You can work it by hand, a brittle script at a time. Or hand the keys to the
kingdom to an autonomous agent, unbounded across all of it.
Neither of those is a plan.
The value of an AI that can act on real infrastructure is entirely in the rigor of
the gate that sits between the model and the action.
In three parts
Where you ask. What decides. What does the work.
Facet
Where you ask
You say what you want, in plain language. Facet works out what that means.
It holds no privileges of its own, and it cannot claim an identity stronger
than the one you signed in with. A conductor holds no instrument, and makes
no sound.
the Hub
What decides
The central nervous system. It holds what it knows about your environment,
your policies, your permissions, and the state of everything in flight.
It turns the situation and your instructions into permitted actions.
Spawn
What does the work
One on every machine in your environment — the commander on that host.
The Hub decides. Spawns act.
Each issues its agents exactly the tools their task needs, and nothing else.
The gate
One decision model, whatever asked.
A Spawn verb and a curl resolve through the same evaluation
function, so the answer does not depend on which path the work took.
AllowNeeds approvalDeny
Every decision lands on a tamper-evident, hash-chained ledger — and
instructions are recorded as well as actions. A record of what a
system did is ordinary. A record of what it was asked is what lets the trail
answer why.
Shipped, and not yet shipped
What is running today.
Governance is the product, so it matters which parts of it are
actually switched on. This is the same live / dark-launched line the engineering
documentation keeps, published rather than left to a discovery call.
State
Capability
Live
Approval and escalation spine · tamper-evident audit chain ·
credential sealing and server-side injection · verb-tier and
role-floor authorization · model runtime
Preview
Unified gate · per-target standing grants · Remote-Commander
control surface · LLM-workflow runtime · per-job credential
minting. Merged and dev-safe, not yet activated in production.
Roadmap
Approval-triggered execution dispatch · agent-runner ·
Spawn as the execution routing plane
Whose infrastructure
It runs on yours.
No cloud dependency. No third party. Nothing phoning home. The hive has been
inside your own walls the entire time.
Your data stays yours — for the lifetime of your data.
The film
SpawnHive, end to end.
Three minutes and twenty-four seconds: the partnership, the colony,
and one fault followed from the moment it is noticed to the moment it is recorded.