Agents and specialist roles

Large tasks can be split among specialist roles under hard depth and fan-out limits. A role sets the scope of the work but grants no authority. A worker's report is treated as a claim until something else verifies it, and the owner always hears one JARVIS voice.

TESTED , rung 3 of 8 Production specialist decomposition is TESTED in the registry. The design council and red team are implemented, but whether the runtime uses them is uncertain. Specialist contracts and the local worker are integrated on the unmerged Advanced branch, proven on fixture tasks.

PARTIAL Parts of this system sit at different rungs. The breakdown below shows each one.

As of
Parts tracked
6
Catalogued capabilities
11
On the unmerged branch
3

Status breakdown

Where each part stands

3 integrated 1 tested 2 implemented

  1. Specialist contracts (11 roles) Assignment, Claim and WorkerReport records. Live proofs used fixture tasks and reports. Not merged into production.
    INTEGRATED , rung 4 of 8 FIXTURE Where: Advanced Systems branch (not merged)
  2. Bounded local specialist worker Has no autonomous model dispatcher. Not merged into production.
    INTEGRATED , rung 4 of 8 FIXTURE Where: Advanced Systems branch (not merged)
  3. Checkpoints and blackboard with conflict and freshness Conflicting or unverified reports are kept, not merged; old reports go STALE. Not merged into production.
    INTEGRATED , rung 4 of 8 FIXTURE Where: Advanced Systems branch (not merged)
  4. Specialist pool: depth and fan-out bounds, stall detection Registry rows CAP-MSN-03, 04, 16, 17 and 18 are TESTED.
    TESTED , rung 3 of 8 TESTED Where: Production branch
  5. Design council (12 roles) and red team (10 vectors) Uncertain runtime wiring: a generated project map shows them imported only by tests and tools.
    IMPLEMENTED , rung 2 of 8 DOCUMENTED Where: Production branch
  6. Single-voice guard Prevents specialist leakage into the one JARVIS voice.
    IMPLEMENTED , rung 2 of 8 DOCUMENTED Where: Production branch

Pipeline

How it flows

A mission split among specialists

  1. Mission
  2. Decomposition depth at most 4, fan-out at most 8 (can stop the request)
  3. Assignment role is a scope ceiling
  4. Specialist worker
  5. WorkerReport a claim, not evidence
  6. Blackboard CONFLICTING and UNVERIFIED kept
  7. Independent verification never self-accepted (can stop the request)
  8. Governance chain for any effect (can stop the request)
  9. One JARVIS voice
No report reaches the world without independent verification and the governance chain.

Diagrams are simplified from the code paths named in the sources below. They are illustrative, not screenshots.

Splitting work among specialists can help with large tasks. It also creates new ways to fail: agents that spawn agents without limit, workers that approve their own output, confident reports that nobody checked, and a chorus of voices talking over each other. JARVIS’s agent design treats each of these as a defect to prevent, not a risk to accept.

Many specialists, one voice

Behind the scenes a task may involve many specialist roles. The owner still hears one JARVIS voice. A voice guard stops specialist phrasing and internal chatter from leaking into what is spoken. The owner gets one coherent answer with its evidence, rather than a transcript of an internal debate.

Bounded decomposition

The production SpecialistPool limits how far work can be split. Decomposition can go at most four levels deep, and each level can fan out to at most eight workers. A stall detector catches agents that are stuck or looping.

Why fixed limits? Unbounded recursion is the usual way agent systems run away with time, money and GPU memory. On a single 12 GB card shared with speech, the voice and the HUD, a runaway fan-out is not just wasteful. It can starve the parts of the system the owner is actively using.

The design council and the red team

Two review structures exist in production code:

  • A 12-role design council, including a deliberately hostile sceptic. It preserves dissent instead of averaging it away. A minority objection stays on the record even when the majority disagrees.
  • A red team that attacks along ten vectors. It attacks every repair again, because a fix can open a new hole. It fails the gate while any high or critical attack remains open.

Their runtime status is uncertain. A generated project map shows the council and red team imported only by tests and tools, not by the running system. This site therefore describes them as implemented modules, not as services that review every task.

Nobody accepts their own work

A specialist cannot accept its own output. The project’s reasoning is compact: “self-verification is the same error twice.” Whatever blind spot produced a mistake will usually also miss it on review. Acceptance has to come from an independent verifier, such as the red team or a separate checker, and any real-world effect still has to pass the governance chain.

Specialist contracts (Advanced branch)

The Advanced Systems branch, which is not merged into production, formalises specialist work:

  • Contracts for 11 roles, each with typed Assignment, Claim and WorkerReport records.
  • A bounded local specialist worker with no autonomous model dispatcher. It does not dispatch model calls on its own initiative.
  • Checkpoints in the mission store, so specialist progress survives like any other mission state.
  • A blackboard where reports are kept as CONFLICTING or UNVERIFIED instead of being merged into a false consensus. Freshness rules mark old reports STALE.

Work on shared resource reservations between specialists is on hold because of findings about how leases recover. Live proofs of this branch used fixture tasks and fixture reports, not real owner work.

Roles do not grant authority

This site summarises a set of rules as “roles do not grant authority”. That exact phrase does not appear in the project. It is an accurate paraphrase of rules that do:

  • A role’s “scope is a ceiling, never execution authority”. The role limits what a specialist may attempt. It never permits anything.
  • “The role is a scope label, never a claim that a specialist model supplied reasoning”. Giving a worker a role name does not mean a specialised model did the reasoning.
  • Related rules elsewhere follow the same pattern. Skill confidence grants no authority, simulation grants no authority, and capability discovery has no execution or grant method.

A specialist asking to do something is exactly as powerful as the model asking: it can propose, and the runtime decides.

Reports are claims, not evidence

A worker’s report is recorded as an assertion. Even when it is backed by the worker’s citations, “A supported claim is still a worker assertion, not verified evidence”. It becomes evidence only when something independent observes the world and agrees. This mirrors the rule for tools: a dispatched action is not a verified one, and a reported result is not a verified one either. See research for how evidence is graded.

What is not proven yet

  • Specialist decomposition is tested, not live-proven in the registry.
  • Council and red-team wiring is uncertain. They may run only in tests and tooling.
  • Specialist contracts, the local worker and the blackboard are on the Advanced branch only, not merged into production, and their proofs used fixture tasks.
  • Shared resource reservations are on hold.
  • No measurement is published here of how much specialist decomposition improves outcomes over a single pass.

Invariants

Rules the code enforces

  • scope is a ceiling, never execution authority

    Advanced Systems specialist contracts (branch, not merged)

  • The role is a scope label, never a claim that a specialist model supplied reasoning

    Advanced Systems specialist contracts (branch, not merged)

  • A supported claim is still a worker assertion, not verified evidence

    Advanced Systems specialist contracts (branch, not merged)

  • self-verification is the same error twice

    production specialist rules

Capabilities

Related capabilities

All 11 catalogued capabilities in this area

Sources

Sources

Paths are relative to the private JARVIS repository. They are listed so the claims above can be audited by the owner and reviewers; the files themselves are not published.

  • ledger docs/ledger/CAPABILITY_TRUTH.json
  • doc docs/constitution/JARVIS_CONSTITUTION.md
  • commit d74c876c9 Advanced branch: specialist checkpoints
  • commit 20cda9844 Advanced branch: specialist contracts
  • commit 0fedbe3c1 Advanced branch: bounded local worker