The Kernel

The Kernel holds identity, the Agent Contract, the Inspector Pipeline, and the two meta-agents: Butler (orchestration of cross-Cell concerns) and Token Guard (the budget and safety perimeter for any agentic call).

Invariants

If a change requires editing the Kernel, it requires Kernel review. This is not bureaucracy — it is the price of having a Kernel at all. The Kernel is deliberately small so that this gate stays cheap.

kernel/
├── contract/        # Agent Contract — 9 surfaces
├── inspector/       # observe → detect → propose → review → promote
├── butler/          # cross-Cell orchestration
└── token-guard/     # budget + safety perimeter