Three flows on the board Mart → Fred · 18 Aug 2026
PRINCIPALS Owner Operator Employee Contractor one key each, not a guest seat GAR AGREEMENT, WALLET SIGNED AGENTIC OS SOP / skills coupled to an agent manifest at connect an AgentConnection binds vault, scope, agent and the manifest it was connected with READS AND WRITES UNDER THE GRANT VAULT memory cubbies object store SCOPES INSIDE ONE VAULT, CONTEXT PER ITEM cubbies are per agent, private by default publish mech. AGENT CATALOG 1st party 2nd party 3rd party the card is public. the manifest, and the cubbies it declares, resolve at connect NOTHING RUNS UNTIL A PERSON SIGNS IT INTO A SCOPE agent importer READING IT a wallet signed agreement access exercised under it an agent or a document moving NO ARROW CROSSES A SCOPE WITHOUT A GRANT BEHIND IT THE VAULT EVENT LOG IS BOTH THE AUDIT TRAIL AND THE RECOVERY MECHANISM: A JOB THAT LOSES STATE REBUILDS BY REPLAYING IT.
The board, redrawn

Three flows, walked onto the board

Sales, corporate housekeeping, our own matter. Three of the things we actually run, not three legal workflows: the same board has to carry all of them or it is not an operating model. Each row is one step: how it works today, then the same step on the board, as what brings the data in, who runs it and from which tier, where it lands. Nothing is built. If a step has no Today, it is invented. If Today and the board read the same, it is not worth building.

Where it lands is the memory bank's own model: a scope is the permission boundary, a context is what accumulates inside it, a cubby belongs to one agent.

Flow one

Internal sales

TodayOn the board
StepHow it works nowBrings it inWho runs it, and the agentWhere it lands
1A lead appearsCampaigns in the outreach tool plus inbound from the site. One workspace carries several audiences at onceCampaign lists, inbound form fills, connection repliesWhoever owns that channel 1st party intakescope sales, context = the account
2Outreach and repliesPulled from the tool's API on a five minute cron, because the push webhook stopped when the inbox moved. Only the latest message reaches the CRMSame pull on a timer, but the whole thread, both directionsThe seller 1st party connectorevents into sales on that context
3A call happensRecorded and transcribed. Reaches no recordRecorder plus notesThe seller 2nd party recordersame context, one event per call
4Where does this standStage sits in the CRM while the decisive human labels are set in a separate inbox and never arriveReads the thread and the calls, proposes stage, next step, objectionAgent for the seller, a person confirms 1st partythe pipeline agent's cubby, proposed until marked
5What did we promise themNowhere. It exists only inside threadsEach commitment with the sentence it came fromAgent for the seller 1st partysame agent, second cubby
6Pipeline across accountsA dashboard reading the CRM live, which is the surface the team reports offRolls up every account contextAgent for the owner 1st partya roll-up cubby, or the Concierge if more than one agent contributes
7What we learnedRunbooks in a repo and a wiki pageThe objections, and the replies that workedOwner keeps or drops. No agentscope firm
Worked example: a coach inquiry on manykind.ai. Today the hero form takes an email and nothing else and posts it to /api/waitlist, which writes one CRM row: name set to the email address, pipeline ICP coach, vertical cross-vertical because the form never asks, stage New, notes holding the site variant and any UTM. No owner, no dedupe on repeat submits, and nothing schedules a follow-up. On the board that same submit opens the account context at step 1; the reply thread and the intro call attach to it at 2 and 3; step 4 proposes the stage from the thread rather than leaving it at New forever; and if we answer the inquiry with a promise, step 5 holds it with the sentence it was made in. The delta is not the capture, we already capture. It is that the row currently has nowhere to grow.
Flow two

Corporate housekeeping

TodayOn the board
StepHow it works nowBrings it inWho runs it, and the agentWhere it lands
1List the entities and what each owesRows on the lanes sheet, grouped by lane, each pointing at a drive folderThe register extract and the statutesOwner. No agentscope corporate, context = the entity. Ownership and cash as separate links
2Bring in formation and governance docsEight labelled subfolders in the drive packageRegister extract, statutes, founding minutes, signing authoritiesOperator 1st party ingestthe bucket, referenced from the entity context
3Catch the incoming noticesA morning sweep reads mail and chat and reports what arrived. Some invoices only ever reach a third person's inboxRegistered agent mail, portals, and the inboxes that actually receive themOperator 1st party connectorevents into corporate on that entity context
4Turn notices into datesA due date column, plus a separate tracker holding have, missing and open questionsThe deadline, what it demands, and what would close itAgent for the operator 1st partythe calendar agent's cubby, one row per obligation
5Do the recurring filingSignatures chased over mail, with who may sign rediscovered each timeFills the template. Checks who may sign before asking anyoneOperator prepares, an authorised signatory signs 2nd party, per jurisdictionan event, so the filing and the signature sit in the log
6Set up something newNo checklist object. Each setup starts from the last one somebody remembersThe checklist for that jurisdictionOperator, owner signs 2nd party formation agentthe bucket, referenced from a new entity context
7What we learnedA checked column on the sheet, a date stamped by hand to say the row was verified against its sourceThe checklist per jurisdictionOwner keeps or drops. No agentscope firm. The checked column retires: the event carries its own provenance
Worked example: a new corporate matter for the DAO. The extraordinary general assembly notice goes out this week. Today that lives as a lane row, a due date and a mail thread. On the board: step 3 catches the notice as an event on the entity context, including the copies that only ever reach an adviser's inbox. Step 4 turns it into obligations that carry what would close each one, so the thirty day notice period, the assembly itself, the resolutions on signing authority and the register filing that follows are four dated rows rather than one. Step 5 checks the authorised signatories before anyone is asked, which matters here because signature is joint by two and only some of the named people can give it. Step 2 files the register extract and the minutes that come out of it against the entity, not against whoever received them.
Flow three

Our own matter

TodayOn the board
StepHow it works nowBrings it inWho runs it, and the agentWhere it lands
1Open the matter, name who is on itThe list of what is pending came from outside counsel as an attachment. We worked from a smaller number than the real one for monthsCounsel's own list of what is pendingLead counsel. No agentone scope per matter, one for the separate track. Index in firm
2Find every communication on a topicSearches run by hand across mail and drive, one spelling at a timeSearch from a term list carrying every spelling of a nameParalegal, for lead counsel 1st party sweepevents into the matter scope, context = the sweep
3Bring in the documentsA corpus on the desktop, working notes in one tree, source PDFs in downloadsDrop, folder, scan, and open the attachmentsParalegal 1st party ingestthe DDC bucket behind the vault. Matter scopes reference it
4Bring in outside reportsSit in shared drive folders, read by handWhole and unedited, from wherever they live nowLead counsel 2nd party report readersame bucket, one object per report, never rewritten
5The eval scanClaim and evidence work done ad hoc, rebuilt each time somebody asksWhat we assert, what supports it, what is missingAgent for lead counsel 1st partythe claim agent's cubby in that matter scope
6Write it so it holdsLong documents where a statement and its support can drift apartEvery statement carries its quote and where the quote sitsLead counsel approves 1st partysame agent, findings cubby, plus an event
7Hand a copy to outside counselAttachments mailed out, with no way to withdraw themA scoped, time limited copy, not the matterLead counsel signs. They connect their own 3rd party agentits own scope, so their agreement covers nothing else
8What we learnedThe search patterns live in one person's headThe term lists and the intake checklistLead counsel keeps or drops. No agentscope firm
Worked example: a new finding in our own matter. A sweep at step 2 runs the term list including the spelling variants and returns a message whose attachment nobody had opened. Step 3 puts the attachment in the bucket once, addressed by content. Step 5 attaches it to the assertion it bears on, and because the same document touches more than one of the pending matters it is referenced from each rather than copied into each. Step 6 will not write the statement unless it carries the quote and where the quote sits. If it goes to outside counsel, step 7 makes it a scoped copy in its own scope with a time limit, instead of an attachment on a mail we cannot take back.
Two things the Today column settles. The tracker deliberately keeps the matter off it, which is exactly why a matter has to be its own scope and not a lane on a shared board. And all three flows fail today in the same place, capture: the reply, the notice sent to somebody else's inbox, and the exhibit inside an unopened attachment all exist, and none of them reach a record without a person moving them.
Where it starts, how it is read back

The second and third exercise

FlowStarts atRead back by
SalesThe channel that produced the leadAsking the pipeline agent inside sales. It cites the thread or call the claim came from
CorporateThe register extractAsking inside corporate for one entity context. The calendar answers what is owed and what closed it
MatterCounsel's list, then the sweep, then the documentsAsking inside the matter scope. The answer is a finding carrying its quote, so the citation is the read path

A person reads through an agent connected to that scope, never by browsing storage. So the read path and the permission are one object and there is no second access model to keep in sync.

Mart to Fred · 18 Aug 2026 · nothing built. Grounded in the memory bank: 04-cef/user-vault/vault.md verified 27 Jul 2026 · user-vault/concierge/permissions.md, ADR-029 and ADR-005 · agent-marketplace/marketplace.md verified 15 Jul 2026, ADR-038 · ADR-015 bootstrap via replay · 05-product/enterprise-experience.md, scaffolding only, verified 14 May 2026.