supervised, semi-auto, monitored, autonomous -- and promotion between tiers is always a human decision.
Inherited catalogue entry; not rechecked
trust gateper-action
Contain subprocess
hardened execution
Inherited catalogue entry; not rechecked
Contain subprocess
Subprocess calls run through a hardened helper: shell-false, scrubbed environment, binary allow-list, hard timeout.
Inherited catalogue entry; not rechecked
run_safealways
Air-gapped mode
egress kill-switch
Inherited catalogue entry; not rechecked
Air-gapped mode
A two-layer air-gap zeroes cloud-API env vars and choke-points all egress paths; activating it cuts every cloud LLM and search call without touching agent logic.
Inherited catalogue entry; not rechecked
airgapped.pyon-demand
Log everything
human-auditable trail
Inherited catalogue entry; not rechecked
Log everything
Every agent lifecycle state change -- suspend, resume, remove -- appends a timestamped row to human_audit_log.jsonl so the full operator-action history is recoverable.
Inherited catalogue entry; not rechecked
human_audit_logper-action
Govern cost
circuit breaker
Inherited catalogue entry; not rechecked
Govern cost
A circuit breaker tracks per-call and rolling spend against configured ceilings; once tripped, further cloud-LLM calls are refused until the window resets.
Inherited catalogue entry; not rechecked
circuit breakerper-call
Quality-gate lenses
substance before publish
Inherited catalogue entry; not rechecked
Quality-gate lenses
Before any news piece is assembled, each perspective is judged on substance, voice, and engagement; those below the floor are dropped and the story is held if fewer than two survive.
Inherited catalogue entry; not rechecked
lens_gateper-story
Gate publication
SP4 fabrication check
Inherited catalogue entry; not rechecked
Gate publication
The SP4 gate checks each published paper for token-level fabrication before it reaches the public, surfacing findings in frontmatter so the operator's review is fully informed.
Inherited catalogue entry; not rechecked
SP4 gateper-paper
Lock supply chain
hash-locked deps
Inherited catalogue entry; not rechecked
Lock supply chain
All runtime dependencies are pinned in a hash-locked, OSV-audited requirements file; a CI gate refuses merges when the lock drifts from the installed venv.
Inherited catalogue entry; not rechecked
oh312-hardenedper-change
Pattern-sweep
bug-class guard
Inherited catalogue entry; not rechecked
Pattern-sweep
A pre-commit hook identifies bug-class patterns in staged hunks -- untimed subprocess calls, hardcoded empty lists, new API hosts -- and greps the repo for siblings before the commit lands.
Inherited catalogue entry; not rechecked
pattern_sweepper-commit
Startup invariants
boot-time assertions
Inherited catalogue entry; not rechecked
Startup invariants
On every init_app() call, 58 invariant checks assert that canonical helpers are in place, security defaults are unchanged, and the supply chain is clean.
Inherited catalogue entry; not rechecked
invariants.pyper-boot
Grade itself against the frontier
drift catch
Inherited catalogue entry; not rechecked
Grade itself against the frontier
A daily sample of local-model output is judged against a frontier model, catching local-model quality drift before it compounds across thousands of downstream calls.
Inherited catalogue entry; not rechecked
ops_sentineldaily
Dedupe by state
condition-change alerting
Inherited catalogue entry; not rechecked
Dedupe by state
Alert logic tracks whether a condition is already flagged rather than using cooldown timers, so each condition change produces exactly one alert and silence confirms resolution.
Inherited catalogue entry; not rechecked
state trackingcontinuous
HITL approvals
human in the loop
Inherited catalogue entry; not rechecked
HITL approvals
High-stakes actions -- trust promotions, autonomous directives, large commits -- are held in a pending_approvals store and require an explicit operator tap before execution.
Inherited catalogue entry; not rechecked
pending_approvalsevent
Housekeeping checks
post-edit integrity
Inherited catalogue entry; not rechecked
Housekeeping checks
After any signal edit, a housekeeping script verifies that verdict_canonical is consistent, required fields are present, and no CRITICAL integrity issues remain before the commit is staged.
Inherited catalogue entry; not rechecked
housekeepingper-edit
Topic-diversity picker
anti-repetition gate
Inherited catalogue entry; not rechecked
Topic-diversity picker
The A&F story picker enforces a topic-diversity window: exact-bucket repeats incur a penalty, same-group commissions stack penalties, and no topic dominates a 36-hour window.
Inherited catalogue entry; not rechecked
A&F pickerdaily
Persona-rights gate
safe attribution only
Inherited catalogue entry; not rechecked
Persona-rights gate
PUBLISHABLE_PERSONAS and INTERNAL_ONLY_PERSONAS constants control which voices may appear in public output; living or litigious figures never reach client-facing content.
Inherited catalogue entry; not rechecked
persona constantsper-publish
Verify before done
effect confirmed, not called
Source reviewed; runtime not checked
Verify before done
Verification before completion is an operating rule backed by checks at specific seams. It is not a claim that every completion report has been independently verified.
Source reviewed; runtime not checked
verification ruleper-task
Concurrency lock
single-runner semaphore
Inherited catalogue entry; not rechecked
Concurrency lock
A process-level semaphore prevents concurrent heavy jobs from racing on shared resources; the scheduler, runner, and ad-hoc sessions all contend through the same lock.
Inherited catalogue entry; not rechecked
runner semaphorealways
Record the actual judge call
prompt hash; identity if supplied
Source reviewed; runtime not checked
Record the actual judge call
Judge-call provenance hashes the exact prompt and preserves model metadata reported with the response. Plain text leaves identity unknown; a response label does not prove model weights or calibrate a verdict.
Source reviewed; runtime not checked
judge-call provenanceinstrumented calls
Restrict claim egress
audience-aware evidence
Source reviewed; runtime not checked
Restrict claim egress
The claim library includes an audience-tier check that can refuse evidence not approved for the destination. This is a component-level control, not a guarantee that every output path invokes it.
Source reviewed; runtime not checked
claim-egress libraryat integrated boundaries
Verify successor pickup
work survives a session
Source reviewed; runtime not checked
Verify successor pickup
The coding workflow has structured handoff preparation and pickup checks around a durable lane record. A successor must establish what it inherited; a farewell message is not the state of the work.
Source reviewed; runtime not checked
coding-workflow handoffssession transitions
Fence retired writers
authority moves with the lane
Source reviewed; runtime not checked
Fence retired writers
The coding workflow includes a predecessor fence tied to a transferred lane lease. Enforcement depends on the harness bridge or hook that consults it; the source alone does not prove delivery in every session.
Source reviewed; runtime not checked
handoff fenceintegrated tool boundaries
Improve its own code
platform building platform
Inherited catalogue entry; not rechecked
Improve its own code
The system mines its own gaps, commissions a code fix for one, and files it as a proposal -- a human approves and applies it. The platform helping build the platform, behind a human gate.
Inherited catalogue entry; not rechecked
F6 loophuman-gated
Mine its own gaps
self-diagnosis
Inherited catalogue entry; not rechecked
Mine its own gaps
The gap-miner continuously scans the codebase for classes of known bug patterns, stale abstractions, and missing tests, writing structured gap records for the F6 commissioning loop.
Inherited catalogue entry; not rechecked
gap-minercontinuous
Propose & apply
atomic change system
Inherited catalogue entry; not rechecked
Propose & apply
Code changes land through a proposal system that validates, hash-checks, backs up, and applies atomically -- all files or none, with rollback on any error.
Inherited catalogue entry; not rechecked
SwarmProposalatomic
Rewrite its soul
performance-driven voice
Source reviewed; runtime not checked
Rewrite its soul
Soul-reflection machinery can propose changes to an agent identity or goal weighting. Applicability and approval depend on the subsystem; the fiction workflow explicitly forbids automatic soul evolution.
Source reviewed; runtime not checked
soul reflectionperformance-driven
Commission own fixes
gap to proposal
Inherited catalogue entry; not rechecked
Commission own fixes
The F6 commissioner reads a gap record, selects an LLM model appropriate to the fix complexity, drafts a SwarmProposal, and files it for operator review -- no direct code write.
Inherited catalogue entry; not rechecked
F6 commissionerper-gap
Promote with evidence
trust level up
Inherited catalogue entry; not rechecked
Promote with evidence
Trust-promotion scripts bundle liveness evidence, safety metrics, and gap history into a proposal packet; a human reviews the packet and promotes -- or declines -- the agent.
Inherited catalogue entry; not rechecked
trust-promotionon-demand
Self-heal on restart
persist and restore
Source reviewed; runtime not checked
Self-heal on restart
The agent runtime contains persistence and restoration paths for state such as cooldowns, approvals and deduplication. This is recovery machinery, not a promise that a restart can lose only in-flight scoring.
Source reviewed; runtime not checked
persist + restorealways
Learn from feedback
closed feedback loops
Source reviewed; runtime not checked
Learn from feedback
A feedback-loop contract records intended measurement-to-action pairs. Wiring and observed benefit are separate questions; a listed loop is not by itself evidence of improvement.
Source reviewed; runtime not checked
feedback loopscontinuous
Reconcile registry
agent lifecycle CLI
Inherited catalogue entry; not rechecked
Reconcile registry
The agent_lifecycle CLI is the only permitted path for adding, suspending, resuming, or removing agents; every state change appends to the human audit log and a pre-commit hook enforces the invariant.
Inherited catalogue entry; not rechecked
agent_lifecycleon-demand
Backoff failing models
per-model mute
Inherited catalogue entry; not rechecked
Backoff failing models
When a gap's commissioned model fails a configurable number of times, the gap is muted for that model and the counter resets on model change, preventing runaway retries.
Inherited catalogue entry; not rechecked
F6 muteper-gap
Serialize commits
scheduled auto-commit
Inherited catalogue entry; not rechecked
Serialize commits
Applied proposals accumulate in a pending-commit ledger; a scheduled job commits and pushes them with explicit file paths every 15 minutes, keeping the main branch current without operator intervention.
Inherited catalogue entry; not rechecked
pending_commitscheduled
Tune its own gates
measured rollout
Inherited catalogue entry; not rechecked
Tune its own gates
Configuration knobs for gates, penalties, and thresholds are adjusted only after empirical measurement -- lens survival rates, over-fire rates, engagement distributions -- with rollback paths documented before any flip.
Inherited catalogue entry; not rechecked
measured rolloutmeasured
Distill its own lessons
cross-session learnings
Inherited catalogue entry; not rechecked
Distill its own lessons
A two-tier knowledge base mines its own history -- handoffs, bug fixes, decisions -- into reviewed, cross-session-recallable principles, gated by human approval before a lesson is promoted to canonical.
Inherited catalogue entry; not rechecked
learnings KBweekly + on-demand
Measure its own improvement
not just active -- working
Source reviewed; runtime not checked
Measure its own improvement
The effect ledger and grading tools record evidence about applied changes. Evaluation remains a central limitation; activity and finding closures must not be presented as demonstrated recursive gain.
Source reviewed; runtime not checked
RSI effect ledgercontinuous
Join a fix to its outcome
gap through grade
Source reviewed; runtime not checked
Join a fix to its outcome
A read-only lineage report joins a gap, commission, verdict, decision, application, effect and grade by their recorded identifiers. Missing stages stay visible. Event volume is not an improvement result.
Source reviewed; runtime not checked
improvement-lineage reporton demand
Demand a real regression
red before; green after
Source reviewed; runtime not checked
Demand a real regression
The improvement programme separates ordinary repairs from its stricter compounding claim: a defect in prior code, a regression that changes from failing to passing, and evidence the failure actually occurred. The catalogue makes no current gain-count claim.
Source reviewed; runtime not checked
RSI evidence standardreviewed changes
Selected additions and revisions source-reviewed 21 October 2026. Older tiles are marked as inherited and await rechecking. Source inspection does not establish current operation or useful outcomes.
The single rule that keeps autonomy legible
Agents climb. Only a human promotes.
Tier 0 supervised
0
Tier 1 semi-auto
2
Tier 2 monitored
10
⚠ Tier 2 → 3 is a human decision -- never automatic
Tier 3 autonomous
29
Live registry counts as of the latest build — every Tier 3 promotion was a manual operator decision, never automatic.
Built safe and legible before fast
The sandbox is the contract.
Every agent writes only to its own sandboxed working directory. Every consequential action it takes is written to an append-only audit log. Subprocess calls run through a hardened helper with a scrubbed environment and a binary allow-list, and an air-gapped mode can sever all egress. When safety and speed conflict, legibility wins.
Local-first sovereignty
5 cloud providers. One endpoint that decides.
The only mandatory language-model endpoint is a local server the operator controls. Cloud routing across 5 providers accelerates the work but is never authoritative; the system degrades to local-only without losing correctness. It is both a consumer of data -- around three dozen external integrations -- and a provider of it, exposing three Model Context Protocol surfaces.
One engine · four publishing arms
The same engine. Four different voices.
ENGINE
The Institute0 papers / 30d · corpus → ObservatoryAngles & Footnotes0 bulletins / 30d
Phronopolis0 essays / 30d
The Engineyou are here
One operator, one fleet
The engine is the artefact. The operator is the consistency mechanism.
The platform was built by a single operator working with a fleet of agents, and it is not separable from that operator: the operator decides what the engine does, what it kills, and what ships. That pairing is not a limitation the work is apologising for -- it is the demonstration the work exists to make.
Engage
Read the architecture, or get in touch.
This subdomain documents the system in depth: the architecture, what the engine does, methodology in code, and how to engage. The instrument above already made the case.
Drafted with AI assistance under operator supervision; substantive claims are operator-authored or operator-approved.