Agents with names. A record you can verify. A guard you can test.
Named agents with personalities, not thread IDs. Petal 🌸 guides; Blossom 🌿 builds. Add your own avatars per workflow.
Every message, dispatch, and model call lands in an append-only, hash-chained timeline. Tampering is mathematically detectable.
The built-in runtime has exactly one route to a model provider: through Shield. Secrets and PII its packs match are swapped out before any prompt leaves.
Run agents through the built-in Shield-routed runtime, or plug in your existing Hermes agents. Same orchestrator either way.
A product you install, not a project you wait for.
The engagement is the install, the packs, and your team trained on it — not months of bespoke build. The capabilities below ship in the box.
Connects where work happens
Five connectors ship in the box: Slack over Socket Mode (no public ingress), Telegram, HMAC-signed webhooks, cron schedules, and file-drop watchers. Adding your own is one Go file against a six-method interface.
Orchestrates real work
Direct routing sends each message to the right agent by channel rules. Coordinated mode plans, splits the task across specialist agents in parallel, and composes one answer — with bounded retries and timeouts.
Shows you everything
The desktop app's Flow Trace replays any message's whole journey — connector to agent to Shield to reply — with redaction and latency badges. The chronicle browser filters by agent, connector, or trace.
Counts dollars, not just tokens
Spend is tracked per agent, per model, per day — converted to dollars, with soft and hard budget alerts. The Cambium tier turns that history into learning: failure patterns, rework detection, per-agent reports.
Upgrade by build tag, not by migration.
Installed. Local. Shielded.
You own the source.
A five-step setup wizard connects your tools, verifies Shield with a live redaction test, and sends the first message through the whole pipeline before you're done.
A local engine and desktop app — not SaaS, not a cloud proxy. Nothing phones home. Your prompts go to your model provider and nowhere else.
The built-in runtime is hard-wired to the Shield gateway — there is no other code path to a provider. The wizard proves it with a canary secret before you go live.
Full Go source delivered at handoff. No license server, no kill switch. Run it yourself, or have us run it with you.
Purfect, not perfect — but honest about both.
See a message travel.
The demo is the setup wizard: connect a tool, watch Shield swap a canary secret live, and trace the first message end to end. Founder-led, fast response, no juniors.