System mapSix starter staff ship in the box. They stay off until the connections they need are set up.
Agents can read and keep records on their own. Anything that sends, spends, deletes or grants access waits for a human.
Agent reaches for a tool
Send an email, place a call, take a payment, delete a record.
The app checks its list
Safe tools run. Risky tools must ask. Anything undeclared is refused.
It holds the action
One request for that exact call. It works once and expires.
You get a notice
Push, email, or both. The approvals panel shows what is waiting.
You say yes or no
Or open a timed window for supervised work. It counts down and can be closed any time.
The agent runs it once
An agent can never approve itself. Every step lands in the audit log.
Works before you add an AI key
CRM, projects, documents and local knowledge tools run with no provider. One model key switches on text help.
Your data stays with you
One SQLite database on your own volume. Keys are stored encrypted inside your install.
Postiz needs Temporal
Social posting runs through Postiz, which needs its Temporal service. Docker starts both.
DeerFlow is optional
The free edition can run the upstream research service on its own. The integrated research desk is part of Octi CC.
Hermes is bring-your-own
Build Board needs a Hermes service you set up yourself. It is not installed by Docker.
Dimmed boxes
They belong to Octi CC. They are on the map so you can see the whole design. Nothing in the free edition depends on them.