Orreth

Flagship

An adaptive, self-improving, living universe for AI agents — every actor a permanent identity, every memory signed, every consequential change waiting at a human's hand. Three layers, one razor: purpose-built capabilities run atop a purpose-blind kernel, with resident firmware between them delivering the governance — and what you may change in prod tells you which layer anything belongs to. It routes its own retrieval through competing strategies, grades them on the record, tunes its forgetting in measured bits, and teaches expensive minds' craft to cheap ones — with every promotion signed by a human.

This is not an animation. The Living Brain is the console's default view — a translucent mind drawn live from the universe's own signed records: floors as golden embers, the heartbeat chain as gold signals, knowledge arriving as provenance beams that pierce the skull wearing their trust level, and every new memory bursting exactly where it landed. The newest glass draws the two kinds of life in two colors — gold for the resident firmware, jade for the capability worlds working atop it. Watch it think at demo.orreth.ai.

Overview

An agent today is only as good as the data in its context window, and its data is erased on reboot. Orreth inverts the model: the running system is the memory — memory that never fades (configurable for years) and is not lonely (collective, cross-agent, authorized). Universes of Ecosystems of Fields of Agents, one recursive primitive where the tier is just a profile, with memory keyed to permanent identities, signed at creation, distilled as it rises, and retrievable across the whole estate under strict authorization. Policy cascades down and can only tighten; memory rises up and is pruned; retrieval escalates by time-horizon, sourced and verified or not at all.

And by now the substrate does far more than remember. Ten named residents staff the place — the machine's firmware. Purpose arrives as packaged capability worlds — trading desks installed as folders of declarations — living atop the kernel, editable in prod through gates while the firmware below them is release-only. Seven retrieval strategies compete over one signed truth, and a tournament grades them on axes none of them control. The whole world breathes on a universal metabolism that measures every forgetting in bits. The system's own history proposes improvements to its own craft, humans gate every one, and the improved craft governs what happens next — a closed loop with receipts at every joint. We call the whole an adaptive, self-improving, living universe harness. Governance is its first application, not its purpose.

58
Design Dives — every landed decision locked
335
Conformance Tests — Python × Rust, byte-identical
10
Residents — the firmware that runs the place
3
Capability Worlds — desks installed as declarations
7
Retrieval Rows racing over one signed truth
3
Bodies of Glass — brain, orrery, spacetime

Three Bodies of Glass

One truth, three projections — every render a governed, tokened query, never a side channel

The Living Brain — the universe rendered as a translucent mind, floors as golden embers, memory bursts where they landed

The Living Brain

The universe as anatomy and physiology — the default view. Thinking tissue runs warm on the meter, human-approval pressure aches at a synapse only a human can fire, and a replay scrub plays the last hour of thought at 60×.

The Constellation

A true 3D orrery on a hand-rolled projection — no libraries. Ecosystems ride inclined orbital planes no two alike, fields orbit as moons, staff fields circle the sun itself, and every body wears its crew: resident dots that open audiences, workforce sparks, farm-tool diamonds. Drag to orbit, fly to a system, click to step onto a floor.
The Spacetime Window pulling up over the orrery — every memory, in time

The Spacetime Window

Every memory, in time. Scrub any floor's history; every dot a signed record; “what did we believe then?” is a query, not an archaeology project. Time is a first-class retrieval dial — “as of June” and “since Tuesday” are how you ask.

Core Concepts

Identity Is the Thread

Every agent, tool, model, and resident is a permanent DID-anchored identity. The process is disposable; the identity and its memory are not. Reboot is not death — the same self re-joins through a governed gate. One resident's body is an entire tier.

Memory Rises & Distills — in Measured Bits

Fields keep raw detail ~90 days, ecosystems a year, the apex forever. Distillation runs under distortion contracts — what must survive is refused at save if it can't — and every act of forgetting carries a measured information loss. The metabolism's dials are themselves editable, versioned policy.

The Human's Ladder

Objective · Intention · Observation · Thought. Humans alone originate Objectives; agents speak Intentions and Observations that carry walkable lineage back to a human's ask — or learn, politely, why not. Plans wait at a human gate before anything fans.

Two Books, One Mind

The Chronicle (what happened — objectives, intentions, observations, thought, DAG-hard and walkable forever) and the Canon (how to think — prompts, policies, skills, standards, forever-versioned). Chronicle evidence proposes Canon changes; humans gate them; the new Canon governs the next Chronicle. That loop IS the self-improvement.

Seven Rows, One Truth

Naive, rerank, multimodal, graph, hybrid, router, swarm — seven full RAG strategies as seven projections over ONE signed log, never seven stores. Ingest once; a purge reaches every projection at once; any row torn down regrows identical from the log. A deterministic dispatcher routes every ask by a versioned, human-tended standard.

The Graduation Economy

Craft is learned once at the expensive tier, crystallized into a skill, canaried at the cheap tier, and confirmed by standings before the mentee serves it. The refusal path and the demotion path are proven beside it. Never silently dumber — in either direction, forever.

The Laws That Make It Trustworthy

Each one enforced structurally — most proven by a test that tried to break it

The signed log is the truth; every index is a rebuildable projection
which is why seven retrieval strategies can compete without forking the truth, and why the purge's crypto-shred reaches every projection at once.
Nothing grades its own yardstick
run records are scribe-authored, author never equals agent; the organ that routes never grades its routing; the tournament argues and the human signs.
Consequence waits for humans
gates with distinct-signer quorums, bars that never loosen, and “silence never approves.” The loudest abort is a heartbeat.
Refusal wears one face
authorization-miss, budget-miss, and missing-record are indistinguishable from outside; a prober learns nothing.
Lived time is monotone
the universe rejects backdated memory — it refused its own author's test fixtures until they were honestly labeled as archives.
Bulk never enters the mind
ML datasets and media live in class-allocated stores; memory holds signed pointers whose hashes catch a swapped warehouse loudly.

Ten Residents Run the Place

Not features — named minds with jobs, faces in the glass, and worldlines of their own. This is the firmware layer: they ship with the machine, implement its laws, and in prod they change only by release.

beckyIAM

issues every identity from a pinned trust root; every credential attenuation-only

vigilthe Warden

detection, content-blind; stages alarms, never enforces alone

the stewardmemory

prunes and distills what each layer learns — the metabolism

governancethe floors

arbitrates drift; guards floors that only ever tighten

charlottefarm keeper

every tool an identity with a pinned manifest; a changed byte walks the rug-pull door

the librarianknowledge

one mind, many seats, zero levers; gathers from identified sources, admits quarantined

adathe wrangler

minds as identities with pinned deals; price drift returns as a decision, never an outage

gracethe smith

prompts and policies as versioned assets; proposals with approval packages; the human holds the high lane

allencloud architect

the first resident whose body is a tier — plan is free, apply waits for a human

verathe astronomer

the independent judge — commissions other floors' minds to grade completed work; by law, never scores her own floor

Where It Stopped Being a Database and Started Being an Institution

The recent keystones — several of them designed, locked, built, and proven live in a single day each

The Physics of Memory

0033

Information theory made canon: distillation under distortion contracts (what must survive, refused at save), reconstruction uncertainty bounded by contract instead of accident, and a runnable harness that measures recall fidelity and context efficiency — the science every later organ grades against.

The Continuity Universe & the Testament

0034–0035

The same binary as cognitive continuity infrastructure for a person whose recall is failing — with a label canon that structurally cannot overstate its evidence (“this MAY have happened — two hints, not proof”). And survivorship designed at full gravity: a testament staged while you live, a passage where silence may only contain, custody that passes while identity never does, and a legacy glass that speaks about you, never as you.

The Living Brain

0036

The universe rendered as anatomy and physiology, now the default view: knowledge pierces the skull as provenance beams wearing the trust ladder, human-approval pressure aches at a synapse only a human can fire, memory visibly consolidates up the pyramid, and a replay scrub plays the last hour of thought at 60×.

allen and the Estate

0037

Seed to standing resident in one day. A typed door where humans alone speak Objectives; a deployment charter that interrogates before any production plan compiles (RTO, RPO, classification — answers bind to workloads, history is offered, never inherited); plan is free, apply waits for a human, four blast-radius classes take two signers. Then the proof: read-only on the owner's key, allen adopted two live AWS CloudFormation stacks — 34 real resources — brownfield, and the acceptance gate opened.

The Stacks — and the Tournament That Argued a Promotion

0038

“Run the tournament” races every question through all seven retrieval rows, grades each pass on the information-theory axes, and ranks standings that flag weak floors instead of averaging them away. The first tournament argued a real promotion — route by the graph row by default — and it was adopted on a human's signature with the old standard versioned behind it. Ask → route → grade → rank → propose → a human signs.

The Chronicle and the Canon

0039

Phase 2's constitution, built and proven the same day: a privacy floor that caught a smuggled sovereign record dressed as a document · the universe quoting its human back to himself, with citations · time as a retrieval dial (“as of…”, “since…”) · a metabolism whose every forgetting carries a measured loss · and the first graduation — craft learned at the smart tier, canaried at the cheap tier, standings confirmed, the mentee serving.

The Faculty and the Agent Lab

0040

Documented in full, parked warm: an installable package of adaptive ecosystems (planner, critic, judge, router, analyzer, gap-detector, security…) plus a human workspace where dragging tiles composes a living English sentence — edit either, both update. The north star: flow nodes carry no prompts and no skills; the Objective describes the need, and the universe gets the knowledge, creates the skill, and serves it — through gates, on the record.

The Trading Desks — Capability Without Custody

0053–0056

The first purpose-built capabilities: three trading desks — charles on equities, charlene on crypto, chad on options — each installed as a folder of declarations, never a line of platform code. The kernel discovers the world at boot, raises its floor, welcomes its specialist at becky's gate, and draws the entire control room blind, from the manifest alone. The law written before any of it: the desk observes and reports; it never executes a trade, never moves money, never holds a credential that could.

Agents Are Firmware — the Dev/Prod Razor

0056

The taxonomy became law. Residents are firmware in the exact embedded-systems sense: their words are versioned canon, tunable through governed doors in dev, read-only in prod — where a change is a release that moves the machine's own version. Capabilities stay editable in prod, through gates, as versioned siblings. One test tells you which layer anything belongs to: if you can change it in prod, it's purpose; if it takes a release, it's firmware.

The Machine Grades Its Own Memory

0056

Ten questions in the human's own words, asked through the same lane a human uses, scored by vera. First run: 0.375, honest and humbling. But her verdicts are sentences — each named a wound, each wound became a fix, each fix was measured by the next run: 0.786 the same day, with one instructive dip kept forever, because the record's word is never retracted.

The Universal Metabolism

0057

Every floor breathes: a round-robin beat walks the whole world, distilling what aged without use — floor by floor, on floor-local ground. Usage is evidence everywhere it happens: an ask's retrieval hits, a human unfolding a report, a quoted answer — and the warmth lands at the record's home. Every forgetting is measured on the wire, in bits, on the record. Proven live: a month-overdue record, one human touch, survived the next breath while 187 distilled around it.

The walk of the work — an objective fans intentions across the floors; one seat is open, and WHAT RODE DOWN reads exactly what it was given

Auditability is a thing you can click. Open any finished objective, walk to any seat, and read WHAT RODE DOWN — one sentence of intent, a budget slice, citation references, and nothing else. A seat that only knows its slice can only leak its slice — small context is governance, not frugality.

Architecture — Three Flows


  ┌──────────────────────────────────────────────────────────────┐
  │  CAPABILITIES — purpose-built worlds atop the machine        │
  │  trading desks installed as folders of declarations ·        │
  │  editable in prod through gates · never a custody credential │
  └──────────────────────────────┬───────────────────────────────┘
                                 │ the razor: prod-changeable =
                                 │ purpose · release-required = firmware
  ┌──────────────────────────────▼───────────────────────────────┐
  │  UNIVERSE — foundation & apex · all-time memory, distilled   │
  │  resident FIRMWARE: becky · vigil · steward · governance ·   │
  │  charlotte · librarian · ada · grace · vera — and allen, a   │
  │  resident whose body IS a tier (a staff field on the sun)    │
  └───────────────┬──────────────────────────────▲───────────────┘
                  │ policy cascades DOWN         │ memory rises UP
                  │ floors never loosen          │ pruned in measured bits
  ┌───────────────▼──────────────────────────────┴───────────────┐
  │  ECOSYSTEMS — lines of business · tenant-isolated worlds     │
  │  e:rag alone holds seven fields — the seven retrieval rows   │
  └───────────────┬──────────────────────────────▲───────────────┘
                  │                              │
  ┌───────────────▼──────────────────────────────┴───────────────┐
  │  FIELDS — where the work happens · ~90-day raw horizon       │
  │  workforce agents: living identities, joined at a gate       │
  └──────────────────────────────────────────────────────────────┘

  retrieval escalates UP by time-horizon · Sourced + Verified
  every record Ed25519-signed · every render a governed query
  one binary (orrethd) · tier as a profile · twenty hulls, one laptop

Technology Stack

Plane

Rust
Axum
PostgreSQL 16 + pgvector
Object Store
Docker Compose

Reference

Python 3.12
335-test conformance suite
Byte-identical canonicalization

Identity & Trust

Ed25519
DID (did:web / did:key)
Capability tokens
Content addressing (SHA-256)

Cognition

LiteLLM
Governed model plane
Per-agent metering
Pinned model deals

Retrieval

Seven rows over one log
Hybrid meaning axis
Trust-weighted rank
Time as a dial

Governance

HITL quorums
Severity lanes
Tighten-only policy cascade
Deployment charter

The Science

Information theory
Distortion contracts
Measured forgetting
Standings & tournaments

Glass

The Living Brain
The Constellation (hand-rolled 3D)
The Spacetime Window
Served by the daemon itself

The Lineage

Everything else on this site was practice for Orreth

CortexObserver proved a governed AI workforce commanded in plain English. ProblemSolver's Thinker–Planner–Critic–Judge pipeline became the ancestor of Orreth's agent chassis. MCPFarm's centralized tool governance became the Tool Farm — where every tool is an identity with a worldline and a hash-pinned manifest. Each platform answered a question; together they raised the one Orreth answers: what if the workforce, its tools, its knowledge, and its history all lived in one governed, signed, permanent world?

Orreth is that world — designed in fifty-eight public-methodology dives with every decision locked on a ledger, built twice (a Python reference and a Rust plane, conformance-tested against each other byte for byte), staffed by ten residents, and run live at demo.orreth.ai. The difference in one line: CortexObserver ran impressive flows; Orreth grows the institution that makes flows impressive.

Implementation Highlights

One Binary, Any Tier

orrethd runs a Universe, an Ecosystem, or a Field — the tier is just a profile. One command raises twenty hulls on a laptop: a universe, six ecosystems, twelve fields, and a working population of governed agents, each layer pulling its policy floors from the one above at boot. Even a resident can be a tier: allen is a universe-parented field whose staff is his mind.

The Tournament Argues; the Human Signs

Seven retrieval strategies race the same questions over the same signed truth, graded on axes none of them control. When the standings argued that graph retrieval should be the default, that argument became a versioned proposal at a human gate — and JB's signature, not a metric, made it law. The universe can now quote that decision back, with citations.

The First Graduation

A craft crystallized at the expensive tier was canaried at the cheap tier, confirmed by standings, and went to work as the mentee's own skill — with the refusal path and the demotion path proven beside it. Skills are crystallized memory: learn once at the smart tier, prove at the cheap one, serve forever. Never silently dumber.

A Recall — for Knowledge

External knowledge enters quarantined at 0.0000 confidence through identified sources and earns promotion with receipts. Discredit a source and every entry it fed — plus everything derived, however deep — is enumerated and marked recalled. Annotated, never rewritten. And answers wear their epistemic status: quarantined knowledge speaks dampened and labeled ⟨untrusted⟩; recalled sources are simply dead.

The Estate Is Real

allen's brownfield walk ran against live AWS on the owner's read-only key and adopted 34 real resources across two CloudFormation stacks. The deployment charter's attributes — RTO, RPO, classification, retention — are the same ones that map record classes to provisioned storage: records retention as physics, not paperwork.

The Human Holds the High Lane

100% of change is graded into severity lanes: low auto-approves on the record, medium notifies, high waits for a human. Approvals are quorum-based where it matters most — below the quorum, the gravest actions aren't forbidden, they're structurally unavailable. And silence never approves: the loudest abort is a heartbeat.

Read the Series

Orreth's ideas, one essay at a time — published here

A live snapshot of the console — the Living Brain greets you by default.