Fifteen AI employees and the limit of each

Who exactly is included in the product and what each of them does

What an AI employee means in this product

An AI employee is not a chat and not a subscription to a model. It is a line of work with four things written down: which areas of company data it reads, which kinds of drafts it produces, what its daily budget is, and which people may accept its proposal.

A proposal goes into a queue for a person and has no consequence for anybody until they decide. There is no route in the code by which a proposal carries itself out — that is not a mode somebody can switch on.

Fifteen lines of work

The list is closed: a name that is not in the platform register cannot be created by a setting or by a typo. Each entry says what the employee produces and where it stops.

• Sales — sorts an incoming request and drafts a reply and an offer. It does not close the deal and sends no letter to the customer: a salesperson does that.
• Support — identifies the subject of a request and drafts the wording from the confirmed knowledge base. A person sends the answer; there is no sending route in the product.
• Marketing — collects campaign results from uploaded exports and marks deviations. It changes nothing in an ad account: no platform has a live adapter.
• HR — drafts a vacancy description and a summary of hiring stages. It makes no decision about a person: there is no column in the database for a candidate score.
• Finance — reconciles plan with fact before an invoice is approved. It moves no money: there is no payment provider in the product.
• Legal assistant — extracts deadlines and obligations from a contract for a person to check. It gives no legal opinion.
• Operations — carries a request through the rules, watches deadlines and records deviations. A person performs the steps; the platform tracks and reminds.
• Customer success — proposes a state of the account in a word from a closed list. It computes and stores no number: there is nothing to compute one from.
• Quality — reviews conversations against a list of criteria. The answer is reviewed, not its author: there is no author column in the review.
• Procurement — collects requests and puts supplier terms into one table. The comparison comes back in arrival order, unsorted by price: the decision stays with the buyer.
• Project management — collects tasks, sets deadlines and shows what is overdue. A cycle in the plan is refused by the database itself, not by a reminder.
• Compliance — checks actions against written rules and shows where confirmation is missing. It does not confirm compliance with the law: the platform has no such status.
• IT helpdesk — takes internal requests from staff and routes them. It grants no access: a request records the ask and the outcome; access is given elsewhere.
• Knowledge — finds outdated and contradictory documents and proposes a correction. A second person confirms publication.
• BI analyst — explains a change in a figure and names the source of every number. It builds no forecast: there is not one future point in the series.

How an agent is switched on

As delivered, every agent is off and its budget is zero. The owner assigns a budget and moves the agent into work — both actions require the password again and are written to the journal.

Before working, an agent goes through a test mode: the full path runs, and everything it produced stays in the sandbox and cannot be applied. Two people decide to move it into work, not one setting.

Without its module an agent does not start

An agent whose organisation module is off never leaves the draft state at all: the platform refuses to run work that has no source of data.

The spend ceiling is checked before the run

A run that would exceed the assigned ceiling is refused and stays in history as a refusal with a reason. The bill arrives afterwards; the decision is made before.

What the agents run on today

Without an external provider key the agents run on a built-in deterministic provider: it selects records by word match and invents no prose. Some kinds of work — a drafted letter, a document — are beyond it, and it refuses with a named reason instead of making an answer up.

An external model is connected by a key and a separate decision of the owner, and its host by the outbound traffic allow-list. The first live call to an external model was made on 2026-09-06; before that day nothing went out at all.

Basis: packages/contracts/src/ai.ts, docs/MODULE_TRUTH_TABLE.md. This page describes what exists in this build, not what is planned.