Architecture · Secure paved road

Checked work reaches Main through one guarded path

Pi Orchestrator checked execution architecture Architecture diagram showing Pi Main resolving each task-selected Role just in time, returning bounded text to durable state, and automatically advancing exact ready changesets through isolated Herdr work, direct checks, optional judgment, and guarded Main integration. MAIN CONTROL PLANE TASK EXECUTION CHANNELS PROTECTED MAIN REPOSITORY EXECUTE LAUNCH CHECKPOINT DISPATCH CHANGESET TEXT RESULT VERIFY NO CONTROL API NO BYPASS AUDIT RESULT INPUT Checked request TASK DAG · CHECKS · BUDGET MAIN Pi Orchestrator PREFLIGHTS ROLE + MODEL PAIRS RESOLVES AGAIN AT LAUNCH AUDIT Durable request state CONFIG/PI-ORCHESTRATOR/STATE STRICT SCHEMA · RECOVERY EVIDENCE ROLE Current configured Role TASK-SELECTED · RESOLVED JIT TOOLS · SKILLS · MCP POLICY CHANNEL Text or changeset execution BOUNDED TEXT · ISOLATED HERDR MAIN DRIFT FAILS CLOSED CHECK Automatic checked progression READINESS · REBASE · CHECK · JUDGMENT GATE Guarded Main integration IDENTITY FENCE · DECLARED ORDER LEGEND approved checked path durable audit record blocked before boundary trust boundary