00 — o8

An orchestrator that delegates, reviews, and ships.

One primary orchestrator routes scoped work to specialized sub-agents. A governance layer reviews every output before it touches your main branch. Local-first. Any model.

Download for macOS ›v0.1.7alpha · macOS (Apple Silicon + Intel) · free during alpha · bring your own keys

(TRUST)WHAT o8 WON’T DO
(LOCAL-FIRST)

Your code never touches our servers. Everything runs on your machine.

(YOUR KEYS)

Your API keys. Your quota. Your rates. o8 doesn't mediate or meter.

(NO ACCOUNT)

No signup. No telemetry. Download the binary and run it.

(SOURCE PRIVATE)

This repo is the changelog. The engineering source stays private.


(AUDIENCE)SELF-SELECT
(SOLO BUILDERS)

Stretch a paid plan across plan, build, and ship without running dry.

(AGENT FLEETS)

Watch parallel sub-agents work. Steer mid-flight. Approve what merges.

(NIGHT SHIPPERS)

No session reset. Pick up tomorrow where today's dispatch left off.

(SMALL TEAMS)

Shared governance and memory. Separate accounts for each operator.


(CONTEXT)

Context windows balloon when one agent does everything.

A single agent stretched across plan, execute, review, and ship runs out of room before it ships anything. The usual workaround is more compute. The actual fix is more structure — delegating scoped work to sub-agents so the orchestrator stays lean enough to reason.

(SOLO AGENTS)01 / 05 — swipe or drag
(TOKEN BLOAT)01 / 05

Solo agents run out of room.

Plan, execute, review, and ship in one voice eats the context window before anything lands. More compute doesn't fix what's structural.

(ROLE COLLAPSE)02 / 05

The reviewer is the author.

A single agent marking its own work has no second opinion. It approves what it wrote and moves on.

(SILENT DROP)03 / 05

Claimed work that never happened.

Agents narrate dispatches they never fire. The operator reads the text, believes it, walks away.

(UNREVIEWED MERGE)04 / 05

Code lands without a second look.

Without a gate, the first thing to pass the model's self-check hits main. Regressions ride along.

(PLAN DRAIN)05 / 05

A solo agent burns a monthly plan in days.

Holding full context in every turn chews through paid-plan quota faster than it ships. Delegation keeps the orchestrator turn lean; sub-agents run on their own quotas.


(ARCHITECTURE)

A pipeline, not a prompt.

The orchestrator decides what needs to happen. Sub-agents execute in isolation with only the context their task requires. Governance sits between the sub-agent output and the base branch.

(EACH LAYER)01 / 06 — swipe or drag
(ORCHESTRATOR)01 / 06

Routes, reviews, signs off.

The top layer decides what needs to happen and who does it. It reads diffs. It never writes production code itself.

(SUB-AGENT)02 / 06

Isolated worktree, scoped context.

Each sub-agent runs on its own branch with only the files and prompt its task requires. No shared state during execution.

(GOVERNANCE)03 / 06

The gate before main.

Every sub-agent output passes through typecheck, static checks, and orchestrator review before anything merges.

(SHARED MEMORY)04 / 06

Lessons persist across sessions.

Review findings and dispatch patterns feed back into future prompts. The system gets harder to fool over time.

(AUDIT TRAIL)05 / 06

Every decision has a hash.

Approvals, reviews, and merges all land in a durable ledger. You can retrace any shipped change to the conversation that produced it.

(OPERATOR WINDOW)06 / 06

Not a headless pipeline. A control surface.

Headless daemons route and gate. What's missing is a window for the operator to see what's happening, steer mid-flight, and approve what ships. o8 is that window.


(COORDINATES)

Where o8 sits.

Not every orchestration tool makes the same tradeoffs. Here is how o8 lines up against the axes that actually matter.

(THE TRADEOFFS)01 / 05 — swipe or drag
(MONOLITHIC → DELEGATED)01 / 05

No single agent holds the full task.

Work is split into packets small enough to finish cleanly in one turn. Context stays lean because nothing tries to hold everything.

(OPAQUE → GOVERNED)02 / 05

Every merge goes through review.

The orchestrator reads the diff, runs the gates, and writes a verdict. Nothing ships without a signed record.

(BRITTLE → RESILIENT)03 / 05

Drift gets caught, not accumulated.

Lane reconcile catches orphaned work. A supervisor watches for stuck sessions. Bash-merge paths and verb paths both reconcile back to clean state.

(MODEL-LOCKED → AGNOSTIC)04 / 05

Any model, same floor.

The governance layer enforces quality mechanically. The model tier becomes a cost and speed knob, not a correctness knob.

(TERMINAL-BOUND → FLEET-AWARE)05 / 05

One operator, many workers.

Parallel sub-agents work in isolation. The orchestrator stitches outputs together. A single human reads the summary, not the stream.


(REVIEW)01 / 06 — drag
(OVERVIEW)04.0101 / 06

Review before ship.

Every sub-agent output passes through a gate before merge. Typecheck, static checks, diff inspection, audit. The orchestrator signs off or returns it for a fix.

THE GATE
← drag to advance →
(TYPECHECK)04.0202 / 06

TypeScript passes, always.

No sub-agent output reaches main until tsc says yes. Type regressions are caught before the review turn even starts.

(STATIC CHECKS)04.0303 / 06

Banned patterns never ship.

Structural rules run on every diff. Violations fail the lane, block the merge, and return the turn to the sub-agent with a fix-it steer.

(DIFF INSPECTION)04.0404 / 06

The orchestrator reads every change.

Not summaries. Not status signals. The full diff, file by file. Every verdict is grounded in the code, not the narration.

(APPROVAL AUDIT)04.0505 / 06

Signed trail of every merge.

Each merge carries a decision record: reviewer, timestamp, findings, and the commit range it covers. Nothing is implicit; nothing goes untraced.

(DECOMPOSITION)04.0606 / 06

Large files split automatically.

Oversized modules trigger follow-up work the moment a merge lands. Main stays clean as the system grows, without anyone having to ask.


(PROOF)01 / 06 — drag
(OVERVIEW)05.0101 / 06

The loop sharpens itself.

o8 dispatches against o8. Every pass ships features, catches its own friction, files the bugs, and merges the fixes.

← drag to advance →
(OVERVIEW CLIP — 10s)PLACEHOLDER
(10 MERGES, ONE EVENING)05.0202 / 06

A full epic shipped end-to-end.

Ten scoped packets dispatched, reviewed, and merged in a single operator session. Plain-English dispatches, no tool IDs typed.

2026-04-16 SESSION
(DISPATCH → MERGE LOOP — 8s)PLACEHOLDER
(17 BUGS CAUGHT)05.0303 / 06

Friction self-filed during the run.

Every rough edge from the same session became an issue before it recurred. The loop generates its own regression backlog.

(ISSUE AUTO-FILE — 6s)PLACEHOLDER
(SCORE 75 → 90)05.0404 / 06

The bar lifts in one sitting.

Human-through-product dogfood score climbed fifteen points after the same session's hand-fixes landed. The loop sharpens itself on every pass.

(SCORE TRAJECTORY — 5s)PLACEHOLDER
(MERGES OWN FIXES)05.0505 / 06

The system dispatches against itself.

Bugs filed, packets written, sub-agents ship patches. The orchestrator reviews the fix the same way it reviewed the feature. Same pipeline, both directions.

(META DISPATCH — 10s)PLACEHOLDER
(NO LOST WORK)05.0606 / 06

Drift gets caught, not accumulated.

Stuck lanes recover. Orphaned worktrees get healed. Even the paths that bypass the primary handler land in a valid state by the next tick.

(RECONCILE SWEEP — 6s)PLACEHOLDER