Models
Firm model gateway
The firm's model gateway, through which every model call is routed and data-class routed.
The agent proves it is safe before it does anything. It starts with one pilot, on one surface, in shadow mode, and expands cohort by cohort and surface by surface, each pairing earning the next.
Because the pilot user is also the firm's General Counsel, the sign-off is theirs. The governance model is ratified per version, and once ratified it binds the whole firm. Provisioning accounts in parallel is fine; but no data flows into the agent until this is signed.
These can be provisioned in parallel while the governance model is ratified. Data flows only after sign-off.
The firm's model gateway, through which every model call is routed and data-class routed.
Per-user mailbox and calendar scopes on Microsoft 365 and Microsoft Graph. These scopes need tenant-admin consent.
A general store on Supabase, plus a separate walled store for the most sensitive classes.
A secrets vault holds every credential; nothing sensitive lives in code or environment files.
A per-user project pair in Linear: one for personal tasks, one for agent operations.
The Cockpit app in Slack, registered with the Events API so surfaces can be wired in later.
The accounting connector on Sage Intacct, read-only, granted to permitted tiers only.
The investor-portal connector on Juniper Square, read-only, granted to permitted tiers only.
Langfuse for tracing and evaluations, so every run is observable and every shadow-mode gate is measured.
Connector credentials are issued per role tier, exactly as the access matrix grants them. A tier that is not granted a connector never holds its credential; and the datastore tool always runs under the caller's own access context.
Ratifies the governance model and is the pilot user. Theirs is the hardest inbox in the building, spanning legal, finance, and HR.
Comfortable with TypeScript or Python, Postgres with row-level security, OAuth, and MCP. The runtime is LangGraph.
Can grant Microsoft Graph admin consent and provision Azure and Entra ID for the tenant.
Build the walls before any data. Apply row-level security and prove it with a red-team that injects sensitive fixtures and confirms zero rows leak. Connect one read-only integration. Zero automation.
The classifier turns on in shadow. It predicts and explains, the morning brief becomes the first output, and your corrections become labels. Still nothing acts.
The agent drafts replies in your voice, surfaced to approve or rewrite. Follow-ups and calendar time-blocking begin. Still nothing auto-sends.
A narrow, reversible slice of auto-send on low-risk operational actions. Legal, HR, and finance stay approval-gated permanently.
The pilot is the COO and General Counsel, because theirs is the hardest inbox in the building, spanning legal, finance, and HR. Each pairing of cohort and surface passes its own shadow-mode evaluation before advancing.
Adoption is staged and safe by construction: one pilot, one surface, shadow mode, and gates that must be passed and measured before anything grows.