A whole team hands off to itself.
Seven roles · what each one never does
Hive orchestrates and routes · it never writes to a client
the steward frames and decides from the reports · it doesn't review the code
the dev produces the diff · it never reviews itself
the reviewer reviews and bounds the risks · it doesn't judge the result
the deployer mounts the preview · it doesn't touch servers
the judge describes the gaps · it doesn't decide
the writer drafts for you · it never sends anything itself
You're not asked to supervise.
You're asked to decide.
Everything that needs a human goes through a single inbox. Each item carries what it takes to decide · without opening a terminal, or another tab. Try it: the mockup takes five clicks to walk through.
What's dangerous isn't forbidden.
It's impossible.
$ silithid run · writer · vertical saas
▸ call · gmail.send { to: "billing@client.example" }
✗ unknown tool · “gmail.send” does not exist in the role's table
writer's table · gmail.draft · inbox.question · memory.proposal
▸ call · gmail.draft { to: "billing@client.example" }
✓ draft dr_2214 created · pending · approval · email
The answer isn't “denied” · the name doesn't exist. A permission that isn't there can't be stolen.
An agent cannot send an email.
It drafts · sending requires proof of human approval that it cannot forge. Nor run a tool outside its policy.
Its role's table is closed · a missing name isn't blocked, it doesn't exist. Nor borrow a client record across globes.
Globes are sealed · the table cannot even name it. Nor touch the rules quietly.
A PR on the state machine or the tool policy raises its own item · not a block, the impossibility of going unnoticed. Nor run a server command.
The ops agent returns an inert plan · closed catalogue, no shell. Nor run anything other than the plan you saw.
What runs on a server is what you were shown · verified by checksum.
It drafts · sending requires proof of human approval that it cannot forge. Nor run a tool outside its policy.
Its role's table is closed · a missing name isn't blocked, it doesn't exist. Nor borrow a client record across globes.
Globes are sealed · the table cannot even name it. Nor touch the rules quietly.
A PR on the state machine or the tool policy raises its own item · not a block, the impossibility of going unnoticed. Nor run a server command.
The ops agent returns an inert plan · closed catalogue, no shell. Nor run anything other than the plan you saw.
What runs on a server is what you were shown · verified by checksum.
Forbidden can be worked around. Impossible cannot.
You never explain the same thing twice.
question
“what prefix for staging URLs?”
project{{ trP }}
client{{ trC }}
globe{{ trG }}
hivenot consulted · the answer was closer
{{ trR }}
the recall is traced · the agent knows where what it knows came from
Versioned. Correcting a piece of knowledge creates a version · the old one stays readable, nothing is overwritten.
Your wording is what counts. Never the agent's · it's your sentence that gets recalled.
Globes are sealed. Knowledge is borrowed read-only · it follows its lender · or copied · and then lives its own life. Either way it goes through you.
Usefulness is counted. Every piece of knowledge shows its recall count · never recalled turns amber, and a review puts them back in front of you when the queue grows.
It stops before the bill. Not after.
5 h window
{{ bTokens }} · {{ bStateLabel }}
│ pause · 80%
│ resume · 65% · hysteresis prevents flapping
▨ reserve · 15% · what we keep back
7 d window
34% · far from the threshold
30 d window
unknown · not measured yet
a gauge with no measurement says “unknown” · never zero · that's the house rule
Two windows. 5 hours for runaway, 7 days for drift · each with its own threshold.
The pause is automatic. Once the threshold is crossed, the loops stop on their own · and resume on their own below the resume threshold.
The unlock is human. When it's worth it, you lift the pause · one hour, traced, never silent.
It's not about who owns the server.
It's about what's already on it.
An empty server, the agent provisions without asking · there's nothing to break. A server already serving, it proposes a plan · you approve in one click, Silithid applies it. And “empty” is measured · ports, vhosts, databases · never merely declared.
Knowledge grows on its own.
Power never does.
knowledge accumulates on its own
recipe · “deploy Laravel on o2switch” · v7 · ×15 recalls
+ what the judge found · “the .htaccess overrides the routing”
+ what you corrected · “PHP 8.1 max on this host”
+ what broke · “composer install without --no-dev = 502”
Every run feeds the recipe · without asking you a thing.
power only widens through you
operations runnable by default · 2
✓ php artisan migrate --force · approved by you
✓ systemctl reload nginx · approved by you
◌ systemctl restart php8.3-fpm · proposed · awaiting your decision
No operation joins a recipe by default without your approval · never along the way.
The fifteenth deployment of a stack isn't the first one.
And it grants itself no rights along the way.
The product, as it runs.
01 · Dashboard · the orb and the brief
02 · Inbox · five ways to decide
03 · Project · steps and loop
04 · Live loop · every exchange
05 · Journal · the agents' night, your decisions
06 · Analytics · costs and iterations
07 · Clients · the knowledge base
08 · Collective awareness · the circles
09 · Morning review · 7 decisions, 20 min
10 · Settings · diagnostics laid bare
We'd rather tell you ourselves.
Never display a state you don't have · the rule holds for the product, and for this page.
true today
✓ The loop runs end to end · real models, on a real repo.
✓ Three loops in parallel.
✓ Memory learns, recalls · and puts the review back in front of you.
✓ The ops agent is complete · plans, backups, rollbacks.
not yet
◌ Deployment happens on a local preview · real staging is written, it has never run.
◌ Gmail works in draft only · it has never talked to the real Gmail.
◌ The ops agent has never touched a real machine.
No client logos, no speed numbers, no testimonials · none of that exists, so none of it is shown.