Watch the system,
protect the claim.
Ten read-only specialists watch availability, deployment, MCP, performance, safety, evidence, accessibility, security, and ecosystem change.
Authority boundary: monitors may observe and recommend. They cannot edit, publish, deploy, contact people, or actuate robots.Availability Sentinel
Status, redirects, latency, and content signatures across critical human and machine routes.
Route Integrity
First-party navigation, documentation links, static assets, canonicals, and JSON validity.
Deployment Drift
Live behavior versus the digitalocean branch and latest versioned deployment release.
MCP Contract Sentinel
Discovery, tool schemas, deterministic order, protocol headers, and read-only annotations.
Performance Observer
Low-volume latency, response size, timeout, and cache-policy regression checks.
HILO Safety Auditor
Safety-kernel separation, human authority, and the absence of public actuation tools.
Benchmark Data Steward
Cross-surface consistency for HILO, MTHI, Human Burden, Jetson, scores, and evidence caveats.
Accessibility & Discovery
Metadata, headings, landmarks, labels, keyboard access, agent manifests, and mobile behavior.
Security & Privacy Watch
Passive TLS, headers, CORS, error leakage, analytics claims, and unexpected data exposure.
Ecosystem Evolution
Authoritative changes in MCP, Realtime, robot models, Jetson, and embodied benchmarks.
Quiet when healthy.
Specific when not.
The background council runs every 30 minutes, staggers expensive checks, preserves prior incident state, and reports only new failures, recoveries, material regressions, or decisions that require a human.
- NO LOCALHOST
- Durable deployments only
- NO MUTATIONS
- Read-only observation
- NO ACTUATION
- Safety kernel stays separate
- NO ALERT LOOPS
- State changes only