Designed for local sovereignty and bounded execution.

Runs as a local process on the developer’s workstation. It maintains durable project contracts, tracks mission state machines, supervises specialist workers, and enforces permission boundaries. The supervisor holds the only handle to approval dispatchers.

Specialists are instantiated in ephemeral git worktrees with strict read/write masks. They receive clear mission instructions and cannot modify files outside the declared scope. Model completions are translated into bounded file mutations, never direct system shell execution.

Before any mission can reach the review state, the validation engine executes the project’s native test runners, typecheckers, and linters. It records exit codes, duration, and terminal logs, creating an immutable cryptographic evidence package.

Publication occurs only after explicit owner approval. Changes are pushed to a named remote branch and opened as a standard GitHub pull request. Direct pushes to main/master branches are blocked by policy.