Core
Fail-closed credential broker
Stores credential key names only. The MIT Agent Vault is live on a private host when attested; CRM stays fail-closed until then.
ManifestoAuto Agent OS · rooftop HITL control room
Govern packs and models without turning HITL off.
Agent OS is the in-app control room on Sales OS: operator overview, dealership packs, a tenant model registry, monthly token caps, runtime policies, and a white-label overlay. Dealer-owned credentials go through a MIT Agent Vault that stays fail-closed until an operator attests smoke. Session tokens never return to the browser.
What the solution covers
One clear system, configured around the work.
Core
Usage caps
Operator monthly token cap. Held completions fall back to rules. Never auto-send when a budget is held.
Configured
Tenant model registry
Catalogued cloud hosts or private-IP local runtimes. SSRF-safe URLs. Credential key names only.
Optional
Local runtimes
Private-IP model URLs when the rooftop owns the hardware. Public default route for workers stays blocked.
Core
Dealership packs
Floor, listing, intel, and ingest packs. Disable stops that pack’s cron. HITL, autoSend, and autoPublish cannot be switched off.
Core
Operator overview
Vault readiness, models, usage, packs, brand, and policies on one page. No secrets. Floor queue stays on Monitor and Approvals.
How deployment works
Start with the smallest useful scope.
We document the current workflow, decide what people and systems remain authoritative, then configure and verify the solution before expanding it.
- 01
Inventory current AI use
Identify providers, accounts, models, costs, data exposure, users, workflows, and unmanaged tools.
- 02
Set the operating policy
Define approved models, secrets, roles, knowledge boundaries, budgets, tools, and human approval requirements.
- 03
Deploy one governed agent
Connect one valuable workflow to the minimum required systems, then test permissions, evidence, refusal, and audit.
- 04
Measure before expanding
Review usage, cost, quality, safety, and adoption before enabling additional agents or local models.
Designed outcomes
What better looks like.
- One operator overview for packs, models, usage, and brand.
- Cron that only queues HITL drafts.
- Dealer-owned keys stay out of the CRM database.
- Listing photos never go through a generative redraw model.
- A fail-closed vault until an operator attests smoke.
Good fit
- A rooftop that wants governed agents on Sales OS
- A group that needs the same HITL packs on every store
- A store that will attest its own vault
- A pilot that must refuse unsupervised send
Not the promise
- A generic chatbot bundle
- Unrestricted API keys in application data
- Autonomous pricing or customer send
- Generative listing photos that redraw the car
Scoped discovery
Map the dealership AI control plane.
Tell us which models and tools you use today, where your API keys live, what you need to monitor, and which agents or local-model options you want to evaluate.