AshiucheOS

Prologue · The compilation

AshiucheOS

Not another agent framework.
An institution that can use agents safely.

Describe the institution you want. AshiucheOS compiles it into mission contracts, operates it, measures what actually changed, and improves it.

The instrument above is the institution's structure drawn as geometry — not telemetry, and not a simulated feed. Live institutional state renders in the Control Room, where every value carries its source.

An institution is a set of
objects that can be inspected.

Not prompts and not a chat transcript. Six persisted object types carry the whole institution, and each one is addressable, versioned, and auditable on its own terms.

01

Charter

Identity, purpose, values, objective weights, the resource pool, and the operating horizon the institution is accountable to.

Intent
02

Mission

A measurable unit of institutional intent carrying a budget, required capabilities, phases, success criteria, and termination conditions.

Contract
03

Capability

A description of what can be done, held independently of the provider that performs it, so providers stay replaceable.

Fabric
04

World model

Timestamped assertions about customers, markets, systems, and people — each one carrying its source reference and a confidence.

Belief
05

Memory

Working, session, project, and canonical planes. The institution compacts aggressively and promotes durable knowledge with provenance.

Recall
06

Audit

A hash-chained record of every state change, artifact, and measured outcome, so any claim on any other screen can be traced back.

Proof

Intent enters as a draft and
leaves as a measured outcome.

Every mission is a contract: success criteria, budget, termination conditions. Signed before work starts. It moves through explicit states, and it can only reach a terminal state through the ones before it.

COMPILED

Organization assembled

The compiler turns required capabilities into temporary cells and a typed task graph with dependencies, retries, and timeouts.

FUNDED

Portfolio allocated

The economy scores candidates on expected value, alignment, urgency, confidence, cost, and risk, then funds a portfolio rather than a backlog.

RUNNING

Execution fabric

Parallel tasks are claimed under lease, with bounded loops, idempotency, compensation metadata, and a persisted event for every transition.

MEASURING

Reconciled to target

Observed metrics are compared against the desired state. A gap is reported as a gap; an unobserved metric is reported as unknown.

COMPLETED

Outcome attributed

The result, its cost, its artifacts, and its evidence are written to memory so the next portfolio is chosen from what actually happened.

A belief is only as good as
the hour it was last checked.

An institution that only reads its own plan is a fiction. AshiucheOS keeps a world model: timestamped assertions about customers, markets, systems, and people, each one carrying the source that produced it and a confidence that ages.

Observed

Recorded against its source

An observation enters with the reference that produced it and the confidence it earned. Nothing is admitted to the world model without both.

Ageing

Confidence decays with the clock

Freshness is part of the assertion, not metadata beside it. An observation that has not been re-checked is weaker than one that has, and the interface says so.

Stale

Dependent outcomes are marked unverified

When a belief goes stale, the missions and measured results that rest on it stop counting as proven. The institution reports the gap instead of holding the number.

Candidate futures are scored before they are funded. The simulation laboratory compares scenarios against the desired state, and the resource economy ranks them on expected value, alignment, urgency, confidence, cost, and risk. What survives is a funded portfolio — not a backlog that grows until someone prunes it.

A target the institution has never observed is reported as unknown, with the time of the last attempt. It is never reported as zero, and never as satisfied.

Every claim has a receipt.

An institution that cannot prove its own work is a demo. Mutations append to a hash-chained audit log, and the chain is verifiable on demand.

The Control Room never invents a number. A value that has not been observed is shown as unknown, with the time of the last check — not as a confident zero. A green state is never displayed while a material conflict is unresolved.

Each audit entry carries its sequence, actor, action, resource, and the digest of the entry before it. Breaking any link breaks verification, which is exactly what makes the record worth reading.

Artifacts, provider runs, costs, and latencies are recorded next to the task that produced them, so an outcome can be attributed rather than asserted.

Audit record hash-chained

Sequencemonotonic, per organization

Actor and actionsubject · mission.compile | task.retry | provider.upsert

Resourceresource_type · resource_id

Previous digestlinks this entry to the one before it

VerificationGET /api/v1/audit/verify

Coda

Open the desk.

The Control Room reads live system, mission, execution, capability, world, memory, operations, and audit state from this deployment. If a source has not reported, it will say so.