Architecture

Eight layers, one environment you own.

Efficient Labs isn't one feature — it's the Ownership Layer for autonomous intelligence: eight foundational layers, from the models you bring to the money your agents may spend, each labelled with what it can actually prove today. The file system is the source of truth; everything else is a projection of it.

Layers
Eight
Source of truth
Your file system
Proof
Signed receipts
Status
Honestly labelled
01The eight layers

From the model you bring to the money it may spend

Read it as a stack. Intelligence is any model you bring; Identity establishes who owns and who acts; Continuity (ECP)preserves it across time; StratosAgentruns it locally; the Governance Harnessbounds every action; Atmosphere makes it yours to own; ARI measures readiness; and Commerce governs spend. Each is labelled with the maturity it has actually reached — never rounded up.

08
CommerceFinancial
07
ARIEconomic & readiness
06
AtmosphereOwnership
05
Governance HarnessGovernance
04
StratosAgentInfrastructure
03
ECPContinuity
02
IdentityWho owns & acts
01
IntelligenceReasoning
Layer 01 · Reasoning
Intelligence
Bring any model
OPEN

Claude, GPT, Gemini, Qwen, DeepSeek, open-weights — frontier or local. Models are commodities; you bring them, swap them, and never get locked in.

See the docs
Layer 02 · Who owns & acts
Identity
Ownership & authority
ENFORCED

Who owns this intelligence, which node and which agent is acting, what authority and permissions exist. Identity is the first requirement for accountability.

See the docs
Layer 03 · Continuity
ECP
Efficient Context Protocol
PRODUCTION

Context, state, knowledge, receipts, ledgers and manifests that persist — turning temporary AI outputs into durable, compounding organizational intelligence.

See the docs
Layer 04 · Infrastructure
StratosAgent
Open-source runtime
PRODUCTION

Run autonomous intelligence locally, under your control — model routing, tool and workflow execution, identity, receipts and governance. Open source, free forever.

Get StratosAgent
Layer 05 · Governance
Governance Harness
Trust infrastructure
ENFORCED

Capability, authority and human-approval gates, escalation and evaluation policies, receipts, audit trails and denial records — turning autonomous into trustworthy autonomous.

See the docs
Layer 06 · Ownership
Atmosphere
Ownership infrastructure
PRODUCTION

Own your compute, context, memory, identity and infrastructure — intelligence that lives outside cloud dependency. Sovereignty instead of data sharecropping.

Explore Atmosphere
Layer 07 · Economic & readiness
ARI
Autonomous Readiness Index
MEASURED

Measure whether intelligence is ready for autonomy — across governance, ownership, continuity, security, economics, commerce, identity and infrastructure — and what it costs.

Run your readiness index
Layer 08 · Financial
Commerce
Governed spend
ROADMAP

The money-governance layer for autonomous work: should this transaction occur, who authorized it, what budget and wallet govern it, what limits and evidence apply — governed spend before autonomy ever touches money.

See the docs
OpenProductionEnforcedMeasuredRoadmap— honest maturity, never rounded up.
02The product ecosystem

What actually ships against the layers

The layers are the frame; these are the products that implement them. Each is owned by you, open where it counts, and labelled with its real maturity. DOP — the Digital Organism Protocol — is the improvement metabolism that decides what proves out and what gets retired.

PRODUCTION

StratosAgent

Intelligence Infrastructure

Run autonomous intelligence locally — model routing, tools, workflows, identity, receipts, governance. Free forever.

Learn more
PRODUCTION

ECP

Continuity Infrastructure

Preserve and compound intelligence — manifests, ledgers, receipts, read models. Outputs become durable, reusable intelligence.

Learn more
ENFORCED

Governance Harness

Trust Infrastructure

Govern and prove every action — authority, approvals, protected-action gates, deny-by-default, audited denials.

Learn more
PRODUCTION

Atmosphere

Ownership Infrastructure

Replace cloud dependency with sovereign infrastructure — own your compute, context, memory and intelligence.

Learn more
MEASURED

ARI

Measurement Infrastructure

Measure whether intelligence is ready for autonomy across eight dimensions — and what it costs.

Learn more
MEASURED

DOP

Improvement Metabolism

Records outcomes, evaluates work, promotes what proves value, prunes what decays — humans keep control of evolution.

Learn more
ROADMAP

Commerce

Financial Infrastructure

Govern budgets, wallets, approvals and settlement — financial accountability before autonomy touches money.

Learn more
03The trust trifecta

Three guarantees that compose

The whole architecture rests on three properties working together. Each is useful alone; the combination is what lets nodes that don't know each other cooperate safely. Trust the properties, not the participants.

Content-addressed

Live
Every block is referenced by the hash of what it contains, so you can fetch it from anyone and still prove it's the bytes you wanted. Integrity is built into the address.
  • SHA-256 freshness model
  • Data named by its contents
  • Tampering changes the name

Capability-isolated

Wired
What runs is contained: children inherit no credentials, code executes in a sandbox, and consequential writes pass a cost/approval handshake first.
  • Broker env-scoping strips secrets
  • WASI sandbox, empty preopens
  • Write-approval 402 loop

Post-quantum sealed

Live
Provenance is signed with a post-quantum scheme, so seals and receipts hold up even against a future quantum adversary. Origin is proven, not assumed.
  • ML-DSA-65 signatures
  • On skills and receipts
  • Forward-safe provenance

Why all three, together

Content-addressing proves what a payload is. Post-quantum seals prove who vouched for it. Capability isolation contains what it can do once it runs. With all three, a node can accept code and data from a peer it has never met — because it never has to trust the peer, only the math.

04Signed skills

How a skill crosses the mesh safely

A skill is the unit of capability that moves between nodes. Its lifecycle is built so that no node ever has to trust where a skill came from — only that its seal verifies and its execution is contained.

1 · Sealed at origin

Live
The author signs the skill with a post-quantum (ML-DSA-65) signature. The seal binds the skill's content hash to its provenance.

2 · Gossiped peer-to-peer

Wired
The skill propagates across the mesh by gossip over direct peer links, carrying its provenance with it on every hop.

3 · Verified on ingest

Wired
Before acceptance, verifySkillBlock checks the seal during P2P sync. A skill that fails verification is rejected, not quarantined-and-maybe-run.

4 · Run sandboxed

Wired
Accepted skills execute in the WASI sandbox — empty preopens, no shell, no inherited secrets — and emit a sealed receipt of what they did.

Self-evolution stays inside the box

Self-authored skills are confined to a narrow integer-transform class — sealed and observed like any other. The agent can extend itself, but never outside that class.

Live

How we label every capability

Full status matrix →
Live
Running in production, exercised by tests.
Wired
Built and connected into the daemon; hardening in progress.
Standalone
Built and tested in isolation; live wiring is supervised.
Mock
Scaffold / placeholder — explicitly NOT real yet.
05The thesis

Automate the architecture, not the wrapper

The design principle under all eight layers: a correctly-designed file and dataflow architecture does the work deterministically, cheaply, and auditably. The agent earns its place only where genuine ambiguity lives — not as a wrapper around everything.

Deterministic by default

Wherever the work is well-defined, the architecture handles it directly — no model call, no non-determinism, no per-token cost. Predictable beats clever.

Inference where it counts

The agent is invoked at the points of real ambiguity — and there it routes local-first, paying for the frontier only when the work demands it.

Auditable end to end

Content-addressed inputs, sealed skills, and signed receipts mean every step can be checked after the fact. The system shows its work.

Go deeper

An architecture you can verify.

See the mesh that carries it, the agent that runs on top, or the full honest status of every capability.