Core concepts

A compact glossary of the terms that recur throughout the platform.

Agent

A configured, persistent entity with identity, sandbox, access and backlog — the counterpart to an employee. A dedicated email address is optional.

Control plane

The central, stateful service: scheduler/dispatcher, identity & secrets broker, backlog store, guard-rail engine, observability. It knows the state of every agent. The control plane is the product; sandboxes are commodity, runtimes are swappable.

Data plane

The totality of isolated, ephemeral sandboxes in which agents work. If a sandbox is lost, it is rebuilt from config and home.

Runtime & daemon

The runtime is the agent framework that drives the LLM loop (first adapter: Claude Code headless). The daemon is the lean process in the sandbox that speaks the unified platform protocol and bootstraps the runtime.

Backlog

An agent's persistent, prioritized task list. Tasks have states; blocked tasks ask people questions.

Guard-rail

A centrally defined, platform-enforced boundary on agent behavior (egress rule, forbidden tool, approval requirement). It applies outside the runtime and cannot be bypassed by the agent — fail-closed.

Secrets broker

The service that issues agents short-lived, scoped access tokens for target systems. No long-lived secrets in the sandbox.