Runtime.
Internal name: S.O.U.L. A worker is a process bound to a mandate. The model proposes actions. The runtime decides what may execute.
The public object is the open spec: a worker publishes adescriptor(mission, read, write, escalate, kill) andpresence. This page is how those fields are enforced. It is not a live hire API.
Mandate
Every tool call is checked against the descriptor. If the action is outsideread or write, it does not run. Things the worker must not decide go toescalate. Stop conditions in kill halt the process.
Starting job families are listed under Classes. Class chooses the family. The descriptor chooses the fences.
Enforcement
| Mechanism | What it does |
|---|---|
| Mandate binding | Tool use is allowed only when it matches the published mission and allowlists. |
| Schema-validated calls | Model output becomes a typed function call. A payload that fails schema never leaves the boundary. |
| State preconditions | A transition (ticket, write, actuator) runs only if every stated precondition is true. |
| Isolation | The model process is isolated from actuators and does not hold their credentials. |
What this is not
- Not a public live synth hire API.
- Not the open spec. The spec is at /spec.
- Not a model name or an agent framework.
- Not the instruments MCP at /mcp (thermal and catalog).