The six levels
The platform that agent-run
businesses stand on
Oratorium is not a business. It is the ground a business is built on — six levels and one governance spine. Carolverse is the first business standing on it, and it is meant to carry others.
Three levels stand above ground and three are dug beneath it. One spine of light runs through every one of them.
The test that produced this
A platform that cannot describe itself without naming its first customer is not a platform yet. The first draft of the ground level was named after Carolverse. Delete that word and nothing was left behind — so the level was renamed.
Every level below survives that test. Take the first business away and the ground it stood on is still there, ready for the next one.
The projects
Who is being served
The top level is about people and permission, not software. Clients hold accounts, accounts hold projects, and every person belongs to a project. What a project may use is decided by its subscriptions — so access is never a favour granted by whoever is asked, it is a fact already written down.
This is also where the money starts. A subscription belongs to a project, never to a person, which is why someone leaving never takes a capability with them.
The doors and interfaces
How anyone arrives
Every way a person or an agent reaches the platform lives here: web apps, chat windows, WhatsApp, public pages. They are doors, and a door has one job — to let someone in and hand them to the level below.
One door serves many projects at once, which is exactly why a door must never decide who may enter. It asks; the level above and the spine answer.
The agent estate
Where the work actually happens
Ground level. Services and tracks, and beneath them the agents, apps, helpers and tasks that do the work. Every service is one job with one responsible agent, so there is never a piece of work without a name attached to it.
A track carries the subscription and a task carries the budget. That pairing is what makes the estate accountable: work is always paid for by something named, and nothing runs on an allowance nobody declared.
The shared building blocks
Capabilities the estate calls instead of rebuilding
Memory, media, scheduling and waking, notifications, search. These are not features of any one business — they are the things every business on the platform turns out to need, built once and called from above.
The rule for what belongs here is simple: if two businesses both need it, it is not theirs, it is the platform's. Capability that gets duplicated up at estate level is pulled down here and rebuilt properly.
The infrastructure
What it all physically stands on
Machines, data stores, networks, and the connections out to services the platform does not own. Plain, rented, and deliberately unremarkable — the ground under a platform should be boring.
This is the only level that is bought rather than designed. Everything above it is written so that it can be swapped underneath them without anyone noticing.
The intelligence
The models, and the adapters that reach them
The foundation. Models from several suppliers, reached through one common adapter so that nothing above ever names a vendor. Strong lanes take the hard reasoning, cheaper lanes take routine work, and separate lanes make pictures and speech.
Intelligence sits at the very bottom on purpose. It is a supply the platform buys and meters, never a feature it owns — which is why a supplier going quiet is an ordinary event rather than an outage.
Not a seventh level
The governance spine
Governance does not sit on a level of its own. It runs vertically through all six, and nothing on any level acts without passing it. A drawing that puts governance on its own floor is lying about how the place works.
- PoliciesThe written law every agent is bound by, cited by number rather than quoted.
- AccessWho may see what — asked at every door, and failing closed when unsure.
- Money gateAsked before any spend, and able to refuse for reasons that have nothing to do with money.
- Audit trailEvery privileged action recorded with the name of whoever asked for it.
- RecordsOne home for every fact, so a question asked twice cannot drift into two answers.
Levels say where a thing lives. The spine says whether it may happen.