Bounded tools
The agent may decide what to try. Registered capabilities, identity, policy, and environment decide what it can do.
Trust model
ConvergeQL is designed so reviewers can reconstruct what happened without asking a model to narrate its private reasoning.
The agent may decide what to try. Registered capabilities, identity, policy, and environment decide what it can do.
Model confidence is not an acceptance predicate. Required validators must return evidenced results against one candidate.
ChangeRun state belongs to the control plane. Agent session memory is advisory and is never the workflow system of record.
Tool results, validator outputs, diffs, approvals, and Git identifiers are execution truth. Explanations point back to them.
The initial authority boundary stops at a human-approved GitHub change. No autonomous merge or production deployment.
BigQuery and Snowflake evidence retain different meanings. Unsupported, delayed, or inaccessible evidence fails closed.
Current public boundary
Synthetic decision record. ConvergeQL records explicit rationale and evidence references, not hidden chain of thought.
Design partner preview
Bring one existing dbt-managed model, its declared invariants, and a review problem worth solving.