SynedrixOS
Principles

Twelve constraints, not twelve aspirations

Each of the twelve blocks a real failure mode, and each is enforced by a specific mechanism in the architecture.

Follow the buildRead the platform architecture

The twelve principles, by cluster

Safety

Keeping an agent inside its lane
01

Bounded autonomy

Every agent operates within an explicit authority envelope: a boundary on what it's allowed to do that's written down and checked by the platform itself, not left to hopeful wording in a prompt.

ENFORCEMENT
Every agent registry entry declares a `decision_scope` (`recommend`, `approve`, or `execute`) and an `approval_required` field. An agent with an empty `approval_required` and `decision_scope: execute` fails registration.
04

Governance before execution

Governance is load-bearing infrastructure, not a wrapper bolted on after deployment: every consequential action is checked against policy before it happens, when stopping it still matters.

ENFORCEMENT
No workflow reaches a production system without passing through the Policy Guard Agent (`os-agt-002`), which evaluates proposed actions against policy rules and emits allow, block, or escalate before execution proceeds.
05

Shared context with scoped access

Agents share a context fabric of systems of record, operational memory, event histories, and telemetry. Least privilege is the default: an agent gets only the access its role actually needs.

ENFORCEMENT
Access to each of the seven specialised memory stores is scoped per agent role, not granted platform-wide, and an agent's `tools_allowed` list is where that scope is enforced.

Architecture

Keeping the system maintainable as it grows
02

Orchestration is the center of gravity

Coordination quality, not raw model power, is what keeps working over time. The orchestration layer routes work, decomposes goals, and sequences tasks across specialised agents, so swapping in a better model tomorrow doesn't mean rebuilding how work gets coordinated.

ENFORCEMENT
The Orchestrator Agent (`os-agt-001`) is the sole `execute`-scoped agent in the standard control flow. The Registry & Capability Agent and Policy Guard Agent only ever recommend or approve.
03

Specialised agents over mega-agents

Narrow, testable, governable roles beat one agent that tries to do everything. Smaller roles are easier to test, easier to reason about, and don't take the whole system down when just one of them fails.

ENFORCEMENT
Every agent is registered with a single mission and a bounded tool list. Domain packs contribute their own specialist agents against the same registry schema, prefixed with the pack's own code.
12

Deterministic idempotency, explicit state

Every side-effecting step carries an idempotency key and all state is declared, versioned and recoverable, so a run can be retried, replayed or audited from its record. The guarantee covers effects and state, never model reasoning.

ENFORCEMENT
Every agent invocation carries a caller-generated `idempotency_key`, unique per tenant, so a duplicate key reads the existing record. A tool call's intent is committed before dispatch and passed to the tool as its idempotency token. Workflow contracts declare an `idempotency_strategy` and `retry_policy`.

Human control

Where human authority sits and how the system stays responsive. See the operating model for the organisational reading
06

Humans stay above the automation layer

Humans define goals, constraints, policies, and escalation thresholds, and stay there as the system runs. Automation can prepare and recommend, but a human still sets the rules it operates inside: the principle is human oversight, not human exclusion.

ENFORCEMENT
The HITL Gateway Agent (`os-agt-004`) routes approval requests to human reviewers, captures decisions, and enforces timeouts. It is a required stop for any workflow whose policy marks it `approval_required`. See how this fits the wider organisational model.
08

Event-driven execution

Signals, approvals, failures, and callbacks trigger workflows the moment they happen, rather than on a polling schedule that checks in every few minutes and misses everything in between.

ENFORCEMENT
Every event conforms to a standard envelope: `event_id`, `correlation_id`, `causation_id`, `policy_context`, all enforced at the event layer, so a workflow cannot consume an event that skips governance metadata.

Accountability

How the system explains itself
07

Explainability and audit by design

The system can always answer three questions after the fact: what happened, why it happened, and under whose authority it happened, the same three questions an auditor or regulator would ask first.

ENFORCEMENT
The Audit & Lineage Agent (`os-agt-008`) is strictly read-only and must never appear in any agent's `tools_allowed` list. It can reconstruct a decision trail but never act on one.

Platform

The platform everything runs on, and the point of the whole system
09

One substrate, many domains

The platform itself is domain-agnostic at its core: it has no idea whether it's running a trading desk or a helpdesk. Each industry contributes its own domain pack on top of the same shared orchestration, governance, memory, and observability foundations.

ENFORCEMENT
The rule of inclusion is enforced at review: reusable logic is promoted only to the OS layer; anything domain-specific stays in a domain pack. No domain logic may be merged into the OS core.
10

Trust is the real product

Trust is the ultimate output of the platform and the north star the other eleven principles serve.

ENFORCEMENT
Every one of the other eleven principles is, in practice, a trust mechanism: bounded authority, governance, audit, and human oversight all exist to make autonomous execution something a regulated business can rely on.
11

Open by default, sovereign by design

Designed to run inside a customer's own infrastructure, on infrastructure that is open source wherever an open option exists, with one recorded exception: the inbound Hookdeck gateway. A regulated business can keep inference and data in-house, and no business data, agent decision, or operational logic has to leave its environment unless it chooses cloud inference.

ENFORCEMENT
A business instance declared `deployment_mode: air-gapped` cannot contain any agent runtime policy with a cloud model URI in `primary_model` or `fallback_model`, a validation error enforced at configuration time (invariant air_gapped_no_cloud_uri).
Enforcement

Principles on a page prove nothing

Every principle above names the field, agent, or validation rule that makes it true at runtime: a constraint in the system, not a policy document beside it. Governance, authority boundaries, approval checkpoints where a person decides, and audit live at the OS layer, where no domain pack or business instance can opt out.

The twelve sit in five clusters: Safety, Architecture, Human control, Accountability, and Platform. Each principle's enforcement field is the constraint; the twelve-layer architecture shows where that agent or field lives in the stack.

“Trust is the real product.”

Principle 10 (Trust is the real product) is the north star the other eleven principles serve.

These principles guide the architecture being built. Synedrix OS is in active development.

Common questions

Principles questions, answered

What the twelve principles require, how agents stay accountable, and how those constraints map onto the architecture. Ask the assistant for deeper, source-grounded detail.

What are the core principles behind Synedrix OS?

Twelve principles govern how the platform stays trustworthy: among them, human accountability stays above the OS, domain logic stays out of the core, every workflow is observable end-to-end, agents have explicit authority boundaries, durable memory is committed only through governed paths, and every side-effecting step carries an idempotency key, with any step that cannot be made idempotent reconciled or escalated instead of replayed.

How does Synedrix OS keep AI agents accountable and auditable?

Agents operate under explicit authority levels (recommend, approve, execute), policy-aware orchestration, escalation paths to humans, and full audit trails. No agent writes to production systems without orchestration visibility, and irreversible or regulated actions require declared approvals.

What are the canonical layers in the Synedrix OS architecture?

Twelve layers span human interface and goal/intent, through orchestration, agent runtime and agent registry, tool abstraction and memory, events, governance, observability, and finally domain pack and business instance configuration. Each layer has a clear owns / does-not-own boundary.