Filter by name, source or property. An object without a backing source is a candidate, not a fact.
| Object | Domain | Backing source | Key properties |
|---|---|---|---|
| Actor | 1 · Subjects & Identity | cortex_actors (:1500) | id, project_id, slug, kind ∈ {agent, human, system}, status ∈ {active, historical, system, retired}, display_name, metadata |
| ActorAlias | 1 · Subjects & Identity | cortex_actor_aliases (:1482) | historical name → canonical actor |
| Adapter | 4 · Capability | app/adapters/*.py | thin wrappers over concrete code; graceful-degrade house law |
| AddOn | 5 · Commerce | subscription_addons, seed_plans.py | units_per_license pricing (e.g. +1 project $199/mo) |
| Agent | 1 · Subjects & Identity | agents (:1249) | name, project, role, model, capabilities, status, runtime_state, actor_id → Actor |
| AgentCortexPublic | 8 · Distribution & Ecosystem | 6 public repos — the earlier public runnable slice, superseded by Kaidera-AI/cortex | public runnable slice |
| AgentDiary | 2 · Memory | agent_diaries (:1136) | episodic/reflective memory; agent_name, summary, outcome, importance, search_vector, actor/project FKs; backs /diary/{agent} |
| Appliance | 8 · Distribution & Ecosystem | the VM (image or host install) + appliance/appliance.yml (service roles) + appliance/bin/kos (operator) | one host, three parts: NativeConsole · HarnessInstall · ServiceRoles; the volumes plus the console's state directory are the appliance's state |
| Artifact | 2 · Memory | artifacts (:1406), artifact_edges (:1389) | typed modality, captions, provenance (L5) |
| BackupSnapshot | 8 · Distribution & Ecosystem | kos backup / kos restore (appliance/bin/kos) + the console state directory | pg_dump -Fc of both databases + volume manifests; the ONLY sanctioned direct-Postgres path (E021 lifecycle boundary), never --no-owner/--no-privileges |
| CompletionHandback | 3 · Coordination | handoffs rows with kind='completion_handback' + reply_to_handoff_id (.agents/api/main.py:13977 return_handoff, handback_recipient ≈:1338) | created atomically when a worker RETURNS a task (POST /handoffs/{id}/return); addressed to the delegator (project default lead when the sender is not a visible actor); the parent stays returned until the handback is … |
| Contract | 8 · Distribution & Ecosystem | control volume <project>_kos-control:/appliance.env (bin/kos CONTRACT_KEYS, schema 2) | secrets (KOS_DB_PASSWORD, KOS_CORTEX_ADMIN_TOKEN…), KOS_EDITION, KOS_VERSION, KOS_SOURCE_REVISION, volume names, db tuning keys (KOS_DB_*); the console reads the tokens it needs from its runtime env, never fr… |
| Cortex OSS | 8 · Distribution & Ecosystem | Kaidera-AI/cortex (MIT), the current public product line: brew/curl native install pulling upstream Postgres (handoffs 57a68a67, aab66a36) | single-user |
| cortex-service | 8 · Distribution & Ecosystem | 02-cust-portal/cortex-service (ADR-023) | multi-tenant |
| Decision | 2 · Memory | decisions (:1590) | summary, rationale, outcome, category, files_affected[], tags[], embedding, superseded_by, times_selected/applied/completed/fallback, quality_score, parent_decision_id, generation, actor_id |
| DeploymentID | 5 · Commerce | app/deployment_identity.py | durable across reinstall/upgrade |
| DevProfile (macOS) | 8 · Distribution & Ecosystem | deployment_contract.py (KAIDERA_CONSOLE_RUNTIME=native), .agents/docker-compose.cortex.yml, launchd agents, podman machine (Fedora CoreOS guest, never Apple Container) | the same shape as the product; no package, no isolation promise, never customer-facing |
| DispatchLease | 3 · Coordination | handoff claimed_* columns + optimistic claim guard | Cortex claim = conditional UPDATE handoffs SET status='claimed' … WHERE status='pending' (.agents/api/main.py:13891); expiry → watchdog auto-requeue; retry cap → CONSULT escalation. No SKIP LOCKED exists anywhere i… |
| Edition | 5 · Commerce | app/edition.py | dev | open-source | commercial, baked at build; structural provider gate, never licensable |
| Edition | 8 · Distribution & Ecosystem | app/edition.py, baked at build (KOS_EDITION ∈ {dev, open-source, commercial}) | structural provider gate; commercial ships Linux only |
| EmbeddingJob | 2 · Memory | embedding_backfill_jobs (:2180) | pollable backfill durability for the L2 action; status ∈ {queued, running, completed, failed} |
| Engagement | 10 · FDE-OS | epic per client; gates D0 Sprint Zero → D1 Deployment Sprint → D2 Shadow → D3 Gradual autonomy → D4 Production + expand (ROI closes · pattern filed · next workflow selected) | |
| Entitlement | 5 · Commerce | app/license.py entitlements() | six axes: projects, teams, AI workers, users, deterministic agents, advanced atoms (manifold_access, byok, harness atoms); effective = max(commercial_floor, grant) |
| EntitlementService | 5 · Commerce | entitlement_service.py | precedence: overrides > add-ons > plan > free-tier |
| Entity | 2 · Memory | cortex_entities (:1555) | typed L4 graph node |
| Epic | 3 · Coordination | epics (:2210) | epic_id, title, status, overall_pct (0–100 check), increments jsonb |
| Episodic | 2 · Memory | team_events, messages, agent_sessions | what happened · cortex-search (temporal) |
| Evidence Ledger | 10 · FDE-OS | work-product receipts — this is the KOS WorkProduct object applied client-side | |
| EvidenceFloor | 3 · Coordination | apply_completion_evidence_floor (.agents/api/main.py, canonical 605de616; D3) | governance object: a harness-driven return that claims completed with no tests_run, artifacts or work_product_id is stored as partial with metadata.evidence_floor; operator returns are untouched. Known holes … |
| FDE Pod | 10 · FDE-OS | six seats: Cora (lead) · Mira (process) · Lyra (ontology architect) · Dax (AI engineer) · Orin (integration) · Vera (assurance) | |
| Formula / Cask | 8 · Distribution & Ecosystem | homebrew-kaidera | kaidera-os.rb (OSS, GitHub tarball) · commercial template + operator cask rendered only from live website manifest · npm @kaidera/kaidera-os · curl installer |
| FusionEngine | 9 · OpenKai | packages/core/src/fusion/ | architect+builder panel → third-party attributed synthesis → gate-first validation |
| Grant | 5 · Commerce | activation_grants, offline_grants | Ed25519 wire format b64url(sorted JSON claims).b64url(64-byte sig), v=2; claims incl. features[], valid_until/grace_until/kid/server_time; signer = OpenBao Transit (non-exportable key, legacy id `engen-… |
| Handoff | 3 · Coordination | handoffs (:1628) | from_agent/actor, to_role, to_agent/actor, priority ∈ {low, medium, high, urgent}, status ∈ {pending, claimed, returned, completed, released, abandoned, failed, archived}, `kind ∈ {task, consult, **completi… |
| Harness | 4 · Capability | app/harness.py, app/harness_runner.py, app/terminal_stream/ | every lane is a LOCAL child process of the native console with a real PTY (terminal-first). Support tiers (CTO R5, 2026-09-02): openkai — primary, first-party, installed on the appliance by the installer at a pinne… |
| HarnessArtifact | 3 · Coordination | harness_artifacts (:2268) | per-harness run artifact; status ∈ {current, stale, error}; project CASCADE FK |
| HarnessInstall | 8 · Distribution & Ecosystem | the host installer (M12: openkai, omp, node runtime; optional claude-code, codex), app/harness.py support tiers | local CLIs the console spawns as PTY-attached children; OpenKai's provider store ~/.openkai/.env is owned by OpenKai |
| HostBootstrap | 8 · Distribution & Ecosystem | install.sh (host lane) + M1/M3/M12 | installs podman ≥ 5, node, the harness CLIs, the console unit, kos; preflights old engines, stale ports, machine sizing (Mac) |
| HostFamily | 8 · Distribution & Ecosystem | design 26 (rulings R2, R5), podman host preflight (tasklist B7) | reference = Fedora/RHEL family (Rocky/Alma 10 for hosts we control, RHEL for customers); Ubuntu supported behind the podman ≥ 5 preflight; rootless podman ≥ 5, crun, SELinux labels :z, linger, subuid/subgid |
| InfraEstate | 8 · Distribution & Ecosystem | kos-infra | Adaptech infra platform and the redistributable infra-OS pattern; itself a KOS/Cortex instance (project kos-infra → localhost:8501) |
| Knowledge | 2 · Memory | knowledge (:1691) | content, source_file, category, section, embedding, project-scoped (_global allowed) |
| KOS appliance Cortex | 8 · Distribution & Ecosystem | the cortex-api service container inside the appliance VM (appliance/appliance.yml), Cortex vendored as a hash-pinned wheel in the image (E021 pattern, design 23) | the appliance's project set |
| KOSProjection | 9 · OpenKai | provider store ~/.openkai/.env on the appliance host, kos-cortex-provider/ manifest | OpenKai OWNS provider config; KOS is only the UI (POST /settings/{project}/providers/config + …/config/test, app/openkai_provider_config.py); the Cortex provider registration into OpenKai (standing goal #8) is stil… |
| Lesson | 2 · Memory | lessons (:1717) | procedural memory rows, embedded |
| LicenseSession | 5 · Commerce | license token service | narrow JWT (legacy type engen_os_license_session), scopes license:activate|heartbeat|read|manage, non-refreshable, org baked in; never a console JWT |
| LifecycleOperation | 8 · Distribution & Ecosystem | lifecycle.operation in the control volume (CAS: build, up, down, backup, restore, upgrade, abandon, prune) | journaled, crash-safe under a Linux subreaper; a failed up leaves up:claimed for the next command's recovery |
| Local Cortex | 8 · Distribution & Ecosystem | KOS redist, localhost:8501 | single-user |
| ManifoldKey | 6 · Manifold | inference_key_service.py | format mfld_live_v1_<base62><crc32>; only HMAC-SHA256(pepper, raw) stored; capability split (inference vs management); allowed_models + spend_cap_cents scopes; denylist; 30s positive cache |
| Model | 4 · Capability | provider catalog (app/providers.py) | UnifiedModel schema: provider, context_window, reasoning_levels[], per-Mtok pricing, source ∈ {live, supplement, merged} |
| ModelControlPlane | 6 · Manifold | canonical_model / provider_model / model_routing_log | provider failover chain; BYOK custody via OpenBao |
| MUO Contract | 10 · FDE-OS | ontology-as-code: 3–7 types, truth classes, governed actions, branch-first approval | |
| NativeConsole | 8 · Distribution & Ecosystem | local-cortex/console/app/main.py under a systemd unit (install.sh lane; launchd on the Mac dev box), deployment_contract.py profile native | the KOS app: SPA, orchestrator, dispatch, terminal PTY lane, settings; runs as the console service user; reaches the services on loopback published ports |
| OpenKaiProgram | 9 · OpenKai | OpenKai/Program/* | two lines: maintenance/0.84-line (@kaidera/openkai-core + @kaidera/openkai packages) + omp-fork line shipping 0.1.10 over @kaidera/[email protected] |
| Organization | 7 · Tenancy & Security | organizations (03-shared) | license_tier ∈ {base, developer, enterprise} (compat field) |
| PackageBoundary | 8 · Distribution & Ecosystem | docs/design/16-product-package-boundary.md + check-package-boundary.sh fitness gate | core owns runtime/seams; packages own workers/prompts/knowledge/branding |
| PackageChannel | 8 · Distribution & Ecosystem | dist/release.sh, scripts/release/*, RELEASE_MANIFEST.json | commercial = VM image (AMI/OVA) and/or the RHEL-family host installer + seven digest-pinned service images; source lane = kos build from a clean checkout (dev) |
| Pattern filing | 10 · FDE-OS | native captured_patterns mechanic: 3rd similar pattern → worker-library candidate | |
| Port | 4 · Capability | app/domain/*.py Protocols | 7 SDK ports: RunStatePort, LLMPort, CortexMemoryPort, OperationalStorePort, ModelCatalogPort, BillingPort, HarnessPort |
| Procedural | 2 · Memory | lessons, rules, skills | how we act · cortex-search, rule files |
| Profile | 1 · Subjects & Identity | agent_profiles, profile_bundles | identity bundles injected at boot |
| Project (Cortex) | 1 · Subjects & Identity | cortex_projects (:1571) | tenancy anchor of every identity-v2 FK (fk_identity_v2_*_project_id); project_key, display_name, status, repo_root |
| Project (platform) | 7 · Tenancy & Security | projects | org → projects → agents |
| ProjectPack | 8 · Distribution & Ecosystem | redistributable/schema/cortex-project-pack.schema.json | schema_version, kind: kaidera-os.project-pack, pack, project, extensions, portals[], generic assets[] (type ∈ {agent_prompt, cortex_seed, extension, frontend, filevault, config, docs, other}); the persona… |
| Provenance | 2 · Memory | work_products.provenance, team_events | why we trust it · cortex-brief provenance trail |
| Provider | 4 · Capability | System config (app-DB) | 7 built-in + custom (+ Add Provider); OpenRouter public catalog as supplement source |
| ReasoningContract | 4 · Capability | catalog metadata | [] no reasoning · ["supported"] binary · full ladder; runtime validates before every request |
| Relationship | 2 · Memory | cortex_relationships (:2109) | typed edge with confidence (deterministic vs probabilistic) |
| Relay settlement | 6 · Manifold | manifold_relay.py | platform worker drains outbox → CreditService.consume_credits (exactly-once), releases reservation, dead-letters partial debits |
| Release/Channel | 5 · Commerce | releases table (legacy engen_os_releases) | GET /api/v1/license/releases/{channel} — public, no credential; R2 artifact_url + sha256 + optional signature |
| RetentionTier | 2 · Memory | retention_config (:2381) + archive_* tables | single tier2_days (default 90) drives hot→archive; archive_messages/events/decisions/lessons/handoffs |
| Revocation | 5 · Commerce | revocations table (legacy engen_os_revocations) | operator-side only via admin-portal /internal/admin/license/revoke; seats marked MACHINE_REVOKED; heartbeat surfaces revoked:true |
| RLSPolicy | 7 · Tenancy & Security | Postgres RLS, FORCE everywhere | transaction-local GUCs app.current_org_id + app.rls_mode ∈ {system, platform, tenant} via rls_context.py; per-domain schemas/roles (public, manifold+manifold_app_dml, license schema + its DML role — legacy `e… |
| Role | 1 · Subjects & Identity | cortex.roles (:1084, platform) and public.roles (:2392, local) | platform: name, display_name, permissions jsonb, is_builtin, status; local: project, name, default_capabilities jsonb, description, is_builtin, source_file (PK project+name) |
| Rule | 4 · Capability | rules (:2408) | rule_slug, title, body, version, status ∈ {active, deprecated, draft} |
| Seat / Machine | 5 · Commerce | machines | install/deployment binding; seat limit; 48h cooldown; max 5 deactivations/month |
| Semantic | 2 · Memory | work_products, decisions, knowledge | what is true now · cortex-brief, vector search |
| ServiceRole | 8 · Distribution & Ecosystem | appliance/Containerfile.{cortex,db} + per-role stages | seven podman containers: db (pgvector 0.8.2 on Postgres 18), migrate, cortex-api, project-bootstrap, graph-worker, embed-worker, pdf-worker; Cortex vendored as a hash-pinned wheel; only loopback ports publi… |
| Session | 3 · Coordination | agent_sessions (:1185), session_sources, execution_analyses, amad_loop_passes | an agent run; /sessions/ingest endpoint |
| SessionTree | 9 · OpenKai | .openkai/sessions/<uuid>/session.jsonl | branchable JSONL v3 trees; shadow.git undo snapshots; activity.jsonl redacted feed; fusion/runs.jsonl telemetry |
| ShiftRouting | 9 · OpenKai | OK-9 composition | "route when you can predict, cascade when you can verify" |
| SignedKey ledger | 5 · Commerce | signed-key table (legacy engen_os_license_keys) | revoke-and-reissue of versioned signed keys |
| Skill | 4 · Capability | agent_skills (:1224), agent_skill_bindings (:1205); marketplace spec kaidera-skills/spec/SKILL_FORMAT.md | YAML security manifest (legacy engenai.* key namespace, pending identifier migration): category, trust_tier (unconstrained text, DEFAULT standard; marketplace tiers official/verified_partner/community_vetted/unve… |
| SkillRegistry | 8 · Distribution & Ecosystem | kaidera-skills | 25 skills (6 context · 9 development · 5 devops · 5 security), marketplace.json, Pending→Approved→Workbench sync into platform |
| SpendReservation | 6 · Manifold | manifold.spend_reservation | durable pre-call gate — per-project $500 / per-key $200 in-flight ceilings |
| Sprint | 3 · Coordination | sprints | iteration container |
| StripeRails | 5 · Commerce | stripe_service.py, webhooks.py | 16 webhook event types; checkout; subscriptions incl. send_invoice no-card fallback (14-day due); refunds; credit notes; coupons; Billing Meter llm_token_usage |
| Structural | 2 · Memory | code graph (DuckDB+SQLite), cortex_entities/cortex_relationships | how code is wired · cortex-graph-* |
| Subscription | 5 · Commerce | license schema models | status → license status mapping (beta/trialing/wallet_pending → trialing; trial_expired → expired; active → active) |
| Substrate | 9 · OpenKai | pi-ai / pi-agent-core 0.84.2 | 30+ providers through pi |
| Task | 3 · Coordination | tasks (:1772) | status ∈ {todo, in_progress, review, done, blocked}, blocked_by, assigned_actor_id |
| TaskExecution | 3 · Coordination | cortex.task_executions (:1105) | per-handoff execution ledger; FK → handoffs; agent_name, customer/project scoping |
| TeamEvent | 3 · Coordination | team_events (:1796) | lifecycle event feed; pg_notify('cortex_events') drives SSE + dispatch |
| Trial | 5 · Commerce | app/deployment_identity.py + license module | one immutable 9-day evaluation; starts only after full install health gate |
| Unattributed spend | 6 · Manifold | SYSTEM org wallet + unattributed_usage_alarm | alarm when a call can't be attributed |
| UsageEvent | 6 · Manifold | manifold.usage_event outbox | one row per call, keyed sha256(org:project:provider_request_id) — the meter-once anchor |
| VerifyKeyRing | 5 · Commerce | release-baked Ed25519 public keys | KAIDERA_OS_PRODUCTION_LICENSE_KID=kaidera-os-lic-prod-v1 |
| VolumeSet | 8 · Distribution & Ecosystem | named volumes kos-control, kos-state, kos-config, kos-secrets, kos-graphs, kos-models, kos-home-* | the services' state; generation-scoped with promotion roll-forward; liftable |
| Wallet | 5 · Commerce | credit_wallets/credit_transactions + credit_service.py | one per org; ledger sums to balance; consume_credits idempotent on (wallet,'consumed',reference); auto-topup; expiry buckets; offboard close |
| WebsiteManifest | 8 · Distribution & Ecosystem | kaidera.ai release JSON | {edition, channel, version, artifact_url, sha256} — source of truth consumed by promote-commercial.py |
| Working | 2 · Memory | L6 boot context (prompt) | what matters for this tick · cortex-boot |
| WorkProduct | 2 · Memory | work_products (:1816) | handoff_id, actor_id, activity_type (free-text convention, DEFAULT task-completed, slug-normalised; typical values implementation/review/migration/research/fix/content-published/asset-created/approval/campaign), … |