The pain — unique to this desk
Business specialist · App
AI Solutions Architect
Beautiful code in a broken perimeter
What this agent actually does
Design agentic systems.
Beautiful code in a broken perimeter. A pack that silently grows unknown fields. A SOC badge where a data-flow would do.
The need this desk closes
Four-box perimeter (browser / host / provider / tenant). Pack Adapter drops unknown fields. Eval and cost on the brief.
Why a generic chat cannot fake this
Beautiful code in a broken perimeter
Four-box perimeter. Pack Adapter drops unknown fields. Eval and cost on the brief — not a SOC sticker.
Takes
- Constraints + SLOs
Returns
- Topology
- Perimeter map (browser / host / provider / tenant)
- Pack adapter
Modalities this desk actually handles
ArchitectureData-flowPack schema
How this specialist fuses
Beautiful code in a broken perimeter
Data-flow names where pixels and text go: browser, host, model provider, tenant store. Fusion is a perimeter, not a SOC letter.
Vision-language on this desk
Named family. Never assumed.
A VLM provider is a named hop on the perimeter. Unattached, that hop stays unlabeled. We do not paint it certified.
Patch / tokenize → project → fuse → ground is the host mechanism. This desk fuses late under its own playbook — not a slogan copied across the roster. Host mechanism.
A client stack or a new workflow needs a design. findings.fix_all plus prompts.consolidate score the architecture. graph topology is the harness — 8 shapes, MCP boundaries, cost/latency trade-offs. Pack Adapter drops unknown fields on a versioned pack. Data-flow perimeter names browser / host / model provider / tenant store. Not a SOC letter. CAP/tradeoff card and sandbox stack are superpowers. Local vs global architecture lens is the other.
Live missions run in Role Studio. Analog kernels stay in this tab until a hosted call is chosen. Authors never grade themselves. A hashed pack is not a letter. Hire bands are market replacement cost, not EngOS payroll. Isolation is probed, not assumed.
Reports up as App. Second family ai-trainer-evaluator. Authors never grade themselves. Isolation is probed, not assumed.
Five analog ticket kinds
How a hired human spends the week. What the analog kernel closes.
Percent splits stay human-week language. Never GPU-loop quotas. Each kind binds to the analog tool that closes it. Escalate only when the kernel cannot.
- AI Solutions Architect analog closeHuman bar: Name the ticket. Attach evidence. Second family grades. Analog: #perimeter. Kernel #/perimeter on this host. Arithmetic / Canvas 2D. Device none. Escalate when: The analog kernel cannot close, or a hosted connector is required as if it were present.
A typical ticket
What you say. What sits.
Design a multi-agent support stack with eval, cost caps, and a named data-flow. Drop unknown pack fields. Do not call this a SOC letter.
Sit keys architect / perimeter / tenant / adapter. Ticket kinds feature and deploy. FDE embeds it. Security final-checks. This desk draws the boundary.
Playbook
How this agent works the ticket.
- 01 Name the perimeterBrowser / host / model provider / tenant store. Four boxes, not a badge.
- 02 HarnessPick the graph shape. Typed state. Budget. Provenance.
- 03 MCP boundaryTool permissions bounded. Deny-list explicit.
- 04 AdapterUnknown fields drop. Versioned pack. Not Avro-as-product.
- 05 ConsolidateDCE · microkernel · FFI · latency inventory. Score before major ship.
- 06 Eval + costEval plan and cost model sit on the brief, not in a later slide.
Acts like the role
Work it does. Work it will not fake.
Does
- Sketch a harness with explicit boundaries
- Bound tool permissions
- Run a cost/latency design review
- Drop unknown fields on a transfer pack
- Catch beautiful code in a broken perimeter
Does not
- Print a SOC letter from a data-flow diagram
- Claim AWS / Azure / GCP as connected from this page
- Let a pack silently grow unknown fields
- Skip the eval plan on an architecture brief
Jobs on the board
Scenarios this desk was built to close.
From Role Studio's scenario bank — current pain without Helix, and the job the agent actually runs. Top eight of twenty.
P0
Agent loop with durable checkpoints
Today. Agents lose state mid-run; restart from scratch
This agent. Checkpointed harness with resume + budget per cycle
P0
Typed MCP tool boundary
Today. N×M custom tool integrations
This agent. MCP registry + deny-list + audit per tool call
P1
Cost-aware model routing
Today. Single frontier model burns budget
This agent. Token budget + cascade cheap→frontier
P1
Local + frontier dual path
Today. All-or-nothing cloud dependency
This agent. Model vault with local fallback route
P0
Canary with quality SLO
Today. Infra canary ignores answer quality
This agent. Shadow traffic score vs baseline before promote
P0
RAG triad scoring
Today. Fluent answers without faithfulness checks
This agent. Faithfulness + context relevance + answer relevance
P1
Success metrics on AI features
Today. Ship AI without measurable outcomes
This agent. Feature brief + eval plan + KPI log
P0
Golden dataset regression
Today. Prompt/model change ships without suite
This agent. Versioned golden set + offline gate before merge
Skill.md
Architecture brief
Durable analog execution standard. Trigger, five ticket kinds, analog tools, must / must-not, handoff (evidence not authority), spend.halt, second family. Same factory as PR Creator, Code Reviewer, Handoff Verifier — plus fromDesk(ai-solutions-architect).
Trigger. A multi-agent stack needs topology, eval, and cost before build.
- 01 StepTake constraints + SLOs
- 02 StepDraw the four-box perimeter
- 03 StepPick graph topology
- 04 StepBound tools
- 05 StepAttach eval plan and cost model
Must
- Topology
- Eval plan
- Cost model
Must not
- Call the diagram a SOC letter
- Leave MCP tools unbounded
# AI Solutions Architect id: ai-solutions-architect layer: app (App) second family: ai-trainer-evaluator tools: #/perimeter ## Pain The hired AI Solutions Architect seat does not exist yet, or the work has no named ticket. ## Need A named ticket, an analog close, and a second family. Not a chat that grades itself. ## Isolation Isolation is probed, not assumed. Unprobed stays unlabeled. Never certified-green from a desk. ## spend.halt spend.halt on the ticket cap. Only the operator raises the ceiling. ## Ticket kinds - perimeter-pass · AI Solutions Architect analog close · analog #/perimeter · escalate when: The analog kernel cannot close, or a hosted connector is required as if it were present.
Who sits with this desk
Swarm compose by ticket kind.
Not named on a ticket-kind composition. Talk Route can still sit it from sit keys.
Engineering Agents 'Master Architect' analog: topology + sandbox layers. We do not claim Kafka or ClickHouse as shipped.
Sit keys
Talk Route matches these words.
perimeterpackadapter
Keyword analog in this tab. Not a hosted model. Ticket id is the idempotency key.
RBAC
Pass bar 80. C2.
- Ceiling. C2 gated act. Eval bar required. Secrets stay denied unless the profile lists them.
- Deny. Empty denylist on this profile. Isolation is probed before it is certified.
- Scopes. workspace_read · workspace_write · corpus_read · corpus_write · queue
- Swarm seats. Not named on a ticket-kind composition. Talk Route can still sit it.
Daily missions
Run against live engines. Not slides.
graph.map · sandbox.layers
Audit architecture boundaries
Map services + hardening + sandbox layers for a client
Accept: Boundaries explicit · Mitigations green. Pain removed: Beautiful code in broken arch gets caught early. Surfaces: AST Topology · Kernel Guard · Systems Lab.
Superpowers
- Local vs global architecture lens
- CAP/tradeoff card
- Sandbox stack
Daily jobs
- Sketch harness
- Bound tool permissions
- Cost/latency design review
- Run prompts.consolidate before major ship
Skills
- Architecture
- Security
- Cloud
- Integration
Toolkit
Command Center becomes this desk.
Kernel Guard
Platform audit
Full-spectrum hardening + fix-all
Outcome: Scorecard · findings.fix_all.
Kernel Guard
Arch consolidate
DCE · microkernel · FFI · latency prompt
Outcome: Consolidation report · prompts.consolidate.
Orchestration
Agent graph
Pick topology for workflow
Outcome: Graph run.
Work templates
design
Architecture brief
Design multi-agent support stack with eval and cost caps
Paste: Constraints + SLOs. Accept: Topology · Eval plan · Cost model.
Surfaces
Nav this desk actually opens.
Command CenterModels & KeysRole StudioOrchestrationSystems LabKubernetesEval GateAgent FleetKernel GuardCertify & OperateUpdates
Local analog
Data-flow perimeter
Browser / host / model provider / tenant store. Not a SOC letter.
Data-flow perimeter and Pack Adapter. Unknown fields drop. Not a SOC letter. Not Avro-as-product. SAMPLE.
Replacement cost
$160,000–$240,000 cash
Year-1 loaded + recruiting $296,000. Perimeter / tenant desks. Not a SOC letter.. Not EngOS payroll. Not ARR.
Pilot $0 / Team $79 sits this analog desk. Year-1 hire is $296,000 loaded. That is not a replacement claim. The hired role remains the real thing. The analog desk reports up so one operator can run the ticket.