Two flows on the board Mart → Fred · 18 Aug 2026
PRINCIPALS Owner Operator Employee Contractor one key each, not a guest seat GAR AGREEMENT, WALLET SIGNED AGENTIC OS SOP / skills coupled to an agent manifest at connect an AgentConnection binds vault, scope, agent and the manifest it was connected with READS AND WRITES UNDER THE GRANT VAULT memory cubbies object store SCOPES INSIDE ONE VAULT, CONTEXT PER ITEM cubbies are per agent, private by default publish mech. AGENT CATALOG 1st party 2nd party 3rd party the card is public. the manifest, and the cubbies it declares, resolve at connect NOTHING RUNS UNTIL A PERSON SIGNS IT INTO A SCOPE agent importer READING IT a wallet signed agreement access exercised under it an agent or a document moving NO ARROW CROSSES A SCOPE WITHOUT A GRANT BEHIND IT THE VAULT EVENT LOG IS BOTH THE AUDIT TRAIL AND THE RECOVERY MECHANISM: A JOB THAT LOSES STATE REBUILDS BY REPLAYING IT.
The board, redrawn

Two flows, walked onto the board

The matter, then corporate housekeeping. Each row is one step: how it works today, then the same step on the board, as what brings the data in, who runs it and from which tier, where it lands. Nothing is built. If a step has no Today, it is invented. If Today and the board read the same, it is not worth building.

Where it lands is the memory bank's own model: a scope is the permission boundary, a context is what accumulates inside it, a cubby belongs to one agent.

Flow one

Our own matter

TodayOn the board
StepHow it works nowBrings it inWho runs it, and the agentWhere it lands
1Open the matter, name who is on itThe list of what is pending came from outside counsel as an attachment. We worked from a smaller number than the real one for monthsCounsel's own list of what is pendingLead counsel. No agentone scope per matter, one for the separate track. Index in firm
2Find every communication on a topicSearches run by hand across mail and drive, one spelling at a timeSearch from a term list carrying every spelling of a nameParalegal, for lead counsel 1st party sweepevents into the matter scope, context = the sweep
3Bring in the documentsA corpus on the desktop, working notes in one tree, source PDFs in downloadsDrop, folder, scan, and open the attachmentsParalegal 1st party ingestthe DDC bucket behind the vault. Matter scopes reference it
4Bring in outside reportsSit in shared drive folders, read by handWhole and unedited, from wherever they live nowLead counsel 2nd party report readersame bucket, one object per report, never rewritten
5The eval scanClaim and evidence work done ad hoc, rebuilt each time somebody asksWhat we assert, what supports it, what is missingAgent for lead counsel 1st partythe claim agent's cubby in that matter scope
6Write it so it holdsLong documents where a statement and its support can drift apartEvery statement carries its quote and where the quote sitsLead counsel approves 1st partysame agent, findings cubby, plus an event
7Hand a copy to outside counselAttachments mailed out, with no way to withdraw themA scoped, time limited copy, not the matterLead counsel signs. They connect their own 3rd party agentits own scope, so their agreement covers nothing else
8What we learnedThe search patterns live in one person's headThe term lists and the intake checklistLead counsel keeps or drops. No agentscope firm
9Tell whoever needs to knowSomebody remembers to post it, or nobody doesThe finding, and what changed because of itFires on the finding event 1st party notifieran event on the matter scope. People and agents both subscribe, so the log records what was announced, not only what was written
10Publish what compoundsNothing compounds. The next matter starts from zeroThe pattern, never the privileged content: which sources produced results, which evidence type carried which element, how long each step tookFires after approval 1st party publisherthe compound memory bank, which is its own vault: external to every matter and queryable
11Feed it backImprovements live in one person's habitsThree consumers query the bank: the SOP library, the model of the work, the dashboardAgents on the firm scope 1st partyback into SOP and skills, so the next matter opens further along than this one did
Worked example: a new finding in our own matter. A sweep at step 2 runs the term list including the spelling variants and returns a message whose attachment nobody had opened. Step 3 puts the attachment in the bucket once, addressed by content. Step 5 attaches it to the assertion it bears on, and because the same document touches more than one of the pending matters it is referenced from each rather than copied into each. Step 6 will not write the statement unless it carries the quote and where the quote sits. If it goes to outside counsel, step 7 makes it a scoped copy in its own scope with a time limit, instead of an attachment on a mail we cannot take back.
Flow two

Corporate housekeeping

TodayOn the board
StepHow it works nowBrings it inWho runs it, and the agentWhere it lands
1List the entities and what each owesRows on the lanes sheet, grouped by lane, each pointing at a drive folderThe register extract and the statutesOwner. No agentscope corporate, context = the entity. Ownership and cash as separate links
2Bring in formation and governance docsEight labelled subfolders in the drive packageRegister extract, statutes, founding minutes, signing authoritiesOperator 1st party ingestthe bucket, referenced from the entity context
3Catch the incoming noticesA morning sweep reads mail and chat and reports what arrived. Some invoices only ever reach a third person's inboxRegistered agent mail, portals, and the inboxes that actually receive themOperator 1st party connectorevents into corporate on that entity context
4Turn notices into datesA due date column, plus a separate tracker holding have, missing and open questionsThe deadline, what it demands, and what would close itAgent for the operator 1st partythe calendar agent's cubby, one row per obligation
5Do the recurring filingSignatures chased over mail, with who may sign rediscovered each timeFills the template. Checks who may sign before asking anyoneOperator prepares, an authorised signatory signs 2nd party, per jurisdictionan event, so the filing and the signature sit in the log
6Set up something newNo checklist object. Each setup starts from the last one somebody remembersThe checklist for that jurisdictionOperator, owner signs 2nd party formation agentthe bucket, referenced from a new entity context
7What we learnedA checked column on the sheet, a date stamped by hand to say the row was verified against its sourceThe checklist per jurisdictionOwner keeps or drops. No agentscope firm. The checked column retires: the event carries its own provenance
8Tell whoever needs to knowSomebody remembers to log it, or nobody doesThe obligation, and what changed about itFires on the notice or filing event 1st party notifieran event on the entity context that people and agents both subscribe to
9Publish what compoundsNothing compounds. The next setup starts from the last one somebody remembersThe pattern: which authority answers how fast, what actually closed an obligation, what each step costFires after the owner approves 1st party publisherthe same compound memory bank, the external queryable vault
10Feed it backImprovements live in one person's habitsThe jurisdiction checklist, the signing map, the calendar templateAgents on the firm scope 1st partyback into SOP and skills, so the next entity opens further along
Worked example: a new corporate matter for the DAO. The extraordinary general assembly notice goes out this week. Today that lives as a lane row, a due date and a mail thread. On the board: step 3 catches the notice as an event on the entity context, including the copies that only ever reach an adviser's inbox. Step 4 turns it into obligations that carry what would close each one, so the thirty day notice period, the assembly itself, the resolutions on signing authority and the register filing that follows are four dated rows rather than one. Step 5 checks the authorised signatories before anyone is asked, which matters here because signature is joint by two and only some of the named people can give it. Step 2 files the register extract and the minutes that come out of it against the entity, not against whoever received them.
The loop

Where it compounds, and who hears about it

The last three steps of both tables are the same three steps, and they are the same on any flow we run. Ingest from whatever already holds the thread, write to the cubby and the object on whose behalf, raise an event that people and agents alike can subscribe to, and publish what generalises into a compound memory bank that lives as its own vault, external and queryable. The consumers query it and hand the result back to SOP and skills.

THE LOOP, ON EVERY FLOW 1 · ingest mail, drive, chat, portals 2 · write to the cubby and the object, on whose behalf 3 · notify an event on the source. people and agents subscribe 4 · publish after approval only compound memory bank ITS OWN VAULT, QUERYABLE SOP library checklists, term lists, the questions worth asking first the model of the work which input carried which outcome, and how often the dashboard coverage, gaps, deadlines, time per step back into SOP and skills, so the next one opens further along than this one did THE PATTERN COMPOUNDS, THE PRIVILEGED CONTENT DOES NOT. THAT IS WHAT LETS ONE BANK SERVE EVERY SCOPE WITHOUT BREAKING A WALL.
The last three steps of every flow

One line worth keeping as a rule. What crosses into the bank is the pattern, never the privileged content, which is what lets a single bank serve every scope without breaking a wall.

Two things the Today column settles. The tracker deliberately keeps the matter off it, which is exactly why a matter has to be its own scope and not a lane on a shared board. And both flows fail today in the same place, capture: the notice that only reaches an adviser's inbox and the exhibit inside an unopened attachment both exist, and neither reaches a record without a person moving it.
Where it starts, how it is read back

The second and third exercise

FlowStarts atRead back by
MatterCounsel's list, then the sweep, then the documentsAsking inside the matter scope. The answer is a finding carrying its quote, so the citation is the read path
CorporateThe register extractAsking inside corporate for one entity context. The calendar answers what is owed and what closed it

A person reads through an agent connected to that scope, never by browsing storage. So the read path and the permission are one object and there is no second access model to keep in sync.

Mart to Fred · 18 Aug 2026 · nothing built. Grounded in the memory bank: 04-cef/user-vault/vault.md verified 27 Jul 2026 · user-vault/concierge/permissions.md, ADR-029 and ADR-005 · agent-marketplace/marketplace.md verified 15 Jul 2026, ADR-038 · ADR-015 bootstrap via replay · 05-product/enterprise-experience.md, scaffolding only, verified 14 May 2026.