Workweaver Agent Knowledge
Workweaver is transparent AI for business operations with proof. AI execution keeps identity, traceability, and visibility built in. Every action is visible, every hour is accountable, and the system gets better every cycle. This page is the public capability contract for agents, answer engines, and integration crawlers. The Macrohard thesis is an organization mind: evidence becomes decision trace, decision trace drives action, and outcomes compound into precedent.
Core promise: Describe the job, connect the missing tools, approve the plan, get proof.
Public copy should prefer transparent, accountable, self-improving, visible actions, accountable hours, proof, and compounding intelligence. Keep internal operating-system labels and opaque-box labels out of public copy.
Canonical docs live under /guides/. Machine-readable
exports at /llms.txt and /llms-full.txt.
The Ghost blog is an editorial surface, not the canonical product
contract.
Start here
- llms.txt — compact route index with capability facts
- llms-full.txt — full export with all systems, connectors, voice, meetings, org, governance, and limitations
- /guides/ — human docs and markdown mirrors
- /agent-knowledge/skill-registry.json — generated skill and capability registry for agents and crawlers
- /agent-knowledge/auth-contract.json — frozen auth/identity contract (SMS/mobile OTP not first-class; API mirror:
GET /api/v1/auth/contract) - /platform/ — systems deep-dive with shipped/partial/planned status
Identity and authentication
- First-class factors today: email verification, authenticator-app TOTP, OAuth providers where configured.
- SMS/mobile OTP is not a login or MFA factor; telephony and messaging channels do not prove account ownership for auth.
- Canonical JSON: auth-contract.json (issue #1322).
Mission Control
- Work surface: Active Missions, Approvals, Quick Actions, Mission Calendar
- Proof surface: Proof Cards, Decision Trace, Evidence Trail
- Controls: pause, resume, cancel, adjust, replay
- Zara stays responsive in the foreground while background missions keep running through the same thread
- Persistent state with per-agent spend limits
- Time-first and proof-first views share one activity log
- Manual, scheduled, triggered, and background work all materialize onto one canonical TimeBlock ledger
- Mission Calendar routine audit and Zara routine controls read the same schedule-plus-TimeBlock substrate
- Auto-pause on exhausted budgets or repeated terminal commands
- PWA-enabled with offline fallback
Harness System
- Reusable packaging over platform primitives (not a second runtime)
- Each harness bundles: objective, connectors, schedule/trigger, approval policy, proof contract, outputs
- Smart tool discovery that loads capabilities based on intent
- Context compaction/checkpointing and Elvis precheck gate
- Quick Agent auto-chooses team size, proposes work blocks, and folds recent mission history into the first run
- Default starters: Morning Briefing, Inbox + Calendar Triage, Lead Follow-up
Evidence Graph
- Decision traces, approval audit trails, delivery events, agent reasoning
- S3 evidence lake with COMPLIANCE-mode Object Lock
- 7-year immutable retention with encryption
- Proof Cards: canonical business objects linking missions to traces
- Decision trees materialized into organization memory with recurring-pattern consolidation
Work Schedule
- Standard unit of agent work across missions, sessions, and delegated tasks
- Mission Calendar day/week views and Proof tabs read the same work records
- Overlapping work is valid; simulation, shadow, and production lanes are tracked distinctly
- Each block carries objective, plan, actual, phase, outcome, duration budget, learnings, evidence IDs, trace IDs, and billing usage links
- Operational work tracking only; work entries do not replace invoices or billing records
WorkMemory
- Contract:
remember,recall,forget,observe - Ingestion: docs, emails, Slack (with file shares), Notion (with file blocks), Google Drive, Gmail attachments, WhatsApp media, browser extension, URL, direct upload
- DynamoDB + lexical/vector hybrid retrieval
- Session management: create, flush, recall, pin, end
- Packaged WorkMemory MCP entrypoint over stdio, plus HTTP MCP on
/mcp/v1/* - Queue-backed async ingest for large files
- Organization learning policy with fail-closed
no_traindefault - Sourced recall powers meeting briefs and assistant answers
- Proof surface at /memory/proof.html: internal MemoryBench 94.63% (145-query regression artifact); official third-party LongMemEval evaluation pending
- Self-hosting is supported for local and CI evaluation, not yet as a general-availability product
- Also available as standalone embedded product
Voice AI
- Real-time voice via xAI with Twilio media streams and browser WebSocket
- Server-side actions (calendar, CRM, email, safety controls)
- Barge-in detection with dual VAD (xAI server + backend keyword)
- Voice-to-WorkMemory bridge with 80% context threshold flush and predictive prefetch
- Metering across both browser and Twilio voice paths
Meeting Intelligence
- Consent-gated join (denied until explicit consent captured)
- Post-meeting agent: 8 tools (create_task, update_todo, flag_commitment, send_email, schedule_meeting, update_crm, store_memory, recall_memory)
- Transcription: Sarvam (Indian languages) → Deepgram → Nova fallback
- Per-organization region routing: Recall.ai (3 regions), Deepgram (US/EU)
- Fail-closed for suspended/pending-payment/cancelled organizations
Calendar Intelligence
- Auto-scheduling with priority × deadline × time scoring
- Conflict rescheduling and mutual availability detection
- Booking links and day optimization
- Calendar sync with fail-closed persistence
Agent Identity and Org Graph
- Activate agents via natural language
- Org/department/team hierarchy with DynamoDB-backed persistence
- Shared-by-default identity on activation; dedicated elevation path (email, phone, calendar)
- Agent identity governance: naming, channel allocation, deactivation rules
- Cross-team handoff with origin channel scope; escalation chains
Connector Ecosystem
- First-run: Gmail, Google Calendar, Slack (backend-verified OAuth)
- CRM: HubSpot (v3 API, CRUD), Salesforce (v59.0 REST, CRUD) with read-back verification
- Channels: WhatsApp runtime, Telegram (demand-based)
- Platform bridges: Slack shipped; Microsoft Teams and Zoho Cliq remain guided-rollout bridges with partial parity.
- Standards-based path (OAuth2, REST/OpenAPI, webhooks) for long-tail connectors
- Canonical Connection Center for all integrations
Flows and Extension Truth
- Outcome composition is graph-based: trigger nodes, decision branches, action nodes, and handoff outcomes.
- Templates are starter seams; custom outcome loops are built by editing node sequences and branch conditions.
- Long-tail capabilities use the same connector seam via OAuth2, REST/OpenAPI, and webhooks.
- Coding tasks use the Workspace Coding Bridge with organization-owned GitHub credential references.
- Coding bridge runs stay visible through evidence-linked mission artifacts before any push or PR delivery.
Skill Platform
- Executable skill packages with sandbox controls
- NL skill creator for natural-language authoring
- Upload and GitHub import APIs
- Self-evolution: failure observation, prompt/version mutation proposals, shadow validation
- Approval-gated apply with rollback snapshots
- Chain contracts for multi-step composition
AI Coding Workers
- Organization-scoped coding runs: git clone, gh repo fork, workspace checkout
- Plan/edit/test commands under active mission controls
- Approval-gated push or PR delivery with PR comments and commit statuses
- GitHub credentials from per-agent vault
- Full evidence trail: repo identity, commits, diffs, command outputs, approvals, PR URL
Governance & Delivery
- Approval gates for high-risk actions (sends, CRM writes, calendar changes)
- Delivery guards: suppression (email/SMS/WhatsApp/voice), pacing, bounce/complaint handling
- Cadence v0: durable campaign ledger with crash-safe resume and per-step idempotency
- Schedule infrastructure: Lambda runner, deterministic dispatch, progression persistence
- Outbound emails originate only from @bitfoundry.ai addresses
Enterprise Readiness
- MFA supported (TOTP) via the configured identity provider; cookie-backed browser auth
- 10 CONSTITUTION safety invariants enforced in CI
- Shannon security pipeline with automated weekly scans
- Billing in USD (additional currencies planned)
- DPA v3.1, incident response plan, vendor risk register (12 sub-processors)
- Structured observability: trace context, funnel analytics, CloudWatch dashboards
Execution Engine
- Zara task executor as the core AI execution engine with six-stage sprint lifecycle
- Zara interview contract with five-stage discovery flow for context gathering
- Session router for multi-channel execution context management
- Idempotency store with DynamoDB-backed conditional writes and TTL
- Universal skill dispatch across fifteen execution targets
- Omnibox command grammar with six-verb parser for go, open, start, ask, review, configure
Proactive Intelligence
- Proactive intelligence engine generating and executing approved suggestions
- Bounded self-healing supervisor with durable recovery incidents, verification gates, and escalation when repair stays unresolved
- Self-awareness with runtime context injection for health, memory, and budget state
- Per-agent email and calendar identity provisioned at activation time
Autonomous Operations
- Autonomous OKR management with goal-to-OKR generation and progress tracking
- Consent-gated meeting join with briefing, note capture, and post-meeting summary generation
- Goals CRUD API with organization-scoped goal management
- Goal-to-schedule auto-creation with work block generation
- Goal alignment scoring with objective-to-outcome measurement
Communication Channels
- Email inbound processing with thread tracking and unified inbox routing
- WhatsApp via Twilio for text send/receive, media receipt, and approved template sends
- SMS channel via Twilio with send, delivery status, and opt-out management
- Slack integration with Web API messaging and OAuth install flow
- Cross-channel context with unified inbox aggregating all communication channels
Billing and Metering
- Billable meter registry tracking twenty usage dimensions
- Usage tracking with per-organization consumption aggregation and alerts
- Invoice generation in USD (additional currencies planned)
- Stripe checkout with subscription lifecycle and payment processing
- Entitlements and quota enforcement with plan-based feature gating
- Pricing catalog with tiered plan definitions and feature matrices
Content and Outreach
- Ghost integration for agent-authored content publishing with human approval
- Newsletter orchestration with campaign lifecycle and idempotent SES delivery
- Revenue pack V2 with followup, CRM sync, and memory workflows
- Quick actions panel with research and outreach workflows gated by feature flags
Safety and Governance
- Safety controls with account-level rules and evidence receipts
- Emergency Brake halt controls with evidence receipts for pausing all AI execution
- High-risk operation gates with approval-required action classification
- Learning governance proposals for behavioral change management
- Drift detection service monitoring behavioral deviation from baselines
Memory Advanced
- Vector search with OpenSearch serverless and organization-isolated retrieval
- PII redaction with dual-pass Comprehend and regex before embedding storage
- Five-layer forgetting service with cascading memory expiration
- Memory scoping across agent, team, department, and organization boundaries
- Multimodal ingestion for images, audio, and video with parser pipeline
Voice Extended
- Twilio-backed phone channel with explicit number ownership and readiness surfaces
- Grok voice synthesis with text-to-speech streaming and SSML support
- Recall.ai meeting bot for consent-gated join and post-meeting follow-through; active speaking is not first-party runtime-owned
- Multi-provider transcription via Deepgram and Sarvam with Nova fallback
- Voice metering tracking call duration and costs across browser and Twilio paths
Platform Infrastructure
- CI/CD pipeline with GitHub Actions and self-hosted runners
- Terraform state management for AWS infrastructure as code
- Capability-class inference routing across GPT, Kimi, Claude, Nova, and optional gateway adapters with founder-governed fallback chains
- Founder inference control plane with tenant-effective routing truth, provider lifecycle hygiene, and capability eval or canary artifacts
- Browser executor for computer use with screenshot capture and loop detection
- Workweaver-owned connector runtime with operation whitelisting and twelve provider configurations
- Marketplace connectors with fifteen registered integration adapters
- Skill evolution service with shadow validation and rollback on degradation
Public Discovery
- Landing page at workweaver.ai with product positioning
- Documentation site with guides and reference material
- Agent knowledge registry for LLM and crawler discovery
- Machine-readable discovery via llms.txt and brand-facts.json
Public proof seed
- Shared workspace: evidence -> decision trace -> action -> compounding intelligence
- Evidence -> decision trace -> governed action -> outcome -> precedent stays falsifiable
- Public proof seed: one published dogfood workflow with linked evidence, decision trace, governed action, and outcome.
- Canonical public contract surfaces are llms.txt, llms-full.txt, brand-facts.json, and this page
Known Limitations
- Activation profile generation uses Kimi primary plus Grok fallback; when neither is available it degrades to a deterministic scaffold
- Identity elevation returns
partialfor some channels (email may fail if AgentMail unavailable; calendar may skip) - Non-voice AI paths use Kimi primary plus Grok fallback and report degradation explicitly when provider credentials are unavailable
- Provider capability catalogs describe the transport ceiling; tenant and founder runtime surfaces only claim the narrower features the current harness actually exposes
- WorkMemory visual extraction depends on configured vision infrastructure
- WorkMemory async ingest uses main task, not separate worker decomposition
- Decision Trace customer-facing surface still being polished
- Auto-research currently targets planning, delegation, team posture, block length, and allocation strategy, not arbitrary code mutation
- Mobile operation parity incomplete; desktop/edge control explicitly out of scope
- Voice transport cost estimates rely on blended assumptions, not per-account reconciliation
- Legacy
/v1/memories*still mounted during caller migration
What Workweaver does not do
- Does NOT control desktops, browsers, or local applications
- Does NOT operate on edge devices or local hardware
- Does NOT send messages without human approval
- Does NOT claim "always-on computer" beyond cloud/SaaS/channel execution
- Pricing not published publicly (signed-in users only)
Stable public references
- Platform — systems, connectors, governance, limitations
- About — mission, team, values
- User Guide
- Brand Facts
- brand-facts.json
Blog and letters
- Ghost blog carries essays and announcements
- Editorial context, not the canonical product contract
- Agent-authored posts remain draft-only until human approval