AEGIS core capability

Multi-Heading
Engineering Council

Not a chatbot group. Not a collection of independent agents. A governed digital engineering organization — where expert AI Heads with identity, personality and authority THINK TOGETHER, CHALLENGE TOGETHER, DECIDE TOGETHER with your engineers — and record everything.

S-01 · WHAT IT IS

A governed digital engineering organization

The Council is a core capability of the AEGIS Engineering Control Plane. It brings AEGIS core Headings, human engineers, developers, architects and authorized managers into the same engineering session — providing domain positions, challenging one another, identifying conflicts, producing an auditable engineering decision and executing it under AEGIS governance.

This is not a chatbot group, not a collection of independent agents, and not a simple multi-agent orchestration layer. It is a decision-aware engineering system. The right experts, at the right time, producing the right decision — with evidence.

S-02 · THE HEADS

Expert authorities, not generic assistants

Each Head has a distinct identity, personality, authority domain and voice. Every Head-to-Head message is authenticated and attributable.

AEGIS

Governance Authority — discovers, convenes, moderates, challenges, synthesizes, governs, decides and records. Uses specialist expertise rather than pretending to be the sole expert.

DASH

Frontend Engineering Authority — pragmatic, UX-oriented, implementation-focused. Authority over frontend implementation decisions.

IDENTITY

Identity Authority — policy-driven access control. Governs identities, authentication, authorization, role boundaries and inter-Head trust.

VELA

Security Authority — skeptical, adversarial, risk-oriented. Challenges assumptions and rejects insecure designs, backed by a security veto.

EDGE

Edge & Deployment Authority — joins whenever edge deployment, distributed execution, network boundaries or offline behavior are affected.

CONSTITUTION

Constitutional & Architectural Authority — AEGIS's architectural memory. Protects AEGIS laws, invariants, boundaries and long-term maintainability.

PHOENIX holds a Resilience & Recovery veto and joins when recovery architecture is impacted. Any AEGIS core heading — VOKA, CRM, ERP, PAYMENTS, WEBSITE and more — can join the council for its domain. VOKA provides voice representation only and never decides alone.

S-03 · THE PROTOCOL

A 20-step structured discussion

Every council session follows a persisted, explicit state machine — 21 states from CREATED to CLOSED. Discussion is structured, not a free-for-all. Each Head first establishes an independent position with rationale, assumptions, risks, dependencies, recommendation, confidence and evidence — then is cross-examined.

  1. 01Initiate
  2. 02Context load
  3. 03Head discovery
  4. 04Head briefing
  5. 05Initial positions
  6. 06Cross-examination
  7. 07Objections
  8. 08Alternatives
  9. 09Risk review
  10. 10Dependency review
  11. 11Architecture review
  12. 12Security review
  13. 13Decision synthesis
  14. 14Dissent record
  15. 15Approval
  16. 16Execution plan
  17. 17Execution
  18. 18Verification
  19. 19Evidence
  20. 20Close
"Disagreement is a first-class result." The system must not optimize blindly for consensus. Dissent — original and revised positions, objections, counterarguments and unresolved disagreements — stays attached to the final Decision Record.
S-04 · AUTHORITY & RISK

Domain-aware authority, not majority voting

Authority-weighted decisions

Simple majority voting is never the primary mechanism. Security decisions weight VELA above general Heads; identity decisions weight IDENTITY; architecture decisions weight CONSTITUTION. AEGIS can rule "Security conflict unresolved" when five Heads agree and VELA rejects — a forced decision cannot pass.

Security vetoes that hold

A Head may issue a domain veto only with reason, policy, evidence, risk, severity and required remediation — recorded with veto_id, decision_id and reconsideration conditions. VELA, IDENTITY, CONSTITUTION, PHOENIX and AEGIS hold veto authority. VELA can reject an insecure design; the objection stays in the record.

Risk-based human approval

Humans are first-class participants — engineer, developer, architect, security engineer, manager, approver, system owner. CRITICAL risk with low reversibility demands human approval; low risk with high reversibility may run autonomously. High-impact irreversible actions never rest on model consensus alone.

Execution itself passes nine gates: DECISION → POLICY CHECK → AUTHORITY CHECK → RISK CHECK → EXECUTION PLAN → TOOL AUTHORIZATION → EXECUTION → VERIFICATION → EVIDENCE. Council discussion never directly executes privileged actions, and headers can reconvene the council mid-execution on security failure, test failure, policy violation or human escalation.

S-05 · AUDIT & TRACEABILITY

Every decision explainable after the session ends

Immutable Decision Record

Twenty-plus fields: decision_id, session, mission, participants, positions, objections, risk assessment, selected and rejected options, authority basis, policy basis, dissent, approval requirements and status. A decision must be explainable long after the session.

Decision-to-code traceability

Code → task → execution plan → decision → council session → discussion → Head positions → evidence — and the reverse. AEGIS answers "why does this implementation exist?" with the relevant Decision Record.

Strict statuses, never conflated

PROPOSED / EXECUTED / VERIFIED / APPROVED are never mixed. No Head may claim completion without evidence. Every task references its session, decision, Head and required evidence.

20
protocol steps
21
session states
6
core Heads
22
audit events
9
execution gates
S-06 · SECURITY BY DESIGN

A compromised Head cannot cascade

Fail-closed architecture

If the security authority fails, security-sensitive execution is blocked or escalated; if AEGIS fails, execution fails closed. No unrestricted shell or tool capability is granted to a Head by default.

Least privilege & isolation

Head authentication, message attribution, scoped credentials, policy enforcement and session isolation are baseline. Tenant A council context never leaks into tenant B.

Industry alignment

Guards align with NIST AI RMF and OWASP agent security controls — agent identity, message integrity, least privilege, human approval and circuit breakers.

S-07 · GET IN TOUCH

Bring the Council into your engineering

Product contactinfo@amezay.com
General / sales+90 850 532 8583
Legal baseAmezay A.Ş. · Tokat Teknopark
Main siteamezay.com