[ { "id": "enterprise-ops", "name": "Enterprise Operations", "vertical": "Enterprise dispatch — teams + value-thresholds + approval routing", "tagline": "Route high-value or low-confidence requests to a named approver team (e.g. Finance) — composes with team routing, on-call shifts, and the manager hierarchy.", "constitution": { "max_priority": "high", "require_approval_above_amount": { "currency": "USD", "amount": 10000 }, "require_approval_below_confidence": 0.7, "approval_routes_to": { "to": "team", "team_slug": "finance" } }, "controls": [ { "control": "Value-threshold approval (USD 10,000)", "pillar": "authorize", "kernels": [{ "name": "constitution", "path": "/constitution-kernel/" }] }, { "control": "Low-confidence approval gate", "pillar": "authorize", "kernels": [{ "name": "constitution", "path": "/constitution-kernel/" }] }, { "control": "Approval routes to the Finance team's on-call", "pillar": "authorize", "kernels": [{ "name": "constitution", "path": "/constitution-kernel/" }] } ], "boundary_note": "EcoCloud routes the approval to the right human; it does not auto-approve, hold funds, or move money. The constitution is enforced before the action commits; a hard violation (forbidden_terms) still beats the approval gate." }, { "id": "product-pm", "name": "Product Delivery Pack", "vertical": "Product & Project Management", "tagline": "Rank, sequence, and simulate the backlog autonomously; gate every deploy or public post to a human.", "constitution": { "max_priority": "high", "forbidden_terms": [ "deploy to production", "ship to prod", "publish release", "go live", "post publicly", "delete sprint", "force merge" ], "forbidden_assignees": [ "CEO", "CTO", "VP Engineering", "Head of Product" ], "forbidden_tags": [ "production-deploy", "public-announcement", "release-gate", "security-incident", "customer-commitment" ], "objective_tags": [ "backlog", "grooming", "sprint-planning", "roadmap", "estimation", "dependency-mapping", "scope-analysis", "ticket-triage" ], "quiet_hours_utc": { "start": 21, "end": 13 }, "max_creates_per_day": 80, "require_approval_below_confidence": 0.65 }, "controls": [ { "control": "Every backlog write (create, reprioritize, assign) passes the workspace constitution gate, which denies anything above max_priority, touching a forbidden tag/assignee, or carrying a forbidden term like 'deploy to production'.", "pillar": "Policy Gate", "kernels": [ { "name": "Constitution Kernel", "path": "/constitution-kernel/" } ] }, { "control": "The agent ranks the backlog with a RICE/WSJF score so reprioritization is an auditable, reproducible ordering rather than an opaque LLM judgment.", "pillar": "Prioritization", "kernels": [ { "name": "Priority Kernel", "path": "/priority-kernel/" } ] }, { "control": "Story-level dependencies are resolved into a task DAG that computes the critical path and per-task float so the agent sequences sprints against true blockers, not guesswork.", "pillar": "Sequencing", "kernels": [ { "name": "Critical-Path Kernel", "path": "/critpath-kernel/" }, { "name": "Schedule Kernel", "path": "/schedule-kernel/" } ] }, { "control": "Before committing any scope or date change, the agent runs the what-if scenario matrix and surfaces the resulting risk band to the human owner.", "pillar": "Scenario Analysis", "kernels": [ { "name": "Simulate Kernel", "path": "/simulate-kernel/" } ] }, { "control": "Any production-affecting action (a deploy ticket transition or a release post) is dry-run first, then held for maker-checker approval before the real write executes.", "pillar": "Production Change Control", "kernels": [ { "name": "Preflight Kernel", "path": "/preflight-kernel/" }, { "name": "Four-Eyes Kernel", "path": "/foureyes-kernel/" } ] }, { "control": "Release and public-announcement decisions are escalated to an N-role review quorum rather than approved by a single reviewer.", "pillar": "Release Approval", "kernels": [ { "name": "Jury Kernel", "path": "/jury-kernel/" } ] }, { "control": "Outbound public posts (changelogs, status updates, social) are audited for content and routed only to allowlisted destinations before egress.", "pillar": "Public Egress", "kernels": [ { "name": "Policy-Check Kernel", "path": "/policycheck-kernel/" }, { "name": "Route Kernel", "path": "/route-kernel/" } ] }, { "control": "Backlog text drawn from customer tickets, emails, or external comments is screened for prompt-injection before the agent acts on it.", "pillar": "Input Integrity", "kernels": [ { "name": "Injection Defense", "path": "/injection-defense/" } ] }, { "control": "Autonomy expands from suggest-only to act-with-approval to act per the risk-based rollout policy, with override-hotspot analytics flagging where humans keep reversing the agent.", "pillar": "Autonomy Rollout", "kernels": [ { "name": "Rollout Kernel", "path": "/rollout-kernel/" }, { "name": "Friction Kernel", "path": "/friction-kernel/" } ] } ], "boundary_note": "This pack governs, sequences, and stages backlog and release decisions only; it never executes a deploy, merges code, publishes a public post, or moves money — those remain human-approved actions outside the agent's autonomous scope." }, { "id": "fintech-oprisk", "name": "Financial Ops Pack", "vertical": "Fintech / Banking OpRisk", "tagline": "Four-eyes + signing limits, counterparty (KYA + LEI/IBAN/BIC) gate, ISO-8583 preflight, regulator mode.", "constitution": { "max_priority": "high", "forbidden_terms": [ "wire transfer", "move funds", "disburse", "payout", "release escrow", "issue credit", "custody transfer", "settle funds", "drop table", "delete production", "rotate prod secret" ], "forbidden_assignees": [ "external-counterparty", "unverified-agent" ], "forbidden_tags": [ "funds-movement", "settlement", "kyc-exempt", "prod-secret" ], "objective_tags": [ "reconciliation", "control-test", "attestation", "preflight", "dispute-evidence", "counterparty-screening" ], "quiet_hours_utc": { "start": 22, "end": 6 }, "max_creates_per_day": 200, "require_approval_below_confidence": 0.8 }, "controls": [ { "control": "Risk & control register (RCSA): each control IS a constitution rule; a control-test IS a dry-run.", "pillar": "Identify & assess", "kernels": [ { "name": "Constitution gate", "path": "/constitution-kernel/" }, { "name": "Scenario simulation", "path": "/simulate-kernel/" }, { "name": "Dry-run preflight", "path": "/preflight-kernel/" } ] }, { "control": "Four-eyes (maker–checker) + signing-limit escrow before high-impact writes execute.", "pillar": "Mitigate & enforce", "kernels": [ { "name": "Four-eyes", "path": "/foureyes-kernel/" }, { "name": "Signing-limit escrow", "path": "/escrow-kernel/" } ] }, { "control": "Authority subsetting — an agent's powers are a strict subset of its sponsoring human's.", "pillar": "Mitigate & enforce", "kernels": [ { "name": "Authority subsetting", "path": "/authority-kernel/" } ] }, { "control": "Counterparty gate — KYA passport status + LEI / IBAN / BIC validation + revocation hotlist before any action touches a counterparty.", "pillar": "Third-party & fraud", "kernels": [ { "name": "Know-Your-Agent", "path": "/kya-kernel/" }, { "name": "Financial identifiers", "path": "/finid-kernel/" } ] }, { "control": "Egress allowlist — no governed action to a destination outside the approved set.", "pillar": "Third-party & fraud", "kernels": [ { "name": "Route guard", "path": "/route-kernel/" } ] }, { "control": "Message preflight — ISO-8583 envelope shape, mandatory fields, currency and limit checks before a payload leaves the boundary.", "pillar": "Execution & process", "kernels": [ { "name": "Switch envelope (ISO-8583)", "path": "/switch-kernel/" } ] }, { "control": "Dispute arbitration — reason-code taxonomy, SLA clocks, and an N-role review quorum.", "pillar": "Monitor & report", "kernels": [ { "name": "Operating regulations", "path": "/rules-kernel/" }, { "name": "Review jury", "path": "/jury-kernel/" } ] }, { "control": "Reconciliation — invoice / obligation vs contract → exceptions queue + signed dispute evidence.", "pillar": "Monitor & report", "kernels": [ { "name": "Revenue reconciliation", "path": "/reconcile-kernel/" } ] }, { "control": "Regulator mode — read·check·approve·mutate lineage + causal trajectory replay for investigations.", "pillar": "Monitor & report", "kernels": [ { "name": "Regulator lineage", "path": "/lineage-kernel/" }, { "name": "Trajectory replay", "path": "/trajectory-kernel/" } ] }, { "control": "Compliance evidence — the tamper-evident audit graph exported as a SOC 2 / regulatory evidence pack.", "pillar": "Monitor & report", "kernels": [ { "name": "Compliance export", "path": "/compliance-kernel/" } ] }, { "control": "Signed Outcome Receipt — offline-verifiable, zero-trust proof that a controlled action actually closed.", "pillar": "Monitor & report", "kernels": [ { "name": "Verify a receipt", "path": "/verify-receipt/" } ] }, { "control": "Fleet integrity — behavioral-drift canary + flash-crash breaker on the agent fleet.", "pillar": "Monitor & report", "kernels": [ { "name": "Behavioral drift", "path": "/drift-kernel/" }, { "name": "Flash-crash breaker", "path": "/breaker-kernel/" } ] } ], "boundary_note": "Governs, validates, attests and proves financial-ops work; never holds or moves money, issues credit, or settles funds — your bank does that.", "page": "/financial-ops/" }, { "id": "healthcare-clinops", "name": "Clinical Operations Guardrail Pack", "vertical": "Healthcare / Clinical Operations", "tagline": "Keeps PHI and clinical decisions out of autonomous scope; egress allowlisted, outputs auditor-screened", "constitution": { "max_priority": "medium", "forbidden_terms": [ "diagnose", "diagnosis", "prescribe", "prescription", "dosage", "treatment plan", "patient name", "medical record number", "mrn", "date of birth", "phi", "protected health information" ], "forbidden_assignees": [ "clinician", "physician", "nurse", "pharmacist", "care-team" ], "forbidden_tags": [ "phi", "clinical", "diagnosis", "prescribing", "patient-data", "ehr-write" ], "objective_tags": [ "scheduling", "supply-ordering", "facilities", "credentialing-admin", "billing-ops", "reporting" ], "quiet_hours_utc": { "start": 0, "end": 11 }, "max_creates_per_day": 25, "require_approval_below_confidence": 0.9 }, "controls": [ { "control": "Every autonomous write is gated against the constitution, denying any action whose text matches PHI/clinical forbidden terms or that targets a forbidden clinical tag.", "pillar": "Policy Gate", "kernels": [ { "name": "Constitution kernel", "path": "/constitution-kernel/" } ] }, { "control": "Confirm the agent's permissions are scoped to operations objects only, and that its authority never exceeds the human operator who delegated it.", "pillar": "Authorization", "kernels": [ { "name": "Authz kernel", "path": "/authz-kernel/" }, { "name": "Authority kernel", "path": "/authority-kernel/" } ] }, { "control": "Screen every generated output through the content auditor and block on any flagged PHI leakage or clinical-advice content before it leaves the agent.", "pillar": "Output Screening", "kernels": [ { "name": "Policycheck kernel", "path": "/policycheck-kernel/" } ] }, { "control": "Restrict all outbound destinations to a pre-approved allowlist so patient or operational data cannot be exfiltrated to unsanctioned endpoints.", "pillar": "Egress Control", "kernels": [ { "name": "Route kernel", "path": "/route-kernel/" } ] }, { "control": "Route any low-confidence or elevated-risk operations action to maker-checker approval before it executes.", "pillar": "Human Approval", "kernels": [ { "name": "Four-eyes kernel", "path": "/foureyes-kernel/" }, { "name": "Rollout kernel", "path": "/rollout-kernel/" } ] }, { "control": "Dry-run each proposed write and run a what-if scenario pass to surface its risk band before committing the real change.", "pillar": "Pre-Execution Check", "kernels": [ { "name": "Preflight kernel", "path": "/preflight-kernel/" }, { "name": "Simulate kernel", "path": "/simulate-kernel/" } ] }, { "control": "Emit a signed, offline-verifiable Outcome Receipt for each completed operations action and assemble the audit graph into an evidence pack for reviewers.", "pillar": "Attestation & Audit", "kernels": [ { "name": "Verify receipt", "path": "/verify-receipt/" }, { "name": "Compliance kernel", "path": "/compliance-kernel/" } ] }, { "control": "Watch agent behavior for drift and catch stalled in-flight runs so anomalous operations activity is flagged for human attention.", "pillar": "Monitoring", "kernels": [ { "name": "Drift kernel", "path": "/drift-kernel/" }, { "name": "Watchdog kernel", "path": "/watchdog-kernel/" } ] } ], "boundary_note": "This pack governs operations workflows only; it does NOT diagnose, prescribe, make clinical decisions, store or move PHI, and it is a policy template that wires governance kernels, not a HIPAA-compliant product, audit, or certification." }, { "id": "agency-client-sow", "name": "Client Delivery Pack", "vertical": "Agency / Client Delivery (SOW)", "tagline": "Govern SOW work: four-eyes before anything client-facing ships, then reconcile billed vs contracted.", "constitution": { "max_priority": "high", "forbidden_terms": [ "final invoice", "sign off", "sign-off", "approve change order", "scope change", "discount", "refund", "credit memo", "wire transfer", "press release", "go live", "publish" ], "forbidden_assignees": [ "client", "client_signatory", "billing", "legal", "executive_sponsor" ], "forbidden_tags": [ "client-facing", "deliverable-final", "invoice", "change-order", "contract-amendment", "external-send" ], "objective_tags": [ "draft", "internal-review", "research", "wip", "qa", "estimate", "status-update" ], "quiet_hours_utc": { "start": 22, "end": 6 }, "max_creates_per_day": 30, "require_approval_below_confidence": 0.8 }, "controls": [ { "control": "Every write is checked against the workspace constitution (priority ceiling, forbidden client-facing/billing terms, objective-tag allowlist, quiet hours) before it reaches a task, document, or client channel.", "pillar": "Policy gate", "kernels": [ { "name": "Constitution gate", "path": "/constitution-kernel/" }, { "name": "Authorization", "path": "/authz-kernel/" } ] }, { "control": "Any client-facing deliverable, change order, or invoice draft requires maker-checker approval — a second human signs off before it can leave internal scope.", "pillar": "Four-eyes release", "kernels": [ { "name": "Four-eyes", "path": "/foureyes-kernel/" }, { "name": "Review jury", "path": "/jury-kernel/" } ] }, { "control": "Each engagement is encoded as a structured SOW (scope, quality rubric, SLA, cost) and evaluated against a signed outcome attestation → fulfilled / breached / unverified plus the earned billing basis.", "pillar": "Contracted scope", "kernels": [ { "name": "Agent work contract", "path": "/contract-kernel/" }, { "name": "Dual-rail verification", "path": "/verify-kernel/" } ] }, { "control": "Before a deliverable closes out, the invoice/billed amount is reconciled against the contracted SOW and attested outcome, surfacing exceptions and dispute evidence instead of silently over- or under-billing.", "pillar": "Billed-vs-contracted", "kernels": [ { "name": "Revenue reconciliation", "path": "/reconcile-kernel/" }, { "name": "Operating regulations", "path": "/rules-kernel/" } ] }, { "control": "On acceptance the client receives a signed, offline-verifiable Outcome Receipt tying the delivered scope to its attestation, so acceptance can be proven without trusting the agency's systems.", "pillar": "Verifiable handoff", "kernels": [ { "name": "Outcome Receipt", "path": "/verify-receipt/" } ] }, { "control": "Multi-workstream engagements are laid out as a task DAG to compute the CPM critical path and float, so the agent schedules and warns on slippage against the SLA instead of acting blind.", "pillar": "Delivery scheduling", "kernels": [ { "name": "Critical-path schedule", "path": "/critpath-kernel/" }, { "name": "Capacity scheduler", "path": "/schedule-kernel/" } ] }, { "control": "Outbound drafts pass a content auditor (pass / flag / block) for unsubstantiated claims, confidential leakage, and tone before any client-facing send.", "pillar": "Output control", "kernels": [ { "name": "Output policy check", "path": "/policycheck-kernel/" }, { "name": "Injection defense", "path": "/injection-defense/" } ] }, { "control": "Client and external destinations are checked against an egress allowlist so the agent can never send a deliverable or status to an unapproved recipient.", "pillar": "Egress control", "kernels": [ { "name": "Route guard", "path": "/route-kernel/" } ] }, { "control": "The full audit graph of every approval, attestation, and reconciliation is exported as an evidence pack the client or an auditor can review.", "pillar": "Evidence & lineage", "kernels": [ { "name": "Compliance export", "path": "/compliance-kernel/" }, { "name": "Regulator lineage", "path": "/lineage-kernel/" } ] } ], "boundary_note": "This pack governs, verifies, and attests SOW delivery — it does not move money, issue invoices, or sign legal contracts on the agency's or client's behalf; it computes the billable basis and produces evidence while humans approve releases and a billing system charges." }, { "id": "sales-revops", "name": "Pipeline Integrity Pack", "vertical": "Sales & RevOps", "tagline": "Forecast and route deals autonomously; hold discount approval and contract signing for humans.", "constitution": { "max_priority": "high", "forbidden_terms": [ "sign contract", "execute agreement", "countersign", "approve discount", "waive margin", "override price", "wire transfer", "issue refund" ], "forbidden_assignees": [ "CFO", "VP Sales", "General Counsel" ], "forbidden_tags": [ "contract-signing", "discount-approval", "legal", "credit-terms" ], "objective_tags": [ "pipeline-hygiene", "forecast", "deal-enrichment", "usage-rating", "renewal-tracking" ], "quiet_hours_utc": { "start": 23, "end": 6 }, "max_creates_per_day": 150, "require_approval_below_confidence": 0.75 }, "controls": [ { "control": "Every deal write is checked against the workspace constitution before it executes, denying autonomous discount approval, contract signing, and forbidden-term actions.", "pillar": "Policy Gate", "kernels": [ { "name": "Constitution Kernel", "path": "/constitution-kernel/" }, { "name": "Authz Kernel", "path": "/authz-kernel/" } ] }, { "control": "Discount approvals and contract sends require a separate human checker (maker-checker) before they can proceed.", "pillar": "Four-Eyes Approval", "kernels": [ { "name": "Four-Eyes Kernel", "path": "/foureyes-kernel/" }, { "name": "Jury Kernel", "path": "/jury-kernel/" } ] }, { "control": "Discounts or contract values above the configured signing limit are held in escrow and constrained so the agent never exceeds the authority of its sponsoring human.", "pillar": "Signing Limit", "kernels": [ { "name": "Escrow Kernel", "path": "/escrow-kernel/" }, { "name": "Authority Kernel", "path": "/authority-kernel/" } ] }, { "control": "Each forecast is computed as an expected-revenue projection over the open pipeline rather than asserted.", "pillar": "Forecast Integrity", "kernels": [ { "name": "Forecast Kernel", "path": "/forecast-kernel/" } ] }, { "control": "Every proposed deal is run through a margin-integrity gate that flags discounts which erode floor margin before they reach a human approver.", "pillar": "Margin Integrity", "kernels": [ { "name": "Yield Kernel", "path": "/yield-kernel/" } ] }, { "control": "Customer usage is converted into a billable basis as a measure only — EcoCloud computes the basis, it never charges or moves money.", "pillar": "Usage Rating", "kernels": [ { "name": "Rating Kernel", "path": "/rating-kernel/" } ] }, { "control": "Invoices and billing statements are reconciled against the underlying deal and contract terms to surface exceptions and dispute evidence.", "pillar": "Reconciliation", "kernels": [ { "name": "Reconcile Kernel", "path": "/reconcile-kernel/" } ] }, { "control": "Outbound emails, quotes, and contract drafts are audited for content before send and routed only to allowlisted destinations.", "pillar": "Egress Control", "kernels": [ { "name": "Policycheck Kernel", "path": "/policycheck-kernel/" }, { "name": "Route Kernel", "path": "/route-kernel/" } ] }, { "control": "Completed RevOps actions emit a signed, offline-verifiable outcome receipt for audit and regulator review.", "pillar": "Attestation", "kernels": [ { "name": "Verify Receipt", "path": "/verify-receipt/" }, { "name": "Lineage Kernel", "path": "/lineage-kernel/" } ] } ], "boundary_note": "This pack governs, gates, and attests Sales & RevOps actions — it does not sign contracts, approve discounts, set prices, or charge, hold, or move any money; those stay with authorized humans and your billing system." }, { "id": "engineering-devops", "name": "Platform Ops Autonomy Pack", "vertical": "Engineering / Platform Ops", "tagline": "Ramp agent autonomy by risk, gate changes behind eval + A/B, guard egress, four-eyes on prod writes", "constitution": { "max_priority": "high", "forbidden_terms": [ "drop table", "truncate table", "delete production", "delete from production", "rm -rf", "force push", "disable backups", "rotate prod secret", "disable mfa", "open security group" ], "forbidden_assignees": [ "root", "production-deployer", "release-manager", "on-call-engineer" ], "forbidden_tags": [ "production", "prod-write", "database-migration", "secret-rotation", "iam-change", "incident", "destructive" ], "objective_tags": [ "staging", "dev", "ci", "experiment", "lint", "dependency-bump", "docs", "test-fix", "observability" ], "quiet_hours_utc": { "start": 22, "end": 6 }, "max_creates_per_day": 30, "require_approval_below_confidence": 0.85 }, "controls": [ { "control": "Every write is gated by the constitution policy, denying actions whose text contains destructive terms (drop table, delete production), out-of-scope tags, or priority above the configured ceiling.", "pillar": "Policy Gate", "kernels": [ { "name": "Constitution Kernel", "path": "/constitution-kernel/" }, { "name": "Policy Check Kernel", "path": "/policycheck-kernel/" } ] }, { "control": "Autonomy is ramped per agent by measured risk band, so new or low-reputation agents start read-only and unlock broader scopes only as their track record clears each threshold.", "pillar": "Autonomy Rollout", "kernels": [ { "name": "Rollout Kernel", "path": "/rollout-kernel/" }, { "name": "Sigmoid Kernel", "path": "/sigmoid-kernel/" } ] }, { "control": "The agent's effective permissions are subset-checked against its sponsoring human's scopes, so it can never act beyond what its owner is authorized to do.", "pillar": "Authority Bounding", "kernels": [ { "name": "Authority Kernel", "path": "/authority-kernel/" }, { "name": "Authz Kernel", "path": "/authz-kernel/" } ] }, { "control": "Any change is dry-run in preflight and run through a what-if scenario matrix to surface its blast radius and risk band before the real write is allowed.", "pillar": "Pre-Change Validation", "kernels": [ { "name": "Preflight Kernel", "path": "/preflight-kernel/" }, { "name": "Simulate Kernel", "path": "/simulate-kernel/" } ] }, { "control": "Code or config changes must pass golden-dataset eval CI and a two-proportion A/B experiment before promotion, blocking regressions and stat-insignificant rollouts.", "pillar": "Change Quality Gate", "kernels": [ { "name": "Eval Kernel", "path": "/eval-kernel/" }, { "name": "Experiment Kernel", "path": "/experiment-kernel/" } ] }, { "control": "Prod-affecting writes require four-eyes maker-checker sign-off, escalating to an N-role review quorum for the highest-risk changes flagged by the simulation.", "pillar": "Four-Eyes Approval", "kernels": [ { "name": "Four-Eyes Kernel", "path": "/foureyes-kernel/" }, { "name": "Jury Kernel", "path": "/jury-kernel/" } ] }, { "control": "All outbound calls are checked against an egress destination allowlist and screened for prompt-injection so agents cannot exfiltrate data or be steered to unapproved endpoints.", "pillar": "Egress Guard", "kernels": [ { "name": "Route Kernel", "path": "/route-kernel/" }, { "name": "Injection Defense", "path": "/injection-defense/" } ] }, { "control": "Long-running jobs are monitored for stalls and resumed from a durable write-ahead-log checkpoint, with a load breaker tripping autonomy on anomalous spikes.", "pillar": "Durable Resume", "kernels": [ { "name": "Watchdog Kernel", "path": "/watchdog-kernel/" }, { "name": "Recovery Kernel", "path": "/recovery-kernel/" }, { "name": "Breaker Kernel", "path": "/breaker-kernel/" } ] }, { "control": "Each completed run emits a signed, offline-verifiable outcome receipt and a replayable trajectory, giving regulators and on-call a causal audit trail of what the agent did.", "pillar": "Attestation & Audit", "kernels": [ { "name": "Verify Receipt", "path": "/verify-receipt/" }, { "name": "Trajectory Kernel", "path": "/trajectory-kernel/" } ] } ], "boundary_note": "This pack is a policy template that wires governance kernels into the agent execution path; it does not deploy code, manage infrastructure, hold credentials, or replace your CI/CD, IAM, or human change-approval process, and it is not a security certification or compliance guarantee." }, { "id": "legal-law-firm", "name": "Legal / Law-Firm Pack", "vertical": "Legal / Law-Firm Operations", "tagline": "Conflict screening, privilege walls, four-eyes on filings, and billing governance — agents that respect the duty of care.", "constitution": { "max_priority": "high", "forbidden_terms": [ "file with court", "submit filing", "waive privilege", "disclose client", "settle the case", "sign engagement letter", "send to opposing counsel", "release the retainer" ], "forbidden_assignees": [ "opposing-counsel", "unrepresented-party", "external-counterparty" ], "forbidden_tags": [ "privileged", "client-confidential", "conflict-pending", "court-filing", "trust-account" ], "objective_tags": [ "intake", "docketing", "conflict-screening", "legal-research", "billing-review", "matter-admin" ], "quiet_hours_utc": { "start": 22, "end": 6 }, "max_creates_per_day": 150, "require_approval_below_confidence": 0.85 }, "controls": [ { "control": "Conflict-of-interest screening before any matter or counterparty action — the constitution gate blocks privileged/conflict-pending tags and unverified counterparties.", "pillar": "Intake & conflicts", "kernels": [ { "name": "Constitution gate", "path": "/constitution-kernel/" }, { "name": "Know-Your-Agent", "path": "/kya-kernel/" } ] }, { "control": "Privilege wall — generated output is screened for privileged/client-confidential content and egress is locked to an approved allowlist before anything leaves the firm.", "pillar": "Confidentiality", "kernels": [ { "name": "Output policy-check", "path": "/policycheck-kernel/" }, { "name": "Route guard", "path": "/route-kernel/" } ] }, { "control": "Four-eyes on filings, engagement letters, and anything client-facing — escalated to a partner-level review quorum, never single-signed.", "pillar": "Maker-checker", "kernels": [ { "name": "Four-eyes", "path": "/foureyes-kernel/" }, { "name": "Review jury", "path": "/jury-kernel/" } ] }, { "control": "Supervision — an agent’s authority is a strict subset of the supervising attorney’s (ABA Model Rule 5.1/5.3-style oversight).", "pillar": "Supervision", "kernels": [ { "name": "Authority subsetting", "path": "/authority-kernel/" } ] }, { "control": "Docket integrity — simulate scope/date changes against the matter’s critical path and dry-run before any deadline-affecting write commits.", "pillar": "Docket control", "kernels": [ { "name": "Scenario simulation", "path": "/simulate-kernel/" }, { "name": "Critical-path schedule", "path": "/critpath-kernel/" }, { "name": "Dry-run preflight", "path": "/preflight-kernel/" } ] }, { "control": "Billing governance — reconcile time and expense entries against the engagement terms, surfacing exceptions before invoicing.", "pillar": "Billing integrity", "kernels": [ { "name": "Revenue reconciliation", "path": "/reconcile-kernel/" } ] }, { "control": "Matter audit & evidence — a tamper-evident read·check·approve·mutate lineage plus a SOC 2 / bar-ready evidence export and a signed Outcome Receipt per closed action.", "pillar": "Audit & evidence", "kernels": [ { "name": "Regulator lineage", "path": "/lineage-kernel/" }, { "name": "Compliance export", "path": "/compliance-kernel/" }, { "name": "Verify a receipt", "path": "/verify-receipt/" } ] }, { "control": "Safe reversal — compensating undo for an erroneous autonomous action, with the reversal itself attested.", "pillar": "Safety", "kernels": [ { "name": "Compensating reversal", "path": "/reversal-kernel/" } ] } ], "boundary_note": "This pack governs and proves legal-operations work; it is NOT legal advice and does not practice law, file with courts, waive privilege, or touch a trust account — those remain with a licensed attorney." } ]