Capsules

v1 catalogue, 2026-09-22 sleeps as code, wakes on a problem
Principlehow a capsule runs

A capsule sleeps as code. Jev routes inside it. An LLM wakes only when there is a problem or when Jev decides.

Every run is one row in the federation DB. The verdict is computed by the runner, never reported by an agent.
What becomes a capsuleevery repeated process
repeatedAND(can breakORneeds a decision)capsule
feature development CI/CD backups client agent work any node that can break
Managed by a capsule, never a loose script. A pure transform with neither stays code inside a capsule, so the catalogue does not sprawl.
One capsuletrigger required, the rest optional
TriggerREQUIRED
cron, event, call
wakes the capsule
ActorsOPTIONAL
code, Jev, Luna, Sol
who may act
ActionsOPTIONAL
brief path or argv
what runs
OutcomeOPTIONAL
pr, sha, file, row
+ bind /[0-9a-f]{40}/
ChecksOPTIONAL
argv
run by the runner
IdentityAGENTS
Slack bot or mail
+ persona memory
L1 code
Always runs. Known cases end here.
L2 Jev
Confidence route: code, Luna, Sol or Astra.
L3 LLM
Woken only on an exception or a Jev route.
Passport
capsule id
owner
box
version
trigger
state
gsp-cap-0142
office
gsp
v1
cron 09:00
planned
Every capsule carries this passport: a registry row, not a crypto grant.
Tier 12 in this catalogue

Simple

Trigger plus code. No identity, no model.
triggerL1 coderow
MessengerOffice
Tier 26 in this catalogue

Advanced

An identity, a sleeping model, or both.
triggerL1 codeL2 JevLuna / SolL3 LLM asleeprow+ identity
MaxMegGSP NOCBackupsCI/CDFeature development

Catalogue

8 capsules, all planned, in set up order below

Messenger

intercomsimpleplanned
gsp-cap-0101ownerofficeboxevery boxv1stateplanned
Purpose
Deliver every message to its address
Box
every box that runs sk
Trigger
call: sk intercom send
Identity
none
Brain
none, pure code
Jev routes
none
Actions
route to seat: desk: capsule: box: role:
Outcome
delivery row, bind message id
Checks
ack from the receiving inbox
To GSP
delivery rows, undelivered count

Backups

one capsule, every boxadvancedplanned
gsp-cap-0102ownergspboxcentral, 6 boxesv1stateplanned
Purpose
Prove every backup is restore-grade
Box
gsp, oval, huawei, ppp, prc, Miami Flowers
Trigger
event backup-finished + daily cron
Identity
none
Brain
LLM wakes only when a fix fails twice
Jev routes
verify: codefix: Luna on owning boxhard: Sol
Actions
restic check, size + sha256 at the destination
Outcome
verify row per box, bind snapshot id
Checks
pg_restore -f /dev/null exit 0
To GSP
restore-grade verdict per box
⚠️ Never reads from B2 or Glacier without Tim's order.

GSP NOC

network operations centeradvancedplanned
gsp-cap-0103ownergspboxgspv1stateplanned
Purpose
Find faults and silent capsules, get them fixed
Box
gsp
Trigger
cron + events: CI, governor, tunnel, runner, load, failed unit
Identity
none
Brain
LLM wakes only on an unresolved anomaly
Jev routes
known: codefix: Lunahard: Sol
Actions
probe, act on recorded pids only, dispatch fix
Outcome
incident row + fix PR or action
Checks
the same probe green after the fix
To GSP
incidents, silent-capsule flags

CI/CD

merge funneladvancedplanned
gsp-cap-0104ownergspboxgsp runnersv1stateplanned
Purpose
Merge and release signed, green work
Box
gsp runners, client deploy runners
Trigger
PR event: checks green + seat:signed
Identity
none
Brain
no LLM unless Jev flags a code failure
Jev routes
infra fail: 1 reruncode fail: Lunared twice: Sol
Actions
auto-merge, release, auto rollback
Outcome
merge sha + release, bind /[0-9a-f]{40}/
Checks
health check on the exact sha
To GSP
release rows, rollback count

Feature development

advancedplanned
gsp-cap-0105ownerofficeboxowning boxv1stateplanned
Purpose
Turn an approved unit into merged work
Box
the box that owns the unit
Trigger
event: unit approved
Identity
none
Brain
desks do the work; planner wakes on a scope fault
Jev routes
task: Lunahard, QC: Soldesign: Astra
Actions
project › unit › tasks › build capsules
Outcome
PR + sha, bind /[0-9a-f]{40}/
Checks
CI green + Sol QC
To GSP
PR to CI/CD, run rows per task

Max

C9 client agentadvancedplanned
prc-cap-0201ownerC9 laneboxprcv1stateplanned
Purpose
C9 team's agent: talks, plans, writes units
Box
prc, replaces the headed session on oval
Trigger
Slack mention of @Max in the C9 channels
Identity
Slack bot "Max" + C9 persona memory
Brain
Opus 5.5, router and planner, wakes on each mention
Jev routes
lookup: codebuild: Lunahard: Soldesign: Astra
Actions
reply in thread, write unit, send to prc desks
Outcome
unit id + thread reply, bind unit id
Checks
unit accepted by sk, reply posted
To GSP
units, run rows, model cost

Meg

PPP client agentadvancedplanned
ppp-cap-0301ownerPPP laneboxpppv1stateplanned
Purpose
PPP team's agent: talks, plans, writes units
Box
ppp
Trigger
Slack mention of @Meg in the PPP channels
Identity
Slack bot "Meg" + PPP persona memory
Brain
Opus 5.5, router and planner, wakes on each mention
Jev routes
lookup: codebuild: Lunahard: Soldesign: Astra
Actions
reply in thread, write unit, send to ppp desks
Outcome
unit id + thread reply, bind unit id
Checks
billing: dispatch run + pm2 artifact sha
To GSP
units, run rows, model cost
⚠️ Billing deploys are dispatch-only. A merged PR never counts as deployed.

Office

for Timsimpleplanned
hua-cap-0401ownerofficeboxhuaweiv1stateplanned
Purpose
Small recurring jobs for Tim
Box
huawei
Trigger
cron: reminders, Monday report, board tick
Identity
none
Brain
none, code only
Jev routes
none
Actions
send reminder, build weekly report, refresh lane board
Outcome
message sent or file written
Checks
file exists, message delivered
To GSP
run rows
Routing inside a capsulecheapest actor first
event
L1 code rule
match ends here
L2 Jev route
by confidence
L3 LLM
last resort
Every capsule reports itselfno agent writes a status
1
Registers on install
idboxversiontrigger
2
Writes one row per run
run idoutcomechecksverdictcost
3
Heartbeats on its schedule
A silent capsule is flagged by the NOC.
federation DB (one store)registry, runs, heartbeats
Registry and monitoringexample rows, not live data
Registryone row per capsule
idnameboxstatelast runverdict
gsp-cap-0101Messengeralllive09:42pass
gsp-cap-0102Backups6 boxeslive05:15fail
gsp-cap-0103GSP NOCgsplive09:45pass
gsp-cap-0104CI/CDgsplive09:31pass
prc-cap-0201Maxprcsilent06:02no beat
hua-cap-0401Officehuaweilive09:00pass
How the NOC watches the othersheartbeat age against schedule
GSP NOC reads the DB Messenger Backups CI/CD Office Max Meg silent 3h
beat on timesilent: incident row, Jev routelast verdict fail: fix routed
Set up orderfoundations carry the rest
1Foundations
They carry every other capsule.
MessengerBackupsGSP NOC
2Delivery
Needs the NOC to watch releases.
CI/CDFeature development
3Client agents
Need Messenger and a Slack identity.
MaxMegOffice any time
ReadinessFabric Driver review, 2026-09-22
Method sound
not ready
Manifest has 3 shapes and a calendar-only trigger; needs the one schema
Fabric carries it
not ready
No verdict runner yet
sk-cli carries it
not ready
No capsule send, box intake, intercom injection or Slack mention ingress
about 30 desk runs in total4 passes to the first agent capsule, Max or Meg