A geometric red cardinal perched on a lookout, alert and scanning

The agentic fabric

The eyes on the outside.

For: developers and reviewers

Scouts are the agent ring's senses. Each one is a narrow, read-only reader that watches a single kind of source โ€” an inbox, a backlog, a pipeline, a repository โ€” and drops a short summary into one shared signal inbox for the ring to act on. They are deliberately the simplest, most constrained agents in the system: they look, they note, they never touch.

Read-only, always Write only to the signal inbox Never fan out

The scout contract

Every scout obeys the same hard contract. It is what makes them safe to point at sensitive sources: a scout can only ever read and report, so the worst it can do is miss something โ€” never corrupt, send, or leak.

What every scout must do

  • Read only โ€” never change the thing it watches
  • Write only to the shared signal inbox โ€” nothing else
  • Keep a per-source cursor and advance it only on a successful write
  • Stay inside a wall-clock budget and a cost circuit-breaker

What no scout may do

  • Never send a message, reply, or reaction
  • Never spawn a helper or message a peer โ€” no fan-out
  • Never ingest sensitive content โ€” route it for review instead
  • Never skip ahead past an item it failed to record
Run under a lease, gated to go live. Scouts run together during a periodic sweep, under a shared lease so only one sweep runs at a time. Each scout also has its own live-enable flag โ€” it stays dark until it has been proven and explicitly turned on. A built-but-unproven scout does nothing until someone flips its switch.

How a scout works

A scout's life is a tight loop: read since the cursor, summarise, write a signal, advance the cursor. If a write fails, the cursor stays put, so the item is retried next sweep rather than lost.

flowchart LR
  SRC(["๐Ÿ“ฅ Source
inbox ยท backlog ยท pipeline ยท repo"]):::source subgraph loop ["๐Ÿ”   THE SCOUT LOOP   โ€”   tight ยท cyclic ยท bounded"] direction LR CUR["1 ยท Read since
cursor"]:::scout SUM["2 ยท Summarise
first line only"]:::scout SIG[("3 ยท Write to
๐Ÿ“จ signal inbox")]:::db ADV["4 ยท Advance cursor
only on โœ…"]:::scout CUR ==> SUM ==> SIG ==> ADV ADV == next sweep ==> CUR end SRC == peek ยท read-only ==> CUR style loop fill:#f0fbf2,stroke:#16a34a,stroke-width:2.5px,color:#14532d classDef source fill:#fef3c7,stroke:#d97706,stroke-width:2.5px,color:#78350f classDef scout fill:#dcfce7,stroke:#16a34a,stroke-width:2px,color:#14532d classDef db fill:#f1f5f9,stroke:#475569,stroke-width:2.5px,color:#0f172a

The signal inbox is the only thing a scout writes. Everything downstream โ€” grouping, classifying, briefing โ€” is the ring's job, not the scout's.

The family, one card at a time

The scouts share one mascot โ€” a cardinal in field-ranger kit โ€” because they are variations on a single idea. What differs is the source each one watches and the kind of signal it emits.

Signal Scout

Watches the operator's inbox, chat, and meeting transcripts for items worth the ring's attention. The original, live-proven scout.

Backlog Sentinel

Watches the work-item backlog for changes since the last sweep โ€” one signal per item revision.

Pipeline Watcher

Watches the sales pipeline for opportunity changes in the operator's territory, under the operator's own identity.

Reuse Scout

Sweeps an allow-list of repositories for reusable patterns โ€” ratified decisions, shared stubs, schema fragments.

Intake Triage

Filters inbound signals against a configured allow-list and routes per-customer items to the right queue. Refuses to run if its allow-list is empty.

Comms Harvest

Pulls inbound email and chat replies and lands them as conversation signals โ€” the inbound half of the conversation-grouping substrate.

The privacy gate

Scouts touch real inboxes and real backlogs, so their handling of sensitive material is the most important thing about them. The rule is simple: anything regulated, confidential, or otherwise sensitive is routed for human review, never ingested. A scout enqueues a summary โ€” a first line, not a body โ€” and never copies diffs, attachments, or message contents into the signal inbox.

Read-only is the safety property. Because a scout can only read and can only write a short summary to one inbox, there is no path by which it can send sensitive data anywhere. The constraint isn't a guideline โ€” it's the design.

How the scouts are scheduled โ†’ ยท Back to the agents โ†’