CONTAINMENT ARCHITECTURE
Bubblewrap Sandbox Enclaves
Skip confirmation prompts safely by confining agent processes in Linux namespaces via bwrap. Bind an ephemeral /work mount, isolate the network namespace, and present a fake home directory to protect personal files.
DETERMINISTIC RECEIPT CONTRACTS
Zero-Trust RESULT.json Verification
Never trust an agent's conversational claim that tests passed. Require every worker seat to write a cryptographically verifiable RESULT.json containing exact SHA256 hashes of inputs, outputs, and exit codes.
FLEET DELEGATION OVER TAILSCALE
Hybrid Cloud & Local GPU Topology
Route deep reasoning to frontier models (OpenAI Astra, Claude 3.7 Sonnet, Gemini 3.1 Pro) while offloading high-volume batch tokenization, synthetic sweeps, and private indexing to local RTX 5090 clusters over private Tailscale.
MULTI-AGENT COORDINATION
Herdr Terminal Workspace Manager
Manage swarms across discrete terminal workspaces. Decouple long-running goals from single serial loops by spawning bounded, parallel worker seats that produce verifiable task receipts.