KCC 12

Operational Layer

KCC is not just a structural model; the operational layer specifies how the model lives in an organization day-to-day — roles, cadences, decision procedures, and durable governance records.

OperationsRolesCadencesADRsGovernance records
Created 2026-06-08 · v0.4.0

KCC is not just a structural model. This section specifies how the model lives in an organization day-to-day.

12.1 Roles and Responsibilities

RoleCountCore responsibilities
Kernel Maintainers3-7 named individualsOwn the kernel contract, veto kernel changes, sponsor L2→L3 promotions, approve trifecta/organizational-blast-radius HOTL exceptions
Capability MaintainersOne named individual per capabilityOwn the capability across versions, respond to issues, produce migration guidance, run the evaluation suite (5-15% of an engineer's time)
Cell OwnersEM or tech lead per cellOwn operational decisions, decide capability adoption, monitor cell metrics, manage exceptions and sunset dates
Inspector Operators1-3 named individualsOperate the Inspector Pipeline, tune detection rules, manage the proposal queue (politically neutral; rotated)
EngineersAll developersUse cells, build custom agents, propose L1 capabilities, participate in reviews, give platform feedback

12.2 Cadences

CadenceWhat happens
DailyCells operate, telemetry flows, decision traces recorded, dashboards update
WeeklyRetros include AI usage signals, Inspector detection reports, workslop/bypass reviews, reviewer load checks
MonthlyFull pattern detection report, L1→L2 candidate review, per-cell health reports, calibration reports
QuarterlyKernel evolution review, L2→L3 promotion decisions, Phase progression assessment
YearlyOrg-level Phase review, major kernel evolutions, KCC version progression

12.3 Decision-Making Procedures

Kernel changes are filed as ADRs (architectural decision records) with an open comment period (2 weeks minor, 4 weeks major), reviewed by kernel maintainers, and announced with a migration window. Capability L1→L2 promotions originate from the Inspector Pipeline and are reviewed by capability maintainers; L2→L3 requires kernel sponsorship and consensus. Cell exceptions are declared with a sunset date, reported to the Inspector Pipeline, and reviewed quarterly.

12.4 Failure Modes and Recovery

Capability abandonment is handled in priority order: reassign to a willing maintainer (preferred), deprecate with a migration window (acceptable), or leave it unmaintained in the catalog (unacceptable). Cell drift (silent kernel-contract violation) is surfaced by the Inspector Pipeline with the cell owner notified within 48 hours.

12.5 Governance Records

Governance records are searchable, versioned, and available to all engineers in the organization. Transparency is a precondition of trust.

ADRs document kernel changes; promotion records document maturity transitions; exception declarations carry sunset dates; Inspector reports summarize pattern detection. The human conditions these roles depend on are treated in Human Systems, and the path a single unit of work travels is treated in The Work Lifecycle.