Ambito
Deployed prototype · staging · no external usersA permission-aware context layer that turns an organization’s communications into structured, persistent memory — served to both the people and the agents doing the work.
- Postgres + pgvector
- Permission-aware MCP server
- Haiku classifier
- Sonnet extractor
- Sonnet escalator
- Gmail · GCal · Zoom
Work fragments across four to six tools, and context evaporates twice over: decisions and commitments never make it out of the communications they happened in — the inference gap — and the canonical knowledge that does survive is unreachable by the AI agents that need it — the canonical gap. People re-derive what the org already decided; agents answer confidently without the context to be right.
How it works
Communications enter through connectors, get classified and extracted by a three-model pipeline, resolve into a hierarchy, and land in one store that serves both a dashboard and an MCP server. One path, no side doors.
Band AIngest
- ConnectorsGmail · GCal · Zoom
- Ingestion workersqueue · normalize
Band BUnderstand
- ClassifierHaiku
- ExtractorSonnet
- EscalatorSonnet · confidence < 0.70
- Hierarchy resolverentity · thread · org
Band CServe
- Postgres + pgvectorstructured · persistent
- Dashboardfor people
- MCP serverfor agents · permission-aware
How it was built
Built by the same two-role system the build record describes: a planning session that never writes code, a coding agent that never makes product calls, and two files between them.
- Step 01Planning session
Reads the record, proposes scope, never touches code.
- Step 02Handoff brief
The one file planning writes to. Code reads only this.
- Step 03Coding agent
Implements against the spec, writes the failing test first.
- Step 04CI gate
Checks required; PRs auto-merge on green. A red suite means no merge.
- Step 05Return channel
Code reports back; the decision is appended, immutable from there.
| ID | Date | Decision | Verdict |
|---|---|---|---|
| DEC-077 | 2026-05-17 | Adopted a five-gate viability framework after a CONDITIONAL-NO verdict. | Locked |
| DEC-109 → DEC-115 | 2026-05-31 | Direct branch-merge-to-main reversed — a PR-based fleet workflow behind required CI. | Reversed · locked |
| DEC-169 | 2026-06-13 | Kill-switches and alerting relabelled PLANNED rather than delivered — the deliverable language was corrected in the spec. | Locked |
229 locked decisions on record · showing threeAppend-only · no edits, no deletes
What is on the record
One number carries the argument: the suite is large enough that the three-model pipeline can be changed without guessing at what broke. The rest is stated, not counted.
backend tests passing
Agents read only what the requesting person can read. The permission model is the product, not a setting.
Haiku classifies, Sonnet extracts, and a second Sonnet pass escalates only below 0.70 confidence. Cheap models filter; Opus is reserved for Ask synthesis.
Every material call is in the log with the spec it changed.
One person, agent-assisted throughout, under the operating system on the build record.
Production promotion has not been run.
Where it stands
Built and deployed to staging, prod-verified on a seeded tenant in June 2026 — and deliberately pre-launch: no external users, no production promotion, no revenue. The $2.75M pre-seed deck is content-complete; no raise has been opened.
Not claimed
- Users, active or waitlisted
- Revenue or pipeline
- Promotion to production
- Third-party validation