Skip to content
Spice Rack · the organism
A plate of gorgonian sea-fan colonies, each a branching network, warm treatment

watch it run

The body in motion.

The organism pages show you the anatomy, one system at a time, standing still. This page runs a real job through all of them. One worker takes a single task from claimed to deployed, and every step it takes lands on a permanent record. The systems are the anatomy. This is the body in motion.

Open the coding loop below and watch it run, or press play and let it run itself.

software · the deep end

The hardest kind of work, run in the open.

Software is the most revealing kind of work to run this way, because it has the most steps and the loop keeps exactly the ones most AI tools skip. The coding and research loops are live below. Design runs the same governed way, next. The same system runs your team’s work too, with fewer steps.

loop 01 · governed build

Ship code, safely

Watch an AI write production code and land it on your main branch through a loop that checks its work at every gate.

claim · commit · pull request · review · recap

See how it works

the governed build loop

Watch an AI ship production code to your repository, reviewed by an outside set of eyes, on the record.

This is the loop that built the page you are reading. Below is the whole of it, one step at a time, with the record each step writes down. Nine steps in, one change is live and nine records are on the ledger.

the scary part

Letting an AI touch your codebase is the scary part.

So main is protected. Your change arrives as a request, never a push, and only lands after passing every gate.

No direct path to main. Not even on trust.

every step · 01 → 09

One task, nine governed steps.

This shows the loop’s five core moments. A cell claims the work, opens a pull request, gets an outside review, merges, and writes a recap. A cell works down the rail; each step names the safeguard that keeps it safe. Open "show all nine steps" for the full run, or press play to watch it and pause on any step to read it.

  1. One owner at a time. The task state machine will not let two cells hold the same work.

    A cell claims the task. It moves from proposed to active, and the claim is recorded.

    on the recordrepo.tasks · proposed → active · claimed_by, claimed_at

  2. A lease with a fencing token. A stale worker cannot write over a live one.

    The cell opens its own copy of the code with a lease, so two cells working at once never touch the same files.

    on the recordagent.worktrees · lease acquired · leased_by, fencing_token

  3. Every change is a commit on a branch, never a silent edit to main.

    The cell writes the code in its isolated lane, committing as it goes.

    on the recordgit · commits on the feature branch

  4. Main is protected. Code arrives as a request, not a push.

    The work goes up as a pull request on GitHub, never straight to the main branch.

    on the recordgithub.pull_requests · draft → open

  5. 05independent reviewreviewedthe Immune System

    The author never approves their own work. The reviewer is a different system.

    A separate reviewer, OpenAI Codex, reviews the pull request on GitHub. A second set of eyes that is not the author.

    on the recordgithub.pr_reviews · verdict recorded

  6. 06triageclearedthe Immune System

    No finding is ignored. Each one is answered on the record before merge.

    The cell answers every finding. Real bugs get fixed; a finding that is not a real bug is answered with proof, not waved off.

    on the recordrepo.task_comments · every finding answered with proof

  7. 07QA gateverifiedthe Skeleton

    A dependency the merge cannot skip. QA has to pass first.

    A linked QA task can gate the merge until the work is independently verified.

    on the recordrepo.tasks · a QA task gates the merge

  8. The gate is mechanical. An open finding blocks the merge.

    Only a clean, reviewed pull request merges to main. The cell owns its own merge.

    on the recordgithub.pull_requests · merged, merge SHA recorded

  9. 09deploy + recapthe Nucleus

    Nothing is done until it is deployed, smoke-tested, and written down.

    The change deploys, a smoke test confirms it, and a recap lands on the record. Done means verified.

    on the recordagent.session_summaries · deployed, smoke passed, recap

loop 02 · research

Gather and verify

Watch a worker answer a question with sources, checked by a second pass, and land the finding on the record.

question · sources · cross-check · finding

See how it works

the governed research loop

Watch a worker research a question and land a finding that carries its own proof.

A research question runs the same governed way as code. Every source is captured, every claim is tied to where it came from, and the finding lands on the record for the next worker to read back before it starts.

the scary part

An AI that makes things up is the scary part.

So no claim is taken on trust. Each one is tied to the exact source it came from, and a separate pass tries to refute it before it is written down. A claim that cannot show its source, or cannot survive a second look, never lands. The finding on the record carries its citations with it.

every step · 01 → 05

One question, five governed steps.

A cell works down the rail. Each step names the safeguard that keeps it honest and the record it lands. Press play to watch the whole pass, or pause on any step to read it.

  1. 01claim the questionthe Skeleton

    One owner at a time. The task state machine will not let two cells hold the same question.

    A cell claims a research question. It moves from proposed to active, and the claim is recorded.

    on the recordrepo.tasks · proposed → active · claimed_by, claimed_at

  2. 02gather and citethe Nucleus

    No claim without a citation. A statement with no source does not get written down.

    The cell pulls its sources and ties every claim to the exact source it came from. Quote first, then reason.

    on the recordops.knowledge_base · back_refs · every claim cited to its source

  3. 03cross-checkverifiedthe Immune System

    A claim survives only if it holds up to a second look, not because it was stated confidently.

    A separate pass tries to refute each claim. The ones that cannot hold up are dropped before they spread.

    on the recordrepo.task_comments · each claim checked, weak ones dropped

  4. 04the finding landsthe Nucleus

    Findings live in the record, not in a chat log that scrolls away.

    The verified finding becomes a decision, a lesson, or a knowledge entry, with its sources attached.

    on the recordops.knowledge_base · finding recorded with its sources

  5. 05read backthe Senses

    Recall is by meaning, not by remembering a file name. The finding surfaces when it is relevant.

    The next worker recalls the finding by meaning before it starts, so no one researches the same thing twice.

    on the recordpgvector · embedded, recalled by meaning

the receipts

Every finding lands as a record you can read back.

Findings are not lost in a chat log. Each becomes a decision, a lesson, or a knowledge entry, with its sources attached, and stays recallable by meaning.

decisionseach with its rationale
794
lessonseach with its cause
734
knowledge entriesreference
1,416
memory chunksrecalled by meaning
72,041

Counts from the system's own database on Oct 8, 2026.

loop 03 · design

Design to a written system

Watch a worker produce a design pass held to the color, type, and motion rules this site runs on, reviewed against that written system before it ships.

references · tokens · rules · review · decision

See how it works

the governed design loop

Watch a worker design against a written system, not by taste, and land the direction on the record.

This is the loop that designed the page you are reading. The color, type, motion, and spacing are named values in one versioned file, so a design pass is held to a system the whole site shares, not to one worker's opinion. Below is the whole of it, one step at a time, with the record each step writes down.

the scary part

An AI designing by taste, with no system to hold it, is the scary part.

So nothing is designed fresh from opinion. The worker reads a written system first, where every color, type size, and motion curve is a named token in a versioned file. The pass is built from those tokens, held to the written rules for contrast and copy, and reviewed by a separate set of eyes before it ships. One change to the system re-themes the whole site, because nothing hardcoded a value it was told to read.

every step · 01 → 07

One pass, seven governed steps.

This shows the pass’s five core moments. A cell claims the work, designs to the tokens, is held to the written rules, gets an outside review, and records the direction. Open "show all seven steps" for the full run, or press play and pause on any step to read it.

  1. 01claim the passthe Skeleton

    One owner at a time. The task state machine will not let two cells hold the same pass.

    A cell claims the design task. It moves from proposed to active, and the claim is recorded.

    on the recordrepo.tasks · proposed → active · claimed_by, claimed_at

  2. 02gather referencesthe Nucleus

    References come first. The build does not start on a blank guess; it starts from what is already on the record.

    Before any pixels, the cell gathers real references and reads back what already ships, so the new work is a considered choice, not a visual twin of the last page.

    on the recordops.knowledge_base · references captured before any pixels

  3. 03read the written systemthe Genome

    The system is written down and versioned. A worker reads the tokens; it does not pick fresh values per page.

    The cell reads the system the whole site shares. Every color, type size, motion curve, and spacing step is a named token in one versioned file, and the cell uses those tokens as written.

    on the recordgit · src/styles/theme.css · the versioned token source

  4. 04design to the tokensthe Bloodstream

    Components reference tokens, so one change to the system re-themes every page, the light chapters included.

    The pass is built from the tokens. Every color is a token, every motion an eased curve from the contract, with no raw hex and no magic numbers.

    on the recordgit · commits that use tokens, never raw values

  5. 05held to the written rulesheldthe Immune System

    The rules are mechanical checks, not taste. A failing contrast pair or a stray em dash blocks it.

    Before it can ship, the pass has to meet the written rules. Contrast clears WCAG AA, the copy carries zero em dashes, and the type stays on the scale.

    on the recordcontent-voice + WCAG AA · contrast and copy checked

  6. 06independent reviewreviewedthe Immune System

    The author never approves their own design. The reviewer is a different system.

    The pass goes up as a pull request and the same outside reviewer, OpenAI Codex, reviews it. Design ships as code, so it never merges on the author's own say-so.

    on the recordgithub.pr_reviews · verdict recorded

  7. 07the direction landsthe Nucleus

    The direction lives in the record with its rationale, not in a chat that scrolls away.

    The chosen direction, and why it beat the alternatives, is written down as a decision, so the next pass builds on it instead of relitigating it.

    on the recordops.decisions · direction recorded with its rationale

the receipts

The system that themed this page is one versioned file.

The colors, type scale, and motion curves on every page here read from one token source. Change a token and the whole site re-themes, the light chapters included, with nothing hardcoded to drift out of sync. The palette, type, and motion below are those live tokens.

Key

the palette

  • --color-paprikathe one accent
  • --color-verifiedverified / passed
  • --color-ink-1primary text
  • --color-ink-2secondary text
  • --color-ink-mutedmeta, holds AA
  • --color-basethe ground
  • --color-engravethe engraving ink

the type scale

  • Governedtext-chapter
  • Governedtext-section
  • Governedtext-lead
  • Governedtext-body
  • Governedtext-meta

the motion

  • ease-micro hover / focus
  • ease-reveal data + edge draw
  • ease-morph between-state

Writing the code is the easy part.

The governed loop keeps going where most AI tools stop.

inside the factory

Most AI writes code. This runs the whole build.

The loops above are one part of a larger process, one that runs from the first idea through design and build to keeping the thing alive in production. Every phase is written into the process the system runs, and each one names the decisions it has to settle before the next begins. The choices teams usually make by accident in production, keeping test and live apart, deciding who owns what, deciding who can see which data, are decided early, where they are cheap to change.

Geological strata, layer upon layer laid down in order
Strata: each layer laid down in order, and kept. A product gets built the same way, one phase at a time.
  1. discoverywhat to buildName the problem and who it is for, before any code gets written.
  2. designhow it looksDecide how it should look and behave, so the build has a target to hit.
  3. architecturehow it is builtadded Aug 2026Settle the shape of the system before the first line of code.
  4. buildwrite the codeWrite it on a branch, reviewed, and merged only once every gate has passed.
  5. environmentstest kept apart from liveKeep test and live apart, so a change is proven before real users ever see it.
  6. betaa few real usersPut it in front of a few real users and watch what actually happens.
  7. GAopen to everyoneOpen it to everyone, once it has earned the traffic.
  8. operatekeep it aliveKeep it running. Watch it, patch it, and carry it forward on the record.

Architecture carries a tag because the factory added it after its own record showed the step being skipped.

the part that earns the trust

The factory found its own missing step, and added it.

Architecture, the step where the shape of a system gets decided before the first line of code, was being skipped. Nothing outside the factory pointed this out. The system read its own record, saw the gap, and made it a phase of the process in August 2026.

Building a product is one kind of work this runs. Each of the others has its own defined process too, whether that is keeping a system healthy, carrying a piece of research, delivering an analysis, or standing up operations.

the rules run on every write

412governed tables
906validity checks
179access rules

Counted from the system's own database on Oct 8, 2026.

the steps most agents skip

Writing the code is the easy part.

Most agents stop at “it wrote code.” The governed loop keeps going, and the four steps it refuses to skip are the ones that make the output safe to land on your main branch.

an isolated worktree, with a lease

the governed loop: Every worker runs in its own checkout. Parallel workers never overwrite each other.

most AI tools: edit your files in place

an independent outside reviewer

the governed loop: A different model reviews the code (OpenAI’s Codex), not the one that wrote it.

most AI tools: let the model check its own work

a gate that can say no

the governed loop: A failed check blocks the merge. Green is earned, not assumed.

most AI tools: nothing blocks a bad change

a recap on every close

the governed loop: The next worker reads back what happened. Nothing is lost between sessions.

most AI tools: lose the context between runs

the receipts

This is the loop that built this site.

Each number comes from a real read. The build record is from the platform database and GitHub as of Oct 8, 2026, the coordination ledger from that database on Oct 8, 2026, and the authorship split from the platform git history as of Sep 27, 2026.

across the platform

66%A real count from the platform's own git history, shown as proof rather than a claim. It is a dated snapshot, captured Sep 27, 2026.

of 1,950 commits agent-written, each one on the record.

a real count from the platform's own git history, as of Sep 27, 2026

this page

201A real count from our own database, shown as proof rather than a claim. It is a dated snapshot, captured Oct 8, 2026.

tracked tasks

this page

180A real count from this site's GitHub repository, shown as proof rather than a claim. It is a dated snapshot, captured Oct 8, 2026.

pull requests, every one reviewed

this page

408A real count from this site's GitHub repository, shown as proof rather than a claim. It is a dated snapshot, captured Oct 8, 2026.

independent Codex reviews

the coordination ledger

Tasks
10,356
Agent messages
7,754
Task comments
10,207
Threads
3,412
Knowledge-base items
1,416
Decisions
794
Lessons
734
Ammonite, a chambered spiral shell, each chamber sealed as the animal outgrew it, warm treatment
Ammonite: built one sealed chamber at a time, each kept on the record. The shape of governed work.

done means verified

Nine verified records, one live change.

Nine steps in, the rail behind the cell is a column of nine verified records and one change is live. That is a company you own doing a day of work in the open, with a receipt for every step. The same governed loop runs research and design work too.

This is the loop that built this site, with isolated worktrees, leases, pull requests, an outside reviewer, and a recap on every close. The steps shown are the real ones.

A radiolarian, an intricate radial skeleton that holds at every scale
One organism, whole at every scale.

You just watched the whole loop run.

Every step wrote a record, and the records are public. See the records themselves, or bring us the work you want run this way.