◇ HOW_IT_WORKS
From request to result. Every step accounted for.
◆ THE_7_STEP_JOURNEY
Your request enters the system
The right agent is selected for your task
A secure, isolated environment is provisioned
Your agent works within strict boundaries
Output quality is verified before delivery
Results are returned to you
A tamper-evident compliance record is written
◆ THE_GOVERNED_PATH
Solar Systems sits between the caller and the models. A task crosses identity, policy and audit before it touches any data.
The single door in — including internal callers. Derives who is calling from the token; never trusts the request body.
Profiles the task and puts it through a security gate — classifier plus policy — before any execution is provisioned.
Launches agents on-behalf of the real principal, in isolated containers. GDWG drives autonomous loops over a governed graph.
One way to run inference for the whole platform — routed across external providers and local models, by measured merit.
◆ THE_GOVERNANCE_SPINE
Five services cut across every call — this is what the auditor asks about.
Security & authorization: access checks (FGA), session-token minting, secret resolution.
Identity & tenancy: principals, tenants, roles, capability plans, quota, budget and metering.
Tamper-evident audit chain and memory — the record survives the loss of the bus.
Event backbone (NATS JetStream): observability, never authority.
Judgment plane — observes and scores in shadow; no enforcement gate is switched on.
◆ SYSTEM_ARCHITECTURE
◆ SYSTEM_ARCHITECTURE
Routes tasks, manages lifecycle
Tamper-evident audit chain; knowledge, memory and step ledger
Event backbone (NATS JetStream) across the platform
The only door in. All tasks enter here.
Provisions and manages secure containers
Distributes load, manages capacity
Owns principals, tenants and roles; tracks quota, budget and billing
Safe testing of new capabilities
Multi-provider inference routing — quality without lock-in
Security & authorization — access checks (FGA), session-token minting, secret resolution
Judgment plane — observes and scores quality and reputation in shadow
GDWG drives agent loops over a governed graph, under the same identity, authorization, quota and audit as every other planet. Harness-agnostic: three harnesses — Claude Code, Codex and Cursor — each drove the engine over the real MCP wire, each with its own model, in an isolated tenant, and the graph closed the contract identically (3/3, 2026-06-11). This is the HARNESS axis: the contract closes the same under external authorship. It is not a claim about the execution or efficacy of the code produced.