No accountability model
Put named agents under explicit human input and approval contracts.
Inspect the HITL mechanics01 / NATIVE AGENT RUNTIME
Built for platform and AI engineering teams that answer to security reviews, auditors, and their own infrastructure.
02 / WHERE PILOTS STALL
Agent pilots do not fail because the demo was too small. They fail when control, deployment, and evidence arrive too late.
Put named agents under explicit human input and approval contracts.
Inspect the HITL mechanicsShip one Rust binary. No Python or Node runtime is required in production.
Inspect the releaseBring checksums, an SBOM, signatures, source, and an on-prem deployment path.
Review the posture03 / THE OPERATING MODEL
Every operating claim points to source, documentation, or a release artifact.
Agents ask for missing context. Consequential tools wait for a separate, fail-closed approval.
HITL contractA native binary runs with your provider, your network controls, and PostgreSQL when scale needs it.
Deployment guideMIT source, CycloneDX SBOM, keyless signatures, checksums, and a signed OCI path.
Release evidenceReplicas coordinate durable ownership, replay, encrypted human answers, and graceful drain.
Multi-replica contractSwitch between native and OpenAI-compatible providers through configuration, including local Ollama.
Provider matrix04 / WHAT YOUR TEAM SHIPS
Define the team in readable Lua. The native runtime owns scheduling, policy, providers, and durable execution.
local crew = Crew.new({
goal = "Assess release risk",
provider = "openai",
model = "gpt-5.6-luna",
require_approval = { "file_write" },
})
crew:add_agent(Agent.new({
name = "researcher",
goal = "Collect release evidence",
tools = { "ask_human" },
}))
crew:add_agent(Agent.new({
name = "reviewer",
goal = "Challenge evidence and decide",
tools = { "file_write" },
}))
crew:add_task({ name = "collect", description = "List the riskiest changes in this release." })
crew:add_task({
name = "decide",
agent = "reviewer",
depends_on = { "collect" },
description = "Write a go/no-go plan for: ${results.collect.output}",
})
crew:run()Read the executable shapeRun independent specialists together, then synthesize.
Let one agent delegate bounded work to specialists.
Rotate through expert views with an explicit moderator.
Pause for context or authorization before consequences.
V3.0.0 / RELEASE EVIDENCE
MAKE THE OPERATING MODEL EXPLICIT