Continuity
feature status: stableA session ends and the work does not: what the next worker needs is a typed record checked against git, not a transcript somebody hopes to find.
11 claims, 11 naming their test · 7 use cases
Explore Continuity →This page was translated automatically from English, the only language this site is written in. Read the original.
Every capability of the product as one object of the layer: what it is made of, the interfaces it is exposed through, the rules that hold it and the guarantees behind it. Each card is a file; every mark beside it is derived.
Each feature names the one domain it belongs to in its own file, and each card is that file. The words are editorial; every mark, count and link on a card is derived from what the file names.
Every worker starts from what the repository already knows: the context that applies to its path, the handover the last session left, and the decisions already made.
A session ends and the work does not: what the next worker needs is a typed record checked against git, not a transcript somebody hopes to find.
11 claims, 11 naming their test · 7 use cases
Explore Continuity →What was decided, why, and what was rejected is recorded where the next session reads it, and a durable decision becomes an architecture record with typed links to what it put in force.
9 claims, 7 naming their test · 5 use cases
Explore Knowledge →Context is a tree, not one file: the documents that apply to a path are resolved from the root down, the nearest one adds and never silently replaces, and a worker loads what its task needs and nothing more.
9 claims, 8 naming their test · 4 use cases
Explore Context →A skill is one directory under the layer; adding it is the whole act, and the command line, the website and MCP all read it from the same file.
3 claims, 3 naming their test · 1 use case
Explore Skills →Every worker declares the paths it will touch, sees who else is working and where, and hears about a collision before it is committed.
Every worker declares the paths it may touch, every session can see who else is attached and what they announced, and a collision is reported before it is committed.
5 claims, 5 naming their test · 2 use cases
Explore Coordination →A branch's worktree is where git says it is, never where somebody chose to put it, and a misplaced one is a diagnostic with a remedy rather than a mystery.
3 claims, 3 naming their test · 2 use cases
Explore Worktrees →Majordomus runtimes of one repository — on one machine or several — discover each other, link through a signed handshake, and share sessions, claims, handovers and reviews through one replicated journal that survives disconnects, crashes and partitions.
9 claims, 9 naming their test · no use case linked
Explore Mesh →One declared catalogue of vendors and models — capabilities, context, lifecycle, no fabricated facts — and a routing answer that names why every candidate was chosen or excluded.
3 claims, 3 naming their test · no use case linked
Explore Models →Material uncertainty becomes an evidence-backed decision — reviewed by whichever optional advisors are available, decided locally when none are, and carried to the next session as a record.
7 claims, 7 naming their test · no use case linked
Explore Reasoning →An issue records what happened to it and the engine derives whether it is blocked, ready, active, verifying or done from the dependency graph, so the roadmap cannot disagree with the plan.
15 claims, 14 naming their test · 3 use cases
Explore Planning →The rules are written once, in the repository, projected into every tool's instructions, and a blocking rule stops the command instead of advising it.
A rule is enforced when a validator decides it, a command runs it, a test proves it and CI blocks on it; anything less is documentation, and the tool knows the difference.
12 claims, 12 naming their test · 4 use cases
Explore Doctrine →Every provider the tool declares — an agent, an orchestrator that runs agents, any tool that reads AGENTS.md — gets the same rules from the same place, because their instruction files are generated from one policy and never written by hand; the providers are the table in docs/generated/providers.md.
14 claims, 10 naming their test · 3 use cases
Explore Policy →The commit message has one grammar, one policy and one verdict; the scope it is written under is learned from the repository's own history rather than kept in a table, and a message that does not satisfy the policy is refused while it is still being written.
3 claims, 3 naming their test · 1 use case
Explore Commits →A claim names the test that settles it, a recorded run is judged against the commit it ran at, and a claim with no recorded run says so.
What a coding session consumes with Majordomus and without it, from matched runs judged by the same hidden tests, with every number labelled by how it was obtained and published only past a declared rule.
3 claims, 2 naming their test · no use case linked
Explore Economics →Who did what, under which task, at which commit, in which session is a ledger the tool writes and a person can read back, not a memory of a conversation.
9 claims, 6 naming their test · 2 use cases
Explore Provenance →What a person does with the tool is one file with a scenario the tool runs against itself; the page shows that execution, and a public command no use case runs is a gap the tool reports.
4 claims, 4 naming their test · 1 use case
Explore Use cases →Every claim is joined to the execution recorded for its test — the outcome, the commit, the tree, the digest and the command that produces it again — and a run against this commit is never reported as the same thing as a run whose inputs merely have not changed.
12 claims, 12 naming their test · no use case linked
Explore Evidence →Every externally callable operation is timed directly, over MCP and over HTTP, the denominator is generated from the registry, and a regression against the accepted baseline fails the check.
6 claims, 6 naming their test · 1 use case
Explore Benchmarks →Done is a contract the repository evaluates line by line. Work is not accepted while any line fails, and a refusal stays on the record.
One coverage measurement, test code out of the denominator, holds a crate floor, a floor over the session/continuity domain, and — the invariant of #214 — every executable line a change touches.
1 claim, 1 naming its test · no use case linked
Explore Coverage →A worker does not get to define its own successful completion: every line of the finish contract is printed pass or fail, the task is not accepted until all of them pass, and every time it was claimed done and was not is on the record.
9 claims, 9 naming their test · 7 use cases
Explore Finish contract →A change runs the gates its paths can affect, every gate is the same script a person runs, and the public site is published only from a commit whose derived data proved current.
6 claims, 6 naming their test · 1 use case
Explore CI →One declaration in the repository becomes the command line, the HTTP API, MCP, the UI, the Cockpit, the documentation and this site, and a projection that disagrees with it fails the build.
A capability is written in one place, and the command line, the HTTP API, the OpenAPI document, MCP, the Cockpit, the reference and this website are projections of it.
9 claims, 9 naming their test · 1 use case
Explore Declare once →Every agent, script and person reads the same repository through the interface it already speaks, and none of the interfaces is maintained by hand.
11 claims, 11 naming their test · 3 use cases
Explore Interfaces →One screen of the UI rotates eight scenes on a display nobody is sitting at, and every mark on it is a value a capability answered; a scene with nothing true to draw says why and is never drawn empty.
1 claim, 1 naming its test · no use case linked
Explore Observatory →The shared server's primary surface answers how the delivery stands — health, releases, the roadmap, the work and its pull requests, the mesh, the evidence and the rules — and every value on it names the capability it was read from and every other surface that serves it.
1 claim, 1 naming its test · no use case linked
Explore UI →The same server that answers agents renders every capability, object, graph, worktree and health check as pages, with a runner generated from each capability's own schema; nothing on it is a second list.
1 claim, 1 naming its test · no use case linked
Explore Cockpit →The installer downloads one archive for your machine, verifies its digest against the release metadata before unpacking anything, and installs atomically; no git, no Rust, no Node, no root.
9 claims, 9 naming their test · 5 use cases
Explore Install →Every operational moment the tool exists for is one file with the signals that identify it and the mechanisms that answer it, and a reader's own symptoms resolve to a diagnosis by counting, not by inference.
3 claims, 3 naming their test · 1 use case
Explore Why →A feature is on an interface because a capability module, a shell command or an object kind it names is projected there. The number under each is counted from that, at build time.
Select a node to see what it is and what it touches.
The interactive view could not load. The list below is the same graph.
majordomus adr command · conclude
The repository's architecture decisions as objects: list, show, ask for the next free identity, propose one with provenance, and validate the whole set against this tree and every other ref.
majordomus archive command · inspect
Take a snapshot of the tracked tree that can be read, or checked, somewhere else.
majordomus bench command · inspect
Time every public command of the registry, cold and warm, and compare with the baseline.
majordomus capture command · work
Record the person's raw prompts from a provider hook as a record with its renderings, draw the episode boundary from the provider's own lifecycle hooks, install those hooks, reconcile and prune the archive, and report what each provider actually does here.
majordomus check command · verify
Is the current task still consistent with its policy, its scope and this checkout?
majordomus checkpoint command · work
Record compact progress inside the active task, so the next worker does not start over.
majordomus context command · work
What the next worker needs to know now, in authority order and within a budget.
majordomus decision command · work
Record a decision that was made between real alternatives, with its reason, and read them back.
majordomus doctor command · inspect
It checks governance only: is Majordomus itself healthy, and is every enforcement it declares actually wired here?
majordomus doctrine command · inspect
What rules are enforced, by what, and whether each one is actually wired.
majordomus evidence command · work
Record evidence against the active task: one obligation it declared, discharged, or one validation gate of the CI model that has reported — each as a ledger line carrying the hash of the files it was taken over.
majordomus finish command · conclude
Evaluate the finish contract and refuse the outcome if any line of it is unmet.
majordomus handover command · conclude
Write an append-only continuation record, and resolve the most relevant prior one.
majordomus history command · inspect
Read the append-only ledger back, filtered by task, event or time.
majordomus init command · setup
Create the .ai/ layer in this repository, and refuse to overwrite an existing one.
majordomus knowledge command · inspect
The compiled index over what this repository states, and the candidate records it derives from what an episode did.
majordomus migrate command · setup
Move pre-.ai project data from .majordomus/ into .ai/, explicitly and backed up.
majordomus plan command · begin
The milestone and issue model — validate it, read it, and move one issue through it.
majordomus prompt command · work
List, show and render the repository's own prompt assets, substituting known tokens only.
majordomus question command · work
Open a question that blocks acceptance, resolve it, and list what is still open.
majordomus recover command · setup
Close episodes nobody ended, fold duplicate records, classify the stores' stray files.
majordomus rules command · inspect
The effective rule set, vendored baseline plus project rules.
majordomus search command · inspect
Find a durable record without reading all of them, in authority order.
majordomus session command · begin
Open, inspect and close one execution episode.
majordomus skills command · work
The repository's skills — provider-neutral procedures under the skills section — listed, shown and checked from the one catalogue every surface reads.
majordomus start command · begin
Begin one scoped task under a profile, and refuse while another is active.
majordomus update command · setup
Regenerate every provider instruction file from the one policy, deterministically.
majordomus usecase command · verify
The executable use cases: list, show, validate, run against the real tool, coverage, impact, scaffold.
majordomus version command · inspect
Print the version, without needing a repository or an installation.
majordomus watch command · inspect
What has drifted since the last update — policy, projections, state, retention.
Benchmarks feature · stable
The benchmark targets are derived from the registry, so a capability nothing times cannot be merged; runs are compared with a tracked baseline per platform under a regression policy; the shell tool reports where every command's time went; and derived state is computed once per state version rather than per call.
CI feature · stable
The gate model names every validation gate and which classes of paths select it; the workflow is a thin adapter over that plan; the publication path proves the committed derived data current by its input hash and renders it; and the tool supervises its own repository with its own hooks.
Cockpit feature · featured
At /cockpit the shared server lays out what a capability answered — the registry explorer, every object of the layer, the derived graphs, the directory contracts, the continuity of this checkout, the worktree topology, one health report naming the engine behind every check — and every page is complete HTML before any script runs.
Commits feature · featured
The same parse the changelog reads the history with decides whether a new message passes. The policy is data in the repository's own policy file, its subject width measured from the history rather than taken from the convention. The scope vocabulary is observed from at most 1500 commits of the log, so a subsystem committed today is in it today and a scope nobody uses sinks on its own. A plan over the working tree carries a fingerprint of repository, worktree, HEAD and change set, so a plan acted on after the tree moved is refused rather than applied - and a change set holding generated files is one commit, because only the last of several could carry current derived data.
Context feature · stable
Every README under .ai/ is a context document with an identity, a scope, the providers and audience it addresses and how it composes with its ancestors; the repository scope declares what a worker reads and what it never reads; and the briefing a worker gets is assembled from durable state within a line budget with every exclusion named.
Continuity feature · featured
Task state, checkpoints, handovers, decisions and open questions live in files outside every conversation; a session opens and closes into an immutable record; the person's prompts are captured by the provider's own hooks; and the next episode is briefed from those records, labelled by how far git has moved since.
Coordination feature · featured
A task claims its scope before the first edit; check and finish refuse a file outside it and report another worktree's overlapping claim; every client of the shared server is a peer that can announce its intent and paths; and each branch has exactly one worktree, derived from git.
Coverage feature · stable
scripts/rust-coverage is the one coverage authority: a single cargo-llvm-cov export, test code excluded from both sides of every fraction, one rule for lines, functions and regions. Three questions read that judgment — a crate-wide line floor, a floor over the session/continuity domain, and the changed-code differential gate that refuses new debt while leaving untouched legacy debt alone. The differential intersects the export with the lines git says a change touched against the branch's merge-base, working tree included, and distinguishes PASS, FAIL, UNKNOWN and BLOCKED so a crashed tool or an unresolvable base is never a silent green.
Declare once feature · featured
One typed declaration per capability, one file per object of the layer; every interface, generated document and page is derived from the registry those declarations build, and a stale projection fails the build.
Doctrine feature · featured
Every rule is a portable Markdown object with front matter, and it is enforced in one of three declared modes: a validator the dispatcher runs, a gate or case that proves it, or a stated reason why no program can express it. Doctor walks the dispatch chain from the source, refusing a validator nobody declares and a declaration nothing runs; the proof graph walks the other relation, joining each rule to the tree and to the runs recorded against it, so that a rule naming a case which was deleted is reported as reading enforced rather than being it.
Economics feature · stable
A task corpus runs in a real harness twice — without Majordomus and with it — and the provider's usage, the gate verdicts and the context compiler's counted selection are recorded as raw facts; one calculator derives pairs, distributions, seeded bootstrap intervals and the one statement the methodology's publication rule allows, projected to the CLI, HTTP, OpenAPI, MCP, the Cockpit, a generated report and the site; economics check refuses any savings number typed by hand.
Evidence feature · featured
The claims matrix binds a claim to a test by path, and a path resolving says a file exists rather than that anything ran. The ledger records the latest execution of every test with its provenance; the join is derived on every read and answers, per claim, whether the repository can honestly call it proven, only-not-invalidated, stale, failing or never run.
Finish contract feature · featured
A task starts with a declared scope and a profile; check reports whether the task is consistent with policy, scope and state; finish evaluates the policy's contract — scope respected, verification ran, state updated, no open blockers, a note present — and refuses with the reproducing command when any line fails.
Install feature · stable
One distribution model owns every platform, artifact name and URL; the installer, the release build matrix, the installation guide, the website's install block and the public release metadata are generated from it, and a release publishes an artifact for every supported target or it is not published.
Interfaces feature · stable
The Rust executable serves the layer over stdio MCP, MCP over HTTP, routes under /api/v1/, an OpenAPI document with a Swagger UI, and a command line, all derived from the capability registry, which names what each capability changes; one shared server per repository, and every attached client is a peer the others can see.
Knowledge feature · featured
Decisions are recorded with their reason and their task, open questions block acceptance until resolved, architecture decision records carry typed references to the rules, claims, files and tests they put in force, and the graph of all of it is derived from those references rather than drawn.
Mesh feature · featured
Each runtime is a key-authenticated participant; discovery (multicast, broadcast, rendezvous, seeds) only finds candidates, and a signed handshake admits a link only for the same repository, a compatible protocol and a trusted key. Linked runtimes replicate one signed event journal every heartbeat and fold it into the same state everywhere, so an exclusive claim on one machine refuses an overlapping claim on another, a handover published on one is consumed on another, and a runtime that crashes expires everywhere on its own. The CLI, HTTP, OpenAPI, MCP and the Cockpit render the same state, and every guarantee is held by tests over real processes and a container lab on a real network.
Models feature · featured
share/models.yaml declares vendors and models in one place, in routing's preference order, with provenance stated and pricing deliberately absent; models.list and models.route project the catalogue and its explainable routing to the CLI, HTTP, OpenAPI, MCP and the Cockpit, credential presence is reported without any value being read, and nothing anywhere calls a model — the crate's no-network boundary stands.
Observatory feature · featured
At /ui/observatory, and at /ui/kiosk filling the window unattended, the shared server draws the machines of the mesh and their runtimes, the newest events of its journal, the milestones of the plan, the dimensions of health, the published releases and the sessions cooperating, from the same capabilities the other screens read. The published site carries it as a snapshot that says which commit it was read at.
Planning feature · stable
Milestones are outcome specifications and issues are execution contracts, one YAML file each; the dependency graph decides execution waves and the next ready issue; a milestone whose dependencies are not accepted is blocked whatever its own issues say; and the GitHub projection is rendered offline from the same model.
Policy feature · stable
A provider-neutral policy and four execution profiles are the one source; majordomus update renders each provider bootstrap from its template, stamps it with the policy hash and the hash of its own content, and doctor fails a bootstrap that was hand-edited, that carries a rule corpus of its own, or that exceeds the always-loaded budget.
Provenance feature · featured
The ledger records every durable event with its task and its head; identity fields on any record are computed from git and refused when authored; a closed session is an immutable record of what one episode produced; the person's prompts are captured by the provider's hooks; and retention is capped by policy rather than by forgetting.
Reasoning feature · featured
share/advisors.yaml declares advisory roles by reference to the provider table and the model catalogue; availability is derived from presence and recorded outcomes, with no network; a pure policy plans review by capability and treats no advisor as a structured local review; one writer records assessments, consultations, disagreements settled by experiment, conclusions with computed review counts, and validations; and the state reaches the command line, HTTP, MCP, the Cockpit, the environment banner, doctor, the context briefing and the derived handover.
Skills feature · stable
A skill is a provider-neutral procedure for one bounded kind of work, front matter under a schema over a body with a purpose, a procedure and an output contract; the source class discovers it, skills check holds every one to its contract, and nothing loads a skill unless the task is about it.
UI feature · featured
At /ui the shared server lays out the delivery in the project's own words, composed only of what capabilities answered, asked together so the first screen paints in the time of its slowest source; a panel whose source is slow arrives on its own route, and the Cockpit beneath it is one click away for the source of any value.
Use cases feature · stable
A use case names the commands, rules, claims and applications it relies on and carries a scenario as data; usecase run executes it in a disposable repository and records normalised evidence; maturity is observed from the evidence; coverage of commands, guaranteed claims and MCP tools is tallied and the policy says which gaps fail.
Why feature · stable
Moments, audiences and areas are kinds of the layer; a moment names the commands, capabilities, claims, rules and use cases that answer it, each reference validated; the catalogue, the questionnaire, the diagnosis and every page and filter are derived from those files.
Worktrees feature · featured
The container is the primary checkout's sibling named with -wt, a branch's worktree is the branch name under it with its hierarchy kept, both derived from git identity and registered nowhere; a pre-commit guard refuses a feature branch committed from anywhere else, and migration moves a misplaced worktree with its uncommitted work, fingerprinted before and after.
adr kind
166 object(s) of the layer
application kind
5 object(s) of the layer
area kind
9 object(s) of the layer
audience kind
8 object(s) of the layer
claim kind
250 object(s) of the layer
command kind
31 object(s) of the layer
context kind
39 object(s) of the layer
critique kind
37 object(s) of the layer
deployment kind
1 object(s) of the layer
derive-offload kind
1 object(s) of the layer
distribution-model kind
1 object(s) of the layer
document kind
353 object(s) of the layer
domain kind
6 object(s) of the layer
feature kind
29 object(s) of the layer
gap kind
5 object(s) of the layer
intent kind
43 object(s) of the layer
issue kind
1027 object(s) of the layer
knowledge kind
58 object(s) of the layer
mesh-declaration kind
1 object(s) of the layer
milestone kind
111 object(s) of the layer
moment kind
38 object(s) of the layer
policy kind
1 object(s) of the layer
profile kind
4 object(s) of the layer
prompt kind
5 object(s) of the layer
release-record kind
36 object(s) of the layer
rule kind
190 object(s) of the layer
scope kind
1 object(s) of the layer
session kind
91 object(s) of the layer
skill kind
8 object(s) of the layer
taxonomy kind
10 object(s) of the layer
use-case kind
49 object(s) of the layer
workspace kind
1 object(s) of the layer
artifacts module · behaviorally_verified
Generated artifacts
brief module · behaviorally_verified
The session brief
capabilities module · behaviorally_verified
Capabilities
commands module · implemented
Command graph
commit module · behaviorally_verified
Commit
continuity module · behaviorally_verified
Continuity
convergence module · behaviorally_verified
Convergence
dashboard module · behaviorally_verified
Dashboards
delivery module · experimental
Delivery
deploy module · behaviorally_verified
Deployment
design module · behaviorally_verified
Design system
devcontext module · behaviorally_verified
Development context
devtask module · behaviorally_verified
Executable development scopes
directories module · behaviorally_verified
Directory contracts
distribution module · behaviorally_verified
Distribution
economics module · behaviorally_verified
Token economics
editors module · behaviorally_verified
Editor and agent projections
entity module · implemented
Entities
environment module · behaviorally_verified
Repository environment
episodes module · behaviorally_verified
Episodes
evidence module · behaviorally_verified
Evidence
executions module · behaviorally_verified
Executions
gates module · behaviorally_verified
Completion gates
graph module · behaviorally_verified
Graphs
guard module · experimental
Edit guard
health module · behaviorally_verified
Health
integration module · experimental
Pull-request integration
intent_realization module · behaviorally_verified
Intent realization
intents module · behaviorally_verified
Intent
knowledge_base module · behaviorally_verified
Knowledge base
lifecycle module · behaviorally_verified
Session lifecycle
mcp module · experimental
MCP projection
mesh module · experimental
Mesh
models module · experimental
Models
monitor module · experimental
The monitor
objects module · behaviorally_verified
Objects
obligations module · behaviorally_verified
Obligations
observatory module · behaviorally_verified
Observatory
pack module · behaviorally_verified
Source pack
peers module · behaviorally_verified
Peers
perf module · behaviorally_verified
Performance
plan module · behaviorally_verified
The plan and its derivations
product module · behaviorally_verified
Product
quality module · behaviorally_verified
Public API quality
reasoning module · experimental
Reasoning
recover module · behaviorally_verified
Recovery of the record stores
release module · implemented
Release
repository module · behaviorally_verified
Repository
rules module · behaviorally_verified
Rules
served module · behaviorally_verified
Served deployments
server module · behaviorally_verified
Server
session_domain module · behaviorally_verified
The session domain
shell module · behaviorally_verified
Shell automation
skills module · behaviorally_verified
Skills
trace module · behaviorally_verified
Traceability
web module · behaviorally_verified
Web surfaces
why module · behaviorally_verified
Why
worktree module · behaviorally_verified
Worktree topology
HTTP API surface
Command line surface
Cockpit surface
Documentation surface
MCP surface
The set is the adapters the distribution ships, agents and orchestrators alike. What this repository does with each — the instruction files its policy renders, the client configuration at its root — is read from the policy and the tree, never listed here; what the tool declares about each — its name, the configuration it reads, the scratch roots it creates checkouts under — is read from one declaration beside the templates.
agents
bb
scratch: ${BB_DATA_DIR:-~/.bb}/plugins/environment-git-worktree/host-data/worktrees
claude-code
.mcp.json
2 hook(s) wired
scratch: <primary>/.claude/worktrees
codex.codex/config.toml
gemini
.gemini/settings.json
generic
Every fact on this page came from majordomus product list,
majordomus product matrix and
majordomus product providers — the same answers this
repository serves over HTTP and over MCP. How that derivation works →