The architecture of Pantheon.

Typed connectors

Agents reach your systems through typed connectors - Postgres, REST, gRPC, and message queues. Connectors expose typed schemas, so a plan is validated against your actual tables and endpoints before step one runs.

• Credentials are scoped and audited - minted per step with least privilege and revoked on completion.
• Executors have no network egress beyond the connector allowlist a workflow declares.

The planner

A planner decomposes each job into steps and compiles the workflow to a typed DAG before anything executes. Deterministic tools run first; model calls happen only when judgment is actually required.

The durable runtime

Workflows are durable state machines. State transitions are journaled before execution, and a crashed step resumes from its last checkpoint - never from the start.

• Every tool call runs in a sandboxed executor with per-step timeouts, retries, and idempotency keys.
• Structured outputs are schema-validated at every boundary; malformed responses are repaired or retried before they touch your data.
• Rate limits, backpressure, and circuit breakers are enforced per connector, so a slow upstream never cascades.
• New agent versions run against shadow traffic before they ever act on production.

The audit log

Every action lands in an append-only, content-addressed audit log with the full prompt, tool call, and resulting diff. Any run can be replayed bit-for-bit against a snapshot of your data.

Human-in-the-loop escalation

When confidence drops below your threshold, the agent stops and escalates to a human queue with the full decision trace attached. Your team reviews exceptions, not everything.