You can work it by hand, a brittle script at a time. Or hand the keys to the kingdom to an autonomous agent, unbounded across all of it.
Neither of those is a plan.
The value of an AI that can act on real infrastructure is entirely in the rigor of the gate that sits between the model and the action.
In three parts
Where you ask. What decides. What does the work.
Facet
Where you ask
You say what you want, in plain language. Facet works out what that means.
It holds no privileges of its own, and it cannot claim an identity stronger than the one you signed in with. A conductor holds no instrument, and makes no sound.
Hivemind Hub
What decides
The central nervous system. It holds what it knows about your environment, your policies, your permissions, and the state of everything in flight.
It turns the situation and your instructions into permitted actions.
Spawn
What does the work
One on every machine in your environment — the commander on that host. The Hub decides. Spawns act.
Each issues its agents exactly the tools their task needs, and nothing else.
The gate
One decision model, whatever asked.
A Spawn verb and a curl resolve through the same evaluation function, so the answer does not depend on which path the work took.
AllowNeeds approvalDeny
Every decision lands on a tamper-evident, hash-chained ledger — and instructions are recorded as well as actions. A record of what a system did is ordinary. A record of what it was asked is what lets the trail answer why.
Shipped, and not yet shipped
What is running today.
Governance is the product, so it matters which parts of it are actually switched on. This is the same live / dark-launched line the engineering documentation keeps, published rather than left to a discovery call.
State
Capability
Live
Approval and escalation spine · tamper-evident audit chain · credential sealing and server-side injection · verb-tier and role-floor authorization · model runtime
Preview
Unified gate · per-target standing grants · Remote-Commander control surface · LLM-workflow runtime · per-job credential minting. Merged and dev-safe, not yet activated in production.
Roadmap
Approval-triggered execution dispatch · agent-runner · Spawn as the execution routing plane
Whose infrastructure
It runs on yours.
No cloud dependency. No third party. Nothing phoning home. The hive has been inside your own walls the entire time.
Your data stays yours — for the lifetime of your data.
The film
Hivemind, end to end.
Three minutes and twenty-four seconds: the partnership, the colony, and one fault followed from the moment it is noticed to the moment it is recorded.