A hierarchical 16-agent operating environment
I run 16 specialized agents across 15 namespaces—research, finance and analysis, technology operations, executive support, legal review, CRM, and chief-of-staff coordination—with an orchestrator acting as the control plane. It is a governed fleet with role separation, not a pool of isolated chat sessions. Claude Code and Codex are in production use; local inference through OpenCode and Ollama is in beta while runtime routing is finalized.
Most of the engineering is not prompting. It is authority. Agent-to-agent communication started as open collaboration and was rebuilt as explicit allow-listing: no wildcard routes, 34 directional rules, one-way where a domain should receive work but never initiate it. Every one of the 15 non-orchestrator agents runs under a capability ceiling that blocks six destructive capability classes. Denied routes were live-tested rather than assumed, because a control you have not tried to break is a control you have not verified.
The principle underneath all of it: agent intelligence and agent authority are separate things. An agent can be highly capable while specific destructive actions and cross-domain communication routes are technically denied. That distinction is the difference between an impressive demo and infrastructure you can begin to trust with real work.
Explore the system architecture →