Agent Base module review / evidence pass 05 / Library V14 / 2026-07-30

The sauce inside Agent Base.

Direct source review found a real family of reusable modules—not one generic framework. The Great Library should give each coherent capability a stable identity, while GitHub repositories follow dependency and release boundaries. A Library Work and a GitHub repo are deliberately not the same thing.

Current state: Agent Runtime is now a verified experimental public release. All thirteen estate repositories are released; none remains a linked placeholder or staging-only home.

The answer in one view

22named public module candidates mapped below
7runtime-family Works that should initially share one repo
10public agent repo homes, plus the Great Library front door
1private agent R&D incubator instead of another warehouse

Recommended estate: the Great Library plus ten intentional public agent repositories and one private agent-lab incubator—not twenty-two repositories copied from twenty-two folders. The Library can still expose all twenty-two modules independently and later move any Work to its own repo without changing its identity.

How the current Library projection fits together

Great Library
├── Agents
│   ├── Operating stack
│   │   ├── SISO Project OS              project-local agent operating contract
│   │   ├── SISO Agent Runtime           installed coding-agent application
│   │   │   ├── Agent Control Core       routing, execution, goals, tasks, safety
│   │   │   ├── Session Lifecycle        corrections, lessons, checkpoints, restore
│   │   │   ├── Context Manager          budgets, memory, retained evidence, compaction
│   │   │   ├── Status & Evidence        operator visibility and commands
│   │   │   ├── Agent TUI Kit            terminal components, adapters, runtime UI
│   │   │   └── Profile Composer         shared instructions projected per tool
│   │   ├── Herdr                        workspace in which the stack is operated
│   │   └── Agent Zero                   user-facing coordinator
│   │       ├── Boot & Rehydration       wakes from shared state
│   │       └── Voice Gateway            staged voice-to-agent interface
│   ├── Capabilities
│   │   ├── Skills Catalog               atomic repeatable capabilities
│   │   └── Agent Playbook               compositions of skills for scenarios
│   ├── Shared intelligence
│   │   ├── Agent Brain Service          shared state, memory, tasks, fleet, timeline
│   │   └── Session Intelligence         learns from explicit agent sessions
│   └── Assurance & integrations
│       ├── Atlas                        read-only architecture auditor
│       ├── Context Firewall             shadow measurement and promotion rail
│       └── Headroom Adapter             opt-in lossless context sidecar
│
├── Research
│   ├── Foundry                          source discovery, evaluation and preservation
│   │   └── Research Topic Registry      stable research buckets and artifact links
│   └── Evidence Engines
│       ├── Knowledge Engine             sources → grounded knowledge and taxonomy
│       ├── Principles Engine            evidence → canonical engineering guidance
│       └── Idea Engine                  evidence → ranked improvement backlog
│
└── Source records
    └── Agent Base Source Warehouse      retired extraction source, not architecture

This is an ownership and dependency map, not a permanent folder taxonomy. Relationships live in registry data, so a module can move between repositories or graduate from package to repo without breaking its Library address.

Modules that should become Library Works

ModuleOutcome found in sourceLibrary actionRepository verdict
SISO Agent Runtime
install.sh · bin · apps/siso-tui
The installed and launched coding-agent product shell.Released WorkOne clean Runtime repo now publishes the provider-neutral shell and six contracts. Full Pi routing and raw TUI parity remain explicit migration work.
Agent Control Core
extensions/siso-agent-router
Routing, spawning, workflows, tasks, goals, registries, mailbox, supervision, scorecards, review, worktrees, and write-scope safety.Runtime WorkPackage inside the runtime repo. First split its eighty files into internal domains with explicit contracts; do not create a repo per filename group.
Session Lifecycle
extensions/siso-lifecycle
Correction capture, lesson draining, checkpoints, and session restore discovery.Runtime WorkNamed runtime package. Graduate only if another host adopts its contract independently.
Context Manager
extensions/siso-context-manager
Token budgets, deterministic distillation, retained goals and evidence, child/mailbox state, memory, and compact prompts.Runtime WorkNamed runtime package with fixture-tested compact-packet contract.
Status & Evidence Surface
extensions/siso-status
Status, widgets, notifications, commands, tools, and custom operator message rendering.Runtime WorkPackage inside runtime; presentation depends on the host lifecycle.
Agent TUI Kit
packages/siso-tui
Renderer-neutral terminal contracts, components, adapters, theme, runtime behavior, and the OpenTUI shell.Runtime WorkPackage in runtime monorepo initially. It can later become its own repo if non-runtime tools adopt it.
Agent Profile Composer
brain
One shared behavioral core composed into Claude- and Codex-specific generated instruction profiles.Runtime WorkPackage in runtime first; a small independent repo is justified only when several products consume versioned profiles.
SISO Project OS
siso-project-os
Project-local schemas, CLI, agent operating rules, and lifecycle contracts.Already a WorkAlready an independent clean repo. Link it; stop physically nesting it in Agent Base.
SISO Agent Playbook
siso-agent-playbook
Installable fleet operating package containing playbooks, prompts, skills, tools, telemetry, and evidence.ReleasedVerified public Lordsisodia repo preserves its warehouse modifications and independent history.
Skills Catalog
templates/profile/skills
Atomic repeatable agent capabilities currently projected into user skill roots by the runtime installer.ReleasedThe public hub validates 28 Skills and supports independent promotion when installation, forking, release, or ownership becomes real.
SISO Foundry
foundry · research/repo-catalog
Source-mining and reusable-source knowledge product with pipeline, databases, method, and read-only interface.Released in ResearchThe portable code plane is public; large corpora and databases remain behind typed data locators.
Agent Brain Service
extensions/braind
Authoritative shared state service: memory, tasks, timeline, fleet, cost, notifications, questions, delegation, tiered auth, client outbox, and health checks.ReleasedPublic configurable service excludes personal topology and runtime state; install, auth, replay, merge, and state-preserving uninstall pass.
Session Intelligence
extensions/session-mirror
Parses Claude/Codex sessions; mines evidence quotes, goals, failures, intentions and wins; clusters recurrence; scores importance; renders recall; proposes gated improvements.Released in AgentsPublic provider-neutral core requires explicit inputs, redacts before persistence, stores no raw transcript, and passes fixture privacy checks.
Knowledge Engine
extensions/knowledge-engine
Long-form source ingestion into traceable value items and an emergent taxonomy using a distill-once, route-many pipeline.Released in ResearchReusable grounding and value-item contracts live in siso-evidence-engines; generated knowledge and private corpora stay external.
Principles Engine
extensions/codex-engine
Credibility-tiered evidence gates, proposals, ratings, and canonical engineering principles.Released in ResearchPublic outcome name avoids product-name confusion; source tiers, corroboration, jury votes, and deterministic scores are retained.
Idea Engine
extensions/idea-engine
Grounded, novel, right-layer, non-gameable improvement ideas moving through proposed, rated, queued, applied, or rejected states.Released in ResearchShares evidence primitives with its siblings; autonomous target mutation and machine scheduling are excluded.
Agent Zero Boot
extensions/agent-zero
Rehydrates Agent Zero from fleet, task, memory, timeline, question, and division state before interaction.Agent Zero WorkMove into the existing Agent Zero source boundary. It is a module of that product, not another repository.
Voice Gateway
extensions/agent-zero-voice · extensions/voice
A safe typed plan/receipt/replay contract plus an earlier browser-speech-to-Herdr prototype.ExperimentalReconcile under Agent Zero. Preserve idempotency, risk, replay, and approval gates; create a standalone repo only if the interface becomes host-agnostic.
Research Topic Registry
extensions/research-topics
Creates or matches stable research buckets, links artifacts with provenance, and merges without deleting history.Foundry WorkPackage inside Foundry unless independent consumers prove a separate lifecycle.
Atlas
atlas
Read-only persistent architecture auditor that triangulates three critics and files tickets only on agreement.Verify + extractOwn repo after one live-use and dependency verification pass. Its outcome and safety boundary are independently coherent.
Context Firewall
integrations/context-firewall
Shadow-only loopback measurement rail with numeric/private telemetry and an explicit transform promotion gate.Experimental WorkPackage in siso-agent-integrations; no own repo or core-runtime status yet.
Headroom Adapter
integrations/headroom
Version-pinned, opt-in, lossless sidecar harness with Oracle contracts, canaries, and rollback.Experimental WorkPackage beside Context Firewall. Keep the current non-promotion verdict visible until the cache gate is measurable.

The repository plan

great-library-of-sisoStable identities, relationships, evidence, releases, human pages, and source inventories. Already live.
siso-agent-runtimeRuntime app plus control core, lifecycle, context, status, TUI, and profile packages.
siso-project-osAlready independent. Link it rather than nest it.
siso-agent-zeroCoordination capability plus boot/rehydration and staged voice-interface packages.
siso-agent-playbookReleased operating package with preserved history and reversible installation.
siso-skills-hubReleased capability catalog and distribution. Mature Skills may graduate to their own repos.
siso-foundryReleased Research code plane plus research-topic registry; datasets remain external.
siso-agent-brainReleased configurable shared state service, client, schema, migrations, auth, and doctor.
siso-session-intelligenceReleased privacy-reduced transcript adapters, insights, scoring, and recall.
siso-evidence-enginesReleased Research family for knowledge, principles, and ideas sharing evidence primitives.
siso-agent-integrationsReleased experimental adapters with explicit promotion verdicts.

Later, only if proven: siso-atlas, a standalone voice gateway, independently forkable skill repositories, and independently released evidence engines. Stable Library IDs mean those later splits do not break links.

Where the current Agent Base material goes

Current materialLong-term ownerWhy
Installer, CLI, loaded extensions, Pi/OpenTUI appsiso-agent-runtimeOne installed application with one release lifecycle.
siso-project-ossiso-project-osAlready an independent project operating contract.
siso-agent-playbooksiso-agent-playbookAlready an independently installable fleet operating package.
templates/profile/skillssiso-skillsCapabilities need identity and releases independent of the runtime application.
Agent Zero boot and voice codesiso-agent-zeroThey extend the user-facing coordinating agent rather than the generic runtime.
Foundry and research-topic registrysiso-foundryOne source-discovery and research-catalog outcome; large datasets stay external.
braindsiso-agent-brainA persistent shared-state service with its own API, client, schema and operational lifecycle.
session-mirrorsiso-session-intelligenceA distinct privacy-sensitive learning pipeline over agent transcripts.
Knowledge, coding-principles and idea enginessiso-evidence-enginesThree independent Works sharing evidence, scoring, provenance and promotion primitives.
Context Firewall and Headroom adaptersiso-agent-integrationsReusable experiments with explicit safety and promotion contracts.
siso-agentlabs, Web Chat and unfinished harness/interface spikesprivate siso-agent-labIncubation and comparison material; successful modules graduate outward, failed experiments remain traceable or enter the vault.
SISO Internal Lab / LifeLock and internal operations applicationSISO_Internal_Lab, unchangedIt owns internal products and operations, not reusable agent infrastructure or an agent R&D attic.

Promotion flow: private siso-agent-lab → proven public package or Work → its owning public repo → indexed by the Great Library. The private lab is temporary incubation, never the canonical home of a released capability.

What must not become public module repos

Current materialCorrect treatmentReason
apps/siso-os cmux fork/WIPExternal ledgerPreserve the upstream fork, SISO branch, and dirty patch separately; it is not Agent Runtime source and is marked superseded by Herdr.
packages/design-tokensRoute to shared UIIt has cross-product design ownership, not agent-system ownership.
office · runtime · data · eval outputPrivate/data storesDatabases, telemetry, generated evidence, and machine state are data products or private state, not code modules.
archive · imports · upstream clones · corporaVault or manifestThe Library should index provenance and locators without putting terabytes or unreviewed third-party source into application repos.
Root scripts and 208 smoke commandsDistribute to ownersA test belongs with the module whose public contract it proves.

Public extraction gates

Security gate: direct review found an embedded provider credential in the warehouse Session Intelligence configuration. The public repository was clean-room implemented and contains neither that configuration nor its Git history. The original provider credential still requires external revocation and rotation.

  1. Preserve: record dirty files, nested repository heads, uncommitted patches, and sole-copy material.
  2. Describe: give the module a stable Library Work ID, outcome, owner, public contract, dependency list, data boundary, and lifecycle status.
  3. Sanitize: remove credentials, personal paths, machine names, private hosts, private datasets, session content, and generated runtime state; rotate anything exposed.
  4. Bridge: make the current Agent Base import or install the new package before moving the source of truth.
  5. Prove: move the module's fixtures, tests, smoke checks, license, and release evidence with it.
  6. Move: publish one coherent module family at a time; update the Library source locator without changing the Work identity.

Extraction status after V14

  1. Metadata first: register the module identities and relationships from this map; no risky source moves are required.
  2. Stop the leak: rotate the exposed credential and replace the Agent Base whole-root installer copy with an allowlisted runtime release payload.
  3. Connect what already exists: register Project OS and Agent Playbook by source locator, preserving Playbook's local modifications.
  4. Separate incubation: preserve Agent Labs, Web Chat, and unfinished spikes in a private siso-agent-lab; do not move them into SISO_Internal_Lab.
  5. Completed public boundaries: Agent Zero, Skills, Foundry, Agent Brain, Session Intelligence, Evidence Engines, Agent Integrations, and Agent Playbook now have verified source releases.
  6. Runtime foundation complete: lifecycle, context, status, control, TUI event, and profile contracts now ship inside Agent Runtime; split repositories only when independent adoption appears.
  7. Skill boundary pass complete: all 28 current entries now have provisional evidence-backed destinations; none is promoted to a repository by folder reflex.

Evidence and limits

The verdicts above come from direct reads of module entrypoints, type contracts, READMEs, architecture documents, migrations, pipeline stages, safety gates, package manifests, and nested Git state. Semantic search through the registered project service was attempted but did not complete in a bounded time, so targeted source reads were used as the required fallback.

The source inventory remains partial: Runtime parity beyond the clean foundation, Atlas current-use verification, Agent Labs and Web Chat supersession comparisons, and individual Skill promotion evidence still require direct follow-up. No files were moved or edited inside the dirty Agent Base warehouse.

Repository decomposition · Skill repository map · SISO Agent Stack model · Open Agents