Huginn
“I fetch the outside world so everyone else can pretend the internet is a controlled input.”
Huginn is Pantheon Blueprint's external-evidence collection and bounded, deterministic automation role. Self-hosted n8n fills the generic scheduling and workflow automation gap; restricted fetch and browser workers fill the separate gap of retrieving or rendering untrusted web material in containment. Together they compose one Huginn role, not a general agent or an authority over canonical knowledge. This is a reference design: installing those components does not by itself establish the required identity, staging, or containment controls.
At a glance
| Aspect | Description |
|---|---|
| Function | Collect external evidence and run bounded, deterministic automations. |
| Reference tool(s) | Self-hosted n8n addresses deterministic scheduling and workflow automation; restricted fetch and browser workers contain untrusted web retrieval and rendering. |
| Authority | May request approved collection tools and append staged captures; it has no canonical AFFiNE write authority. |
| Trust zone | Tools and untrusted collection. |
What Huginn does
Pantheon Blueprint policy: n8n coordinates approved monitors and allowlisted workflows against a bounded source allowlist, schedule, and fetch policy. It requests tools as Huginn through Heimdall, using Huginn's own workload identity; it does not select credentials or another workload's connection. Restricted workers receive bounded fetch or rendering jobs and isolate hostile material from canonical knowledge and general credentials.
Huginn normalizes a result, records source metadata and provenance, hashes it, and deduplicates unchanged content. A material change becomes an immutable, staged capture followed by a small curation event that references the capture, rather than carrying the hostile document inward. Collection failures are explicit: no curation event is published before durable capture staging.
How Huginn interacts
- Heimdall: n8n requests tools as Huginn through this caller-scoped, policy-checked boundary. Heimdall selects the permitted downstream identity and filtered result; neither n8n nor the workers can bypass it.
- Restricted workers: n8n gives workers bounded collection jobs. Workers return captured material for durable staging with provenance rather than deciding what enters canonical knowledge.
- Muninn and Mimir: A bounded read path can provide a staged-capture reference to Muninn for review and an evidence-linked candidate or draft. Mimir keeps AFFiNE canonical; captured content remains untrusted external evidence.
- Operators and sources: n8n editors remain private. Any selected webhook is narrow, authenticated, and limited to its declared workflow purpose.
What Huginn does not do
Huginn does not decide that external material is true, directly promote it into canonical AFFiNE knowledge, or silently create canonical pages. It does not hold raw downstream credentials, access private networks through untrusted content, expose its editor by default, or fall back to direct connectors when Heimdall denies or cannot complete a request.
Readiness
Use Readiness and assurance as the single gate matrix for Huginn. Durable flow and control expectations remain in Data flows, Integration contracts, and the Security model.