AGF doesn't split "human workflows" from "agent workflows" — it defines seats, and either kind of worker can sit in one. A seat can be filled by an agent sub-task, by the main Claude Code loop (bh role <seat>), or by a human doing the same verbs by hand. What keeps the mix safe:
human; a reviewer bounce sends the bead back with written feedback rather than silently failing. bd humanexists to flag any decision for a person.agent identity mode each worktree is stamped with a distinct author and a dedicated SSH signing key, so agent commits are attributable and verifiable. In supervised mode the worktree inherits the human's keys — "under my keys, with direct supervision."disp/), a leaf bead only claimed by a developer (dev/), asecurity:* gate only resolved by a warden. Humans (non-seat identities) are exempt — the machinery constrains agents, not people.Seats are separated by blast radius: the seat that routes work holds no secrets, the seat that holds secrets makes no decisions, the seat that observes writes nothing. A small single-hive factory collapses the four control seats into just the supervisor — deliberately, so the split is a designed merge, not an accident.
bh worksuper/The root. Sets policy, launches and oversees the other control seats, owns cross-plane decisions. Absorbs the other three in a small factory.
dir/The traffic layer. Fields the fleet-wide intake inbox (bh hq intake), routes work to hives, interfaces with per-hive dispatchers, writes fleet membership.
cust/The commissioning hands: discover → onboard → configure → verify → hand off (→ retire). The only control seat touching secret/key material.
ctrl/The gauge. Reads throughput, health, and OTEL telemetry of the factory; writes reports and dashboards, never the registry.
planThe cartographer. Drives ideate → research → architecture → decompose → file across three fidelity tiers (quick / spec / deep); files spike molecules when feasibility is open; owns replan and groom.
sub-agentFire-and-forget research: codebase discovery plus external docs/web research, returning structured findings to the planner on deep-tier work.
bh work loop · parallel devs, serial mergedisp/Delivers an epic: opens the container branch, assigns beads, fans out developer sub-agents (model per bead) or collapses onto a shared batch branch, watches gates.
dev/Implements one bead to a reviewable state in its own worktree: claim → implement → show/refine → check → submit. Squashes its own noise into conventional digests.
seatWalks the submitted change: reads intent + diff, runs tests and a feature demo locally, checks acceptance criteria, then approves or bounces with written feedback.
seatThe merge owner. Serializes approved beads onto the green line via the merge slot,--no-ff, conflict ladder, escalates rather than drops work.
warden/Security + policy verdict only: secret-scan, SBOM, policy-as-code. Holds thesecurity:* gate that runs parallel to review — and is the only seat that can resolve it. Read-and-block; never writes.
lensAcceptance / e2e / QA — deliberately not a staffed seat yet. Covered by developer self-checks, the reviewer's demo, and CI until end-to-end testing needs its own identity.
Any seat can be launched as the main loop:bh role <seat> or claude --agent agf:<seat>.
Four more planes are designed and filed. They aren't described here because they aren't built yet — and a process guide that documents unbuilt work reads as finished when it isn't.
Designed, not shipped. Details land with the code.