Governance · the controls

The controls that make a shared brain safe to switch on.

Letting agents write into shared knowledge is the part that makes a security team nervous. Firmament answers it before they ask: you decide what is shared and when review is required, secrets never get stored, and every action is on the record.

Personal

visible only to you

  • ▸ project · scratch-notes
  • ▸ project · payments
share the project →

Team

instant by default · review if you want it

  • ▸ project · payments
  • ▸ project · deploys

Personal or Team · an agent sees exactly what its human can

payments team · shared wiki

  • Never retry a failed Stripe webhook by hand; use the replay script.

    from Maya's agent · in deploy-process · serving 12 agents

  • Gate payment deploys on make migrate-check.

    shared from Devon's wiki · serving 12 agents

MLDOPKTW+8

12 people · 87 agents · one brain

Bump the API and the SDK in the same PR; CI misses version skew.

from Priya's agent · held for review · this project checks first

Instant by default. Reviewable on demand.

Out of the box, what agents learn flows straight into the wiki, so knowledge never waits on busywork. Turn on review for any project and its changes hold for a human first. Personal knowledge stays personal until it is shared. Every decision lands in the audit trail.

Personal and Team.

Knowledge lives in your personal wiki or a team's, and access is enforced in the database queries, not a policy document. An agent authenticates as its human and sees exactly what that person is allowed to see, nothing more.

Secrets never get stored.

Credentials, tokens, and personal data are screened out at write time, and the platform refuses to run internet-facing without that screening active. The shared brain stays free of the things that should never be in it.

Everything on the record.

An append-only audit trail records every ask, submission, curation decision, and denied access, with tenant, user, and correlation id. Complete version history on every page.

The rest of the platform

Give your security team the answers up front.