One command surface for everything ClearGlass runs autonomously — governed operators, named defenders, the PERCIVAL agent stack, and the append-only audit spine underneath them. Read-only by default, human-approved by design.
Each is an independent subtree with its own CI gate. All of them fail closed, and all of them log.
A governed commerce engine — FastAPI control plane + Next.js storefront/admin. Pricing, payments, refunds and fulfillment stay blocked until a human approves.
mock mode with no live keyThe keyless governor / identity / capability / mission-memory core — stdlib-only, fail-closed Python agents that reason under strict capability scoping.
Named-agent defenders in the keyless sentinel index — continuous posture checks that surface risk without ever taking a destructive action on their own.
The coordination fabric that lets named agents pass missions, share memory, and hand off work while every step stays inside the same governance envelope.
An append-only events ledger records every material change with its risk score; the approvals table is the only door high-risk actions can pass through.
Standalone automation bots (like the store smoke bot) run on scheduled workflows — daily governance self-checks and executive reports that keep the CI gates green.
A small, typed schema — but the load-bearing edge isn't a foreign key. It's the one that routes every proposed action through governance before it can ever touch money.
Low. Generate copy, read metrics, reconcile.
auto + logMedium. Content publish, non-price catalog edits.
queue approvalHigh / critical. Pricing, payments, refunds, fulfillment, reorders, mass outbound.
blocked · approveNo high or critical action executes until an approvals row reaches approved. The self-check fails, by design, if that door is ever left open.
| Tool | Surface | What it does | Status |
|---|---|---|---|
| daily_loop | control-plane | Governance self-check + executive report (stdlib only) | live |
| governance | control-plane | Scores every action 0–100 and routes it by risk tier | live |
| audit | control-plane | Writes every material change to the append-only ledger | live |
| payments | control-plane | Governed money movement — mock mode until a key is present | gated |
| store_smoke_bot | bots/ | Storefront smoke test run on scheduled workflows | live |
| PERCIVAL | sentinel/ | Keyless governor/identity/capability/mission-memory stack | live |
| Agent Mesh | sentinel/ | Mission routing & shared memory between named agents | target-state |
Advanced doesn't mean unchecked. Every ClearGlass system reads first, drafts second, asks a human before it moves anything that matters — and logs all of it.