The harness, the workforce, and the trust layer.

Everything around the model

The tools an agent may call, the limits that stop it, the budget it may spend, the memory it keeps, the checks its output must pass. Every Khelion agent runs in the same harness: warrant enforced in code, budget per task, anti-loop, tests on outputs.

Narrow roles, coordinated

Reporter, Analyst, Auditor, Registrar, Clerk, Dispatcher, Correspondent — small agents with one job each, woken by work rather than by a timer, coordinated by an agent that routes, tracks dependencies and escalates to a named person. Deliverables land in your systems as files and entries, not in a dashboard you have to trust.

Warrant, ledger, explanation — we call it Manifest

Warrant: what the agent may read, may write, may never do, and when it must stop and hand over — written with you, enforced outside the model. Ledger: every action appended to a record that cannot be edited afterwards, each entry chained to the previous one, exportable in open formats. Explanation: for any entry, why the agent did what it did, in plain language.

Refusals, budget stops and loops are entries too. An inspector receives the warrant text, the ledger export, the explanations and the list of exceptions — without calling an engineer.

Routed by task, measured per run

Each task class goes to the smallest model and the least effort that passes its check; the most capable models are reserved for architecture and governance decisions. Every run records what it consumed. Model providers are named in the warrant, per deployment, with options that do not train on your data.

Inside your environment, on your records

Processing in the EU by default, or inside your own environment. Connections use the narrowest access you can grant, revocable by you; credentials never pass through a prompt. Read-only first; write access only where the warrant says so. No client data used to train anything of ours — contractually.

We run on it ourselves

Khelion is operated by eight agents — research, drafting, monitoring, finance, outreach — each with a warrant, a budget and a place in the same chained ledger we ship. When one of ours loops, refuses or overspends, we see it in the same record you would.