plugin
AI6 Agent Operating Layer
AI6 Agent Operating Layer is the controlled execution layer around agents. Its Chief-of-Staff MCP rail is the external doorway for AI6 Constitutional Autonomy: it creates or resumes Service Desk work, binds builder and verifier seats, carries acceptance commands, gives Hermes only read-mode status for runner liveness, and records evidence without letting the builder close its own work.
Host and data posture
Where this product is meant to live.
Internal AI6 Chief-of-Staff execution rail for Constitutional Autonomy, Service Desk dispatch, Boss/Foreman/Open Engine coordination, and verifier-separated receipts; expose only customer-safe facades.
Commercial shape
Platform rail
Data posture
Internal only
Approval posture
Internal control plane
Best demo
StackFast UI
Best daily use
Who it is for
AI6 operators, enterprise platform teams, and agent hosts that need governed execution instead of chat-only task tracking.
Problem it solves
It prevents unmanaged agents, invisible scheduled work, stale dispatches, fake-verifier closes, and unsafe tool installation.
Activation model
Assisted setup with risk policy, wallet-backed authentication, Service Desk binding, independent verifier selection, and approval gates.
Proof and source paths
- Chief-of-Staff MCP tools are mounted on /api/mcp
- AI6 loop tool seeds describe the Chief-of-Staff namespace for registry discovery
- Agent routes exist under /api/agent
- Types and persistence exist
- Enterprise/user guide docs exist
Repo evidence
app/api/agentlib/agent-operating-layerdocs/AI6_AGENT_OPERATING_LAYER_ENTERPRISE_SPEC.md
Capabilities
chief of staff rail
mcpRoute AI6 work through a role-filtered five-tool Chief-of-Staff facade so every substantive task has a dispatch-of-record, immutable origin, assigned builder, distinct verifier, acceptance commands, server-owned runner leases, and an evidence-backed next action.
Agent use
Boss discovery uses stackfast.ai6.chief_of_staff.run, status, and resolve_input. Claude can only append signed intent/review evidence; Robert alone authorizes a time-bound stalled-task takeover; Codex builds and the CoS-owned Validator Job independently validates under persisted machine identity gemini. Chief of Staff records terminal state after terminal readback. The recorded builder redeems a server-issued assignment and lease before checkpointing. Hermes sees only an opaque runner inbox and never raw dispatch, credentials, or lease data. Never call raw dispatch create/claim/close primitives as an external shortcut.
skill lifecycle
pluginPropose, approve, install, and rollback agent skills.
Agent use
Skill lifecycle management with approval gates.
Connector proof
Catalog is not the same as customer-ready.
This product only becomes market-ready after a real host mounts the entitled tools, a safe call succeeds, metering records the event, and a customer-safe receipt exists. Until then, the page shows the strongest proven status without rounding up.
Catalog
Runtime registry and product manifest are present.
Entitlement
Execution requires OAuth or storefront entitlement scope.
Callable
Callable tool proof is incomplete.
Metering
Metering waits on callable execution.
Customer validated
Pending fresh host-surface call receipt.
Runtime registry status
Primary registry
hybrid
Status
partial public mcp
Install gate
Assisted only until agent profile, skill lifecycle, cron, hook, rollback, and proof-ledger tools are exposed through one registry with smoke evidence.
Callable tools
stackfast.ai6.chief_of_staff.runstackfast.ai6.chief_of_staff.checkpointstackfast.ai6.chief_of_staff.authorize_ratified_build_merge_exceptionstackfast.ai6.chief_of_staff.resolve_inputstackfast.ai6.chief_of_staff.submit_intentstackfast.ai6.chief_of_staff.submit_reviewstackfast.ai6.chief_of_staff.submit_contributionstackfast.ai6.chief_of_staff.authorize_task_takeoverstackfast.ai6.chief_of_staff.recover_same_dispatchstackfast.ai6.chief_of_staff.recover_stale_scope_fencestackfast.ai6.chief_of_staff.statusstackfast.ai6.chief_of_staff.submit_verification
Missing or gated tools
stackfast.agent.profile.resolvestackfast.agent.skill.installstackfast.agent.cron.schedulestackfast.agent.hook.register
- Storefront product is catalog-ready, not install-ready.
- Current callable surface includes the Chief-of-Staff MCP rail plus selected communication/control-plane tools, not the full AI6 operating layer.
- The five-tool Chief-of-Staff facade is role-filtered: authorized Boss seats get run/status/resolve_input, Codex gets checkpoint only in its builder role, and the CoS-owned Validator Job gets submit_verification under persisted machine identity gemini. Raw dispatch and validator primitives remain hidden implementation details.
Install and activate
Connect this product through the StackFast MCP endpoint. Discovery metadata is public; execution uses OAuth and storefront entitlement checks.
MCP URL
https://stackfast.ai/api/mcpAgent subscription
This product remains request-scope until its checkout, fulfillment, and public-name gates are complete.
Client snippets
ChatGPT
Add StackFast as a custom MCP connector, then approve OAuth when prompted.
Claude
Connect a remote MCP server using the StackFast MCP URL and a tenant-scoped token or OAuth flow.
Cursor
Register StackFast as a remote MCP server for project-scoped tool use.
Grok
Add StackFast as a custom MCP connector using the StackFast MCP URL and customer entitlement auth.
Product: AI6 Agent Operating Layer Product API: https://stackfast.ai/api/store/products/agent-operating-layer Pricing API: https://stackfast.ai/api/store/pricing/agent-operating-layer Manifest API: https://stackfast.ai/api/store/manifests/agent-operating-layer MCP URL: https://stackfast.ai/api/mcp Auth: oauth_reader_or_storefront_entitlement Checkout session API: https://stackfast.ai/api/store/checkout/session Plans: - Agent control scope: Request scope; checkout_ready=false; checkout_url=request_scope Agent activation: - Read this product manifest and pricing API. - If a plan has checkout_ready=true, open its checkout_url or POST product_slug, plan_slug, and customer_email to the checkout session API. - After Stripe payment, the signed webhook grants storefront_entitlements for the buyer email/account. - Connect the LLM client to the MCP URL and approve OAuth so tools/list reflects the licensed reader surface. - Call only tools exposed for that entitlement; unentitled execution must fail closed.