Front 01
Transformate
The consultancy. Sells intelligent systems that solve specific business pain — client websites, custom retainers, sprint work.
ARKON
Build, govern, and run your AI workforce.
Arkon is the platform an operator uses to install, govern, and run an AI workforce — without writing code, without an IT department, and without giving up oversight.
The 90-second read
HOFMI installed Arkon to run an AI workforce across three convergent fronts on a seven-host fleet — Transformate (the consultancy), HOFMI (the ministry), and Arkon (the platform itself).
Warden, your governing agent on Claude Opus 4.7, is the sole executive of the fleet. It takes the business load so Brynn is freed for ministry work. Five agents under Warden's hand. A ministry lane runs alongside. Four trainees each operate a personal agent. Every turn writes a row.
Front 02
HOFMI
The ministry. Operates a young AI team in training and runs faith-grounded teaching infrastructure — Mentor, Moodle, Academy.
Front 03
Arkon
The platform itself. ArkonOS, ArkonHelm, the command-center app, and the runtime that governs the fleet you are reading about.
02 A Day on the Fleet
Six moments from one Tuesday.
The atlas is easier to read once you've watched the fleet do a day. Specific over flowery — every moment names an agent and a real outcome.
04:30SAST · cron
Warden writes the Morning Brief.
morning-brief.timer fires. Warden pulls last night's victory briefings, the WAEL summary, pending tasks, and fleet health into a single HTML brief. Lands at arkonhelm.transformateai.com/morning/ before Brynn's coffee.
09:15SAST · approval
Forge ships a Mentz feature.
PR opens against the Mentz repo. Helm catches the agent-run, attaches the PR, and opens an approval gate. Brynn taps Approve on his phone. Forge picks the merge back up.
11:20SAST · delegation
Lumina drafts research, spliced in line.
Warden delegates "summarise the new Anthropic pricing tier." Lumina reads three sources, drafts a brief, posts it to Discord, and writes the result back to the queue. By 11:24 it's spliced into Warden's next reply.
13:00SAST · scouting
Sentinel flags a vendor change.
A Cloudflare Workers API behaviour shifts at upstream. Sentinel notices in its hourly sweep, posts a one-paragraph briefing to the warden-status Discord channel, and pins the source on the wiki.
16:00SAST · gate
Helm catches a budget ceiling.
A worker hits its monthly budget cap. Helm queues the run for review instead of silently killing it. The kill switch is still one tap away — Brynn just sees the gate first.
22:00SAST · quiet
The fleet is quiet.
Warden's session log keeps writing. mission_control Postgres backs up to R2. Tomorrow's Morning Brief is queued for 04:30. Every turn from today wrote a row.
03 The Four Pillars
What Arkon does, in four primitives.
Provision, govern, observe, kill. Every surface in this atlas serves one of these four. The paragraphs below are the canonical v3 framing.
Provision
Pick a role. Type one sentence. Sixty seconds.
Pick a role from the catalog. Type one sentence about what the agent should do. Sixty seconds later your agent is live, drafting its own spec for your review. Under 60 minutes for the first agent; under 5 for subsequent ones. No prompt engineering. No code.
Govern
Every agent ships with boundaries.
Every agent ships with autonomy boundaries, a monthly budget, and approval gates. The CEO agent doesn't move money without sign-off. The Researcher doesn't email outside the tenant. Five gates in the box; check a box to customize; every change audited. Defaults are conservative.
Observe
Every turn writes a row.
Every turn writes a row. Token cost, tool calls, decisions, delegations — queryable from the dashboard or arkon audit. "What did Solomon do between 14:00 and 15:00 yesterday?" — answered in thirty seconds. Drift detector posts a daily summary before your second coffee.
Kill
Five seconds.
Stop a single agent in five seconds. Stop a single tool — "no email sending for 24 hours." Stop an entire tenant on a security incident. Per-scope, reversible, audited, tested. Every closed-beta tenant fires the kill switch once before launch.
04 The AI Workforce
Fourteen agents. Four lanes.
Each agent is a role on a harness on a model on a host. Warden alone delegates inside the governed fleet. Ministry and trainee lanes sit outside that line by design.
Warden-governed Sole executive · 5 agents
delegate flows outward · recursive blocked at MCPWarden ★ governor
Sole executive · delegator · final synthesis
Governs the fleet. Holds UKR, WAEL, and Helm write access — no other agent does. Delegates by name; never to itself.
Exists so Brynn ships through one accountable surface, not nine.
Forge
Dedicated coding agent · Codesmith's successor
Writes code on tightly scoped tasks. Replaced Codesmith on 2026-05-23 — same one-swing rule, new harness, Codex model.
Exists so Warden has a code-focused hand without burning Opus tokens on plumbing.
Lumina
Research · WhatsApp/Telegram · customer copy
Multi-source web research, briefs, and customer-facing copy. Owns Hagin sermon retrieval through ChromaDB on EU-OPEN.
Exists so polished voice and long-form research stay off Warden's main thread.
Sentinel
Ops · scouting intelligence
Watches changelogs, vendor APIs, security incidents, and infrastructure signals. Absorbed the original Scout role on 2026-04-30.
Exists so vendor surprises surface as briefings, not outages.
Dunamis
Fleet dispatcher · routing & synthesis
Routes Brynn → agents, prioritises, and synthesises across replies. Owns no execution; never delegates to itself.
Exists so the fleet has a single intake mouth as agents multiply.
Ministry lane Not Warden-governed · by design
faith-grounded · Brynn-direct · ministry boundary held at MCP layerMentor
HOFMI ministry agent · Brynn-direct only
Faith-grounded teaching, sermon retrieval, daily reflection, ministry-side content drafting. Reads the Hagin corpus.
Exists so the ministry lane stays separate from the business fleet.
Sermon Steward
Steward of Pastor John's messaging & doctrine
Holds the doctrine corpus, drafts on-voice messages, and flags drift from Pastor John's source teaching. Reads the Hagin sermon library.
Exists so HOFMI's teaching voice carries forward consistently as the ministry scales.
Trainee personal agents Hermes harness · 5 trainees
each trainee builds their own · allocated in Arkon · various modelsMiné's Agent
Personal agent · trainee onboarding
Miné's own DFY agent — owned, named, and scoped by the trainee. Provisioned through Arkon's role-pack catalog.
Exists so each trainee learns by running an agent they own, not by sharing Brynn's.
Gian's Agent
Personal agent · trainee onboarding
Gian's own DFY agent — owned, named, and scoped by the trainee. Provisioned through Arkon's role-pack catalog.
Exists so each trainee learns by running an agent they own, not by sharing Brynn's.
Mia's Agent
Personal agent · trainee onboarding
Mia's own DFY agent — owned, named, and scoped by the trainee. Provisioned through Arkon's role-pack catalog.
Exists so each trainee learns by running an agent they own, not by sharing Brynn's.
PJ's Agent
Personal agent · trainee onboarding
PJ's own DFY agent — owned, named, and scoped by the trainee. Provisioned through Arkon's role-pack catalog.
Exists so each trainee learns by running an agent they own, not by sharing Brynn's.
Nikao's Agent
Personal agent · trainee onboarding
Nikao's own DFY agent — owned, named, and scoped by the trainee. Provisioned through Arkon's role-pack catalog.
Exists so each trainee learns by running an agent they own, not by sharing Brynn's.
DFY pattern OpenClaw harness · Bounded delegate MCP only
the OpenClaw template that trainee agents clone fromApollo
Matt's DFY personal agent · co-resident
Matt Van Heerden's personal assistant agent. Co-located on TEAM-1 but isolated from Warden. Template for trainee onboarding.
Exists so the HOFMI AI team has a DFY pattern to clone for new trainees.
site-edit-worker
Bounded MCP delegate · not a chat agent
Patches static client-site HTML element-by-element during site-keeper maintenance jobs. Tokens minted through the bridge.
Exists so client sites get surgical edits without an agent holding a shell.
05 The Backbone
Seven components carry the platform.
The diagram shows how they connect — what Brynn touches, what the agents touch, and where the shared memory sits. Each card below explains one component in plain English, with a real example.
How the components talk to each other
operator surfaces → executive → harnesses → memoryArkonOS
os.arkonhq.com
migrating from aos.arkonhq.com
The chat app where Brynn talks to the fleet.
A website and phone app with one channel per agent — Warden in one channel, Lumina in the next, Dunamis in the next. Think of it as a Slack where every channel is a person, except every person is an AI agent. It also carries task lists, knowledge search, victory briefings, and the ministry-side prayer log.
In real life
Brynn opens ArkonOS on his phone at the airport. He taps the Warden channel: "what shipped last night?". Warden replies in the channel with three bullets and a Helm link. No terminal, no SSH, no laptop.
Under the hood
PWA · desktop + iPhone
JWT-cookie auth
channel-per-agent
Whisper voice planned (WI-337)
Arkon
app.arkonhq.com · operator command centerThe console where you install, govern, and stop the workforce.
ArkonOS is for talking to agents. Arkon is for managing them — spinning up new agents from a catalog, setting their budgets and boundaries, watching costs, and hitting the kill switch. This is where the Provision pillar lives.
In real life
Brynn opens app.arkonhq.com on his laptop, taps "Provision new agent," picks "Researcher" from the role-pack catalog, types one sentence — "summarise the daily Anthropic changelog at 06:00 SAST." Sixty seconds later the agent is live, with conservative budget defaults. No terminal was opened.
Under the hood
role-pack catalog
governance + cost ceilings
kill-switch surface
multi-tenant via tenant_slug
Warden Bridge
HOFMI-TEAM-1 · long-running executive runtimeWhere Warden's brain lives, full-time.
Warden can't be a fresh thought every time you open a chat. The Bridge is a process that runs around the clock, keeping Warden's memory, identity, and authority to delegate active 24/7. When you message Warden in ArkonOS, you are reaching the Bridge — and through it, the same Warden every time.
In real life
11:00 — Brynn asks Warden to delegate research to Lumina. The Bridge writes the job to a queue; Lumina picks it up. 14:00 — Brynn opens ArkonOS again. The Bridge already has Lumina's result waiting, spliced cleanly into Warden's next reply. No re-prompting, no re-context.
Under the hood
Anthropic Agent SDK
Opus 4.7
holds UKR · WAEL · Helm write authority
mints GitHub App tokens
ArkonHelm
helm.arkonhq.com
migrating from arkonhelm.transformateai.com
The Linear-style board for everything the fleet is doing.
Every ticket, every work item, every approval gate across HOFMI, Transformate, and Brynn-personal lanes lives here. It's where Brynn approves, rejects, or releases work the fleet has produced — and where the fleet looks before it starts something new.
In real life
Forge ships a pull request for a Mentz feature. Helm catches the agent-run, attaches the PR, opens an approval gate, and pings Brynn on his phone. He taps Approve over coffee. The fleet picks the merge back up. No spreadsheet, no hand-coded ticketing.
Under the hood
Issue · WorkItem · PlanLog · AgentRun
three tenants
live state lags reality — repo is the cross-check
Connects to
Hermes Harness
Nous Hermes Agent · the worker shell for the fleet
The shell that wraps a model and gives it hands.
A raw model like GPT-5.5 can talk, but it can't open a file, send a Telegram, or query a database. A harness is the wrapper that gives the model those abilities — web search, file edit, message send, database query. Hermes is the harness six of our agents run on: Forge, Lumina, Sentinel, Dunamis, Sermon Steward, and every trainee's personal agent.
In real life
Warden delegates "research the new Anthropic pricing tier" to Lumina. Lumina is a GPT-5.5 model inside a Hermes harness. The harness gives that model the web-search tool, the file-write tool, and the report-back tool. The model becomes an actual worker — three sources read, a brief drafted, a Discord message posted — and the result lands back in Warden's reply.
Under the hood
Nous Hermes Agent
model-agnostic (GPT-5.5 today, Codex GPT-5.5 for Forge)
runs on HOFMI-EU-OPEN and Dell G5
systemd-managed
OpenClaw Harness
v2026.4.2 · the DFY personal-agent shell
A different harness, purpose-built for personal agents.
OpenClaw is a second harness — same job (wrap a model, give it hands), different shape. It's built for "done-for-you" personal agents that trainees own end-to-end. Matt's Apollo runs on OpenClaw today; every HOFMI trainee will use OpenClaw to stand up their own personal agent.
In real life
A new HOFMI trainee — Reinardt — opens Arkon and picks the "personal assistant" role-pack. Sixty seconds later, an OpenClaw harness spins up on his account, wraps his chosen model, and he has his own Apollo. He names it, scopes it, and is shipping by lunchtime. The shell handled the plumbing.
Under the hood
OpenClaw v2026.4.2
2-tier heartbeat economics (free idle · paid on activity)
co-resident on HOFMI-TEAM-1 today
Connects to
UKR
Unified Knowledge Repository · the fleet's long-term memory
The one place agents don't forget.
Agents forget. UKR is the one place that doesn't. Every decision, every entity, every fact Warden needs to remember next Monday lives here. Other agents read from UKR through Warden; Warden alone writes to it — so the fleet's canonical memory has a single accountable author.
In real life
Three weeks ago Brynn decided "site-edit-worker is the only delegate allowed to touch client HTML." Today Warden picks up a maintenance ticket. Instead of re-reasoning the decision from scratch, it queries UKR, finds the pinned rule, and routes the work correctly the first time — the same way it would have three weeks ago.
Under the hood
six layers (docs · decisions · entities · facts · events · synthesis)
five verbs (pin · query · supersede · unpin · upsert)
mission_control Postgres on brynnopenclaw
06 UKR — the memory
The one place the fleet doesn't forget.
UKR earned its own tier. Every other component in the Backbone is replaceable. This one is the spine — the canonical record the fleet trusts when memory and reality disagree.
Unified Knowledge Repository · the spine
UKR
Six layers. Five verbs. One writer.
A self-hosted knowledge substrate that consolidates everything the fleet has ever decided. Warden alone writes; the rest of the fleet reads through Warden. Anchored in mission_control Postgres on brynnopenclaw.
Authoritative source
Raw blobs + metadata catalog
Authority rule
If derived disagrees, canonical wins.
Heartbeat
Daily 22:00 · MWF lint 22:30 SAST
The grammar of UKR
six layers · five verbs6 layers — what UKR remembers
01
docs
Briefs, plans, deliverables — the things you wrote down.
02
decisions
Pinned calls Warden made and why. Supersedable.
03
entities
People, clients, hosts, agents — the proper nouns of the fleet.
04
facts
Atomic truths attached to entities. Datable. Citable.
05
events
What happened, when, by whom. The fleet's timeline.
06
synthesis
Warden's own conclusions across the lower layers. Rebuildable.
5 verbs — how Warden touches UKR
ukr_pin
Mark this as canonical going forward.
ukr_query
Read what UKR already knows.
ukr_supersede
Retire an entry; point it at the newer truth.
ukr_unpin
Demote without deleting. Tombstone stays.
ukr_upsert
Write the row or update it in place.
Three ways in
access paths · trust level
Tailscale local
full
Claude Code · Desktop MCPOpenClaw gateway
brokered
WhatsApp · Telegram · WebChatManual bridge
manual
Claude.ai · paste & saveThe self-improving loop
feedback · diagnose · adjust
Bad retrievals get logged. Warden diagnoses them on the next lint pass and adjusts chunking, supersession, or secret patterns.
Daily 22:00 · MWF 22:30 · Warden runs the lint
Authority model — what wins when memory disagrees
canonical · derived · ephemeral
Canonical
The source of truth
immutable · versioned · backed up
raw/originals
raw/normalized
catalog metadata
tacit/ operating truth
What you back up. What you audit. What you trust when the rest disagrees.
Derived
Rebuildable views
rebuilt from canonical on demand
vector index (Qdrant)
wiki summaries
retrieval caches
Helpful, not authoritative. If a derived view drifts, blow it away and rebuild from canonical.
Ephemeral
Agent working state
comes and goes per session
OpenClaw Victory Brain
Claude Code auto-memory
Claude.ai session
Live thinking. Useful in the moment. Synced back to canonical only when it earns it.
If any derived layer disagrees with raw + catalog, canonical wins.
The ingest forge — how something becomes canonical
six stages · failed extractions drop to quarantine · secrets redacted before embedding
Under the hood
Daily ingest 22:00 SAST · Python, no LLM calls
MWF lint 22:30 · Warden reviews quarantine, freshness, tacit signals
Claims older than 30 days without revalidation get marked stale
Auto-supersession only for OpenClaw MEMORY.md — everything else flagged for human review
07 The Map
Seven hosts, three continents, one Tailnet.
Geographic layout. Each host node lists the agents and services that live there. Drag to pan, scroll or pinch to zoom. Lines show data flows.
Healthy
3 hosts · green status dot
Watch
disk pressure or auth pending
Down
1 host · NA edge unreachable
Governed flow
Warden Bridge → data spine
08 Net Effect
What the fleet actually means for HOFMI.
The atlas explains the parts. This is what they add up to. Four outcomes leadership should hold onto.
Outcome 01
Brynn freed for ministry work.
Warden carries the business load through one accountable surface. Ministry stays first.
Outcome 02
Ops resilience without an IT team.
Seven hosts on Tailscale, daily backups to R2, Helm tracks every approval gate. One operator runs it.
Outcome 03
Trainees building real systems.
Five HOFMI trainees provisioning their own personal agents through Arkon. They learn by running an agent they own.
Outcome 04
Five-second kill switch on any agent.
Per-scope, reversible, audited, tested. Governance isn't a doc — it's a button. Fired before every closed-beta launch.
Build velocity — the last four weeks
specific over flowery2026-04-30
Sentinel absorbs Scout role
2026-05-06
Mentor goes live on Dell G5
2026-05-21
Dunamis ships on EU-OPEN
2026-05-23
Forge replaces Codesmith
next
Sermon Steward build
next
5 trainee personal agents