- Blast Radius — three-tier containment model; bounds impact of any agent action before commit
- Provenance — append-only audit trail of every agent action, decision, and state transition
- WorldState — separates live facts from distilled memory
- 10-gate pipeline — strict ordered execution: noise → thread resolve → intent → clarity → idle → mandate → constraints → blast radius → ack strategy → resolver
- LLM Output Control — enforced structured parsing so raw LLM text never reaches downstream systems unchecked
- Hallucination Containment — mandate-gated and blast-radius-gated execution; hallucinated actions blocked before commit
- Provider API Adaptation — model-agnostic with 6 providers via OpenAI-compatible API
Multi-tier memory system (L0 Signals → L1 Observations → L2 Knowledge → L3 Patterns) with exponential decay weighting for knowledge relevance over time. Vector search via pgvector with HNSW index, BGE-M3 1024-dim embeddings.