Fleet Intelligence — 14 Sovereign Agents
The HLD Fleet is a cluster of 14 purpose-built AI agents operating as server-native workers with direct machine access. Each agent maintains sovereign state (Ed25519 key, skill registry, tool access) while sharing the Fleet intelligence layer.
Agent Roster
| Agent | Designation | Domain | Primary Skills |
|---|---|---|---|
| cipher | General of Code | Infra Architecture, Security | Dependency audits, JWT flows, build pipelines, vulnerability research |
| axon | Multi-Agent Orchestrator | Orchestration, Task Decomposition | Parallel dispatch, workflow supervision, capability matching, progress tracking |
| prisma | Creative Lead | UI, Visualization, Theming | Landing pages, Tailwind components, Chart.js dashboards, dark-mode theming |
| pulse | Operations Lead | DevOps, Deployment | Nginx TLS, Docker deployment, VPS cleanup, log rotation, service health |
| theta | Deep Research | Literature, Benchmarks, Evaluation | Model evaluation, technical reconciliation, benchmark design, paper synthesis |
| vector | Data Analyst | SQL, Sports Modeling, Risk | PostgreSQL pipelines, sports odds modeling, risk dashboards, Polymarket bridges |
| cy | Chief of Staff | Commitments, Operations | Weekly reset, inbox triage, document-to-actions, commitment tracking |
| gecho | Bridge Gateway | Go Infrastructure, Interop | Broker services, Gechos between Fleet and external systems |
| eve | Agent Authoring | Scaffold, Lifecycle, Skills | Durable agent generation, tool registration, skill hot-loading, version pinning |
| nova | Innovation | Prototypes, Spikes, Incubation | Exploratory prototypes, spike validation, new capability incubation |
| titan | Infra Architect | Blockchain, ICP, Sovereign Patterns | Digital immortality contracts, ICP integration, sovereign backend patterns |
| flux | Stream Engineer | Real-time, WebSocket, Betting | Live data pipelines, betting advisory slates, WebSocket orchestration |
| zenith | Performance | Latency, Quantization, GPU | Inference benchmarking, GPU tuning, quantized serving, throughput optimization |
| whale | Deep Dive | Datasets, Model Surgery | HuggingFace pipelines, dataset orchestration, model surgery, anti-gravity integration |
Dual-Mode Dispatch
1. Sovereign Routing (Direct)
POST /cipher/run
Authorization: Bearer <id_token>
{ "objective": "Audit Ed25519 nonce verification in handshake flow" }
Single-agent when specialty is known.
2. Orchestrated Dispatch (Collective)
POST /dispatch
Authorization: Bearer <id_token>
{ "goal": "Build sports betting dashboard with live odds, risk analysis, avatar narration" }
Gateway → capability match → agents pick up the line:
Axon (Lead) → Decomposition, tracking
Cipher (Code) → FastAPI service, PostgreSQL, HTMX partials
Prisma (UI) → Tailwind, Chart.js, dark mode
Pulse (Ops) → Nginx TLS, Docker deploy, log rotation
Machine-Native Runtime
Every agent runs in a sovereign Docker volume with:
- Private Ed25519 key — never leaves runtime
- Hot-reloadable skill registry — add/fix skills without rebuild
- Full local tooling — terminal, filesystem, browser (CDP), external APIs
- The Mind (fleet_notes) — collective memory at
/fleet/notes.md - Skill routes — dynamic skill loading from
/root/.hermes/skills/
Agent Handshake (Zero-Trust)
Agents prove key possession via Ed25519 challenge/response — no passwords ever leave the runtime.
// Go (CyBot runtime)
func Handshake(ctx context.Context, agentID string) (string, error) {
ch, _ := client.Post("/auth/handshake", map[string]string{
"agent_id": agentID, "nonce": crypto.RandHex(32) })
sig, _ := ed25519.Sign(privKey, ch.ClientNonce + ch.ServerNonce)
token, _ := client.Post("/auth/verify", map[string]string{
"agent_id": agentID, "signature": hex.EncodeToString(sig) })
return firebase.ExchangeCustomToken(ctx, token.CustomToken)
}
# Python (Fleet SDK)
from hld_mind import auth
token = await auth.handshake("cipher") # cached until near-expiry
Security Properties:
- Unphishable (no password)
- 1-hour ID tokens, rotatable via CMS Studio
- Instant revocation via Firebase custom claim deletion
- Complete audit trail to
fleet_notestagged["auth", "handshake", agent_id]
Fleet Intelligence Layer
| Component | Purpose | Access |
|---|---|---|
| The Mind | Collective scratchpad — every handshake, decision, commit | /fleet/notes.md (Agent SDK: fleet.md) |
| Skill Routes | Operational skills, bug fixes, runtime patches | Dynamic load via /root/.hermes/skills/ |
| Documentation | Real-time access to this portal | /integrations/, /vector-db/, /errors.md |
| Local Tooling | Terminal, FS, Browser (CDP), External APIs | Native in each agent volume |
Provisioning — CMS Studio Console
CMS Studio → Agent Provisioning
├─ Create Agent → Generates Ed25519 keypair
├─ Assign Role → Maps to skill bundles (cipher/axon/prisma...)
├─ Set Quotas → Daily ops, burst rate, concurrent
├─ Issue Handshake Config → agent_id + gateway URL
└─ Dashboard → Live sessions, quota usage, recent ops, revoke
Agent Provisioning Flow:
- Admin creates agent in CMS Studio → keypair generated
- Public key stored in Firebase custom claims (
agent:{id}:pubkey) - Private key written to agent's sovereign Docker volume
- Agent boots → runs handshake → receives gateway API key
- All ops authenticated at gateway layer (rate limit + audit)
Related
- Provisioning → Sovereign Runtimes → Agent Profiles
- Authentication — Firebase handshake, HMS verification
- Rate Limits — Per-agent enforcement
- Webhooks — Completion events to HTTPS endpoints
- Vector DB — Qdrant + pgvector for agent memory
- Errors — Standardized error taxonomy