Ship, don't babysit
One pinned bundle per role (base, runtime, plugins and digest), so every agent is reproducible and nothing drifts between them.
A runtime that ships agents as pinned bundles, with the fleet Portal built into it, and a firewall on the model data plane.
Agents you ship like software. Versioned, reproducible, and operable from one window, not servers you hand-configure and hope stay the same.
One pinned bundle per role (base, runtime, plugins and digest), so every agent is reproducible and nothing drifts between them.
The Portal is built in: every agent, its skills, its memory and the actions you allow, without a second console to deploy.
Recurring jobs live in versioned Markdown orders that fire on schedule and read like documentation: reviewable line by line.
Pick the bundle for the role and start it. Nothing installs into the host.
Find the agent, read its memory, then chat, restart, or hand it work.
Write a standing order. It arms its own wake and runs.

Working with an agent: one session, its files, and every tool call it made.

Operating the fleet: every agent grouped by team, with live status and one click to any of them.
Every call reviewed. Nobody notices. Inspection inside the request path, at a speed the user never feels, with a record you can hand to an auditor.
A customised judge tuned to a far larger model's call: frontier-quality decisions at a fraction of the compute.
The judge answers on the same box in one forward pass, and no database sits in front of the decision. Latency stays flat as the fleet grows.
It never holds your credentials, the agent's own key passes through, and every decision lands in a hash-chained audit.
Change the provider URL to the appliance. Nothing inside the agent changes.
Per-agent files; a revoked rule applies without a restart.
Decisions in the audit view; a refusal reaches the agent with a reason it can read.
Nothing on the decision path leaves the appliance. Rust core, stateless per request; the reply leg records verbatim and can cut the stream.
The three you will actually use. The rest is plumbing.
Persistent memory. Sessions are harvested into a knowledge base, and the index goes in front of the agent every turn.
Recurring work written in versioned Markdown. It arms its own wake and runs on schedule.
The fleet directory inside the product: every agent and the capabilities it declares.
We use both to run our own operations, including the property platform on top of them.