OPEN AGENT ARCHITECTURE

Pantheon Blueprint

An Open reference Architecture for Intelligent Agent Systems

One assistant for the owner, with knowledge, collection, review, and tool execution separated behind clear boundaries. Pantheon Blueprint shows how information moves, where authority lives, and when work must pause for human approval.

Explore the architecture Meet the roles

Important

This repository describes a reference design and its intended controls. A configuration is not proof that a deployment is secure or that an end-to-end workflow has been verified. Deployments should record their own evidence, exceptions, and validation results separately.

Production deployments use a private desired-state repository managed and applied by Komodo. This public repository contains architecture, sanitized examples, and human and agent setup guidance only; it is not a live deployment source. Reconcile production drift in the private desired-state repository, not by editing configuration in the Komodo interface.

Roles

This is the primary map; see Tools, capabilities, and interaction boundaries for full product boundaries and interactions.

Image	Name	Function	Tool
	Odine (Ody)	The single user-facing assistant for conversation, reasoning, and orchestration.	Hermes Agent + Hermes WebUI + Hermex
	Mimir	Organizes canonical knowledge with PARA-like views, seven typed objects, and GBrain-style current views plus evidence timelines.	AFFiNE + controlled indexer + Mem0
	Muninn	Reviews completed conversations and prepares traceable knowledge candidates.	isolated Hermes Agent worker + transcript outbox
	Huginn	Collects external evidence and runs bounded, deterministic automations.	n8n + restricted fetch/browser workers
	Heimdall	Mediates tool actions, applies policy, selects scoped connections, and records evidence.	Executor + Pantheon Blueprint policy/adapters + 1Password + Grafana Alloy/Cloud

Three rules explain most of the design:

1. Ody is the only assistant the owner talks to.
2. AFFiNE is accepted knowledge; Mem0 and captured evidence are supporting data.
3. Heimdall checks actions, and sensitive changes pause for an exact human approval.

How one request moves

sequenceDiagram
    participant UI as "User interface"
    participant Ody as "Odine / Hermes"
    participant Gate as "Heimdall / Executor"
    participant Approval as "Human approval"
    participant Secrets as "1Password"
    participant Mem as "Mem0"
    participant Knowledge as "Canonical AFFiNE"
    participant Telemetry as "Grafana Cloud"

    UI->>Ody: "User request"
    Ody->>Gate: "Tool request"
    Gate->>Gate: "Apply policy and scoped identity"
    opt Sensitive action
        Gate->>Approval: "Pause with exact action and expiry"
        Approval-->>Gate: "Approve or deny"
    end
    Note over Secrets,Gate: 1Password provisions approved runtime secrets before requests
    Gate->>Mem: "Reference search"
    Mem-->>Gate: "References"
    Gate->>Knowledge: "Canonical read"
    Knowledge-->>Gate: "Filtered result"
    Gate-->>Ody: "Filtered result"
    Ody-->>UI: "Answer"
    Gate-->>Telemetry: "Record redacted telemetry"

Architecture at a glance

flowchart LR
    User["User"] --> Ody["Odine (Ody)<br/>Hermes"]

    subgraph Agent["agent-01 · assistant runtime"]
        Ody
        Muninn["Muninn<br/>scheduled Hermes Agent worker"]
    end

    subgraph Knowledge["knowledge-01 · trusted knowledge"]
        Affine["AFFiNE<br/>source of truth"]
        Mem0["Mem0<br/>rebuildable index"]
        Affine --> Mem0
    end

    subgraph Tools["tools-01 · tools and automation"]
        Heimdall["Heimdall<br/>Executor.sh boundary"]
        Huginn["Huginn<br/>n8n"]
        Secrets["1Password<br/>secret provisioning"]
        Telemetry["Grafana Cloud<br/>observability only"]
        Secrets --> Heimdall
        Heimdall -. redacted telemetry .-> Telemetry
    end

    Ody -->|"tool request"| Heimdall
    Muninn -->|"tool request"| Heimdall
    Huginn -->|"tool request"| Heimdall
    Heimdall -->|"scoped read/write"| Affine
    Heimdall -->|"scoped search"| Mem0
    Heimdall --> External["External services"]

The three-host layout is a reference topology:

• agent-01 contains Ody's interactive Hermes runtime and an isolated Muninn worker.
• knowledge-01 contains Mimir's canonical store and rebuildable index.
• tools-01 contains Heimdall and Huginn, separating tool execution and untrusted collection from the knowledge plane.

Smaller installations may combine hosts, provided they preserve the same trust boundaries and can demonstrate that the resulting controls are effective.

Intended security model

The central invariant is:

Agents may reason and request actions, but every external tool action is intended to pass through Heimdall.

This design aims to provide:

• a fixed, least-privilege tool catalogue for each authenticated workload;
• scoped downstream identities so mediation does not erase authorship;
• no raw third-party credentials in agent prompts, configuration, or logs;
• human approval for sensitive actions, bound to a specific request;
• provenance for knowledge changes and collected evidence;
• isolation of hostile web content from canonical knowledge and credentials;
• deterministic, idempotent background workflows; and
• redacted telemetry that supports diagnosis without becoming an authority.

These are design requirements, not automatic properties of the named products. A real deployment must test for bypass paths, identity confusion, unsafe defaults, approval replay, secret leakage, and failure recovery.

Supporting platform

The reference deployment uses:

• Traefik for HTTP routing and TLS;
• Tailscale for private and administrative connectivity;
• Pangolin for deliberately published, authenticated user routes; and
• Komodo for container deployment and application operations.

DNS publication, network reachability, and application authorization are separate decisions. Publishing a route must not implicitly grant access to its underlying service.

Knowledge flow

AFFiNE is authoritative. Mem0 accelerates retrieval but can be erased and rebuilt from accepted AFFiNE content. If the two disagree, AFFiNE wins.

Muninn reviews completed conversations from a durable checkpoint, creates provenance-bearing candidates, and writes drafts or approved changes through Heimdall. Huginn gathers external evidence but does not promote it directly into canonical knowledge.

Choose your path

• Understand: architecture, data flows, approvals, and roles.
• Deploy: getting started, integration contracts, scoped maintenance, operations, and backups.
• Assure: assurance and security.

License

The documentation and reference material in this repository are licensed under CC BY-NC 4.0: attribution is required, and use is limited to non-commercial purposes.

Reusable software under software/ is licensed separately under the BSD 3-Clause License. Third-party components retain their own licences and notices.

Project status

Pantheon Blueprint is being developed as a reusable architecture and deployment guide. Features should be labelled as reference design, implemented, or verified. Only deployment-specific evidence can justify the final label.