§3 — How the protocol works
Discipline-scoped agents. Bounded contracts. Human in the lead.
Each agent has a contract — what it sees in the IR, what it can write, what it must escalate. Cross-domain coupling goes through the IR, not through the agents. Agents draft; humans decide.
Bounded roles.
Each agent has a contract: what it sees in the IR, what it can write, what it must
escalate. Cross-domain coupling goes through the IR, not through the agents.
Audit by construction.
Every design decision is captured as a structured artefact: rationale, alternatives,
trade-off, owner. The audit trail is a build-output, not a documentation tax bolted on
after.
Human-in-the-lead.
No agent acts unilaterally on safety-relevant decisions. The methodology is built around
human judgement and human accountability — the AI loop accelerates, it does not replace.
Unified design container.
One state, every domain. Firmware, board, and 3D-mechanical agents read and write against
a single source of truth — the same IR — and co-optimize across domains rather than in
silos. A pin-budget shift on the board re-plans firmware drivers and re-checks enclosure
cut-outs in the same transaction. This is the protocol's core, not a feature on top of it.
Tool-agnostic translation layer.
Agents work on their own optimized internal graphs. A thin program layer translates those
artefacts into whatever EDA, mech-CAD, or revision-control format your team already uses —
Synopsys, Cadence, Siemens for board and silicon flows; SolidWorks, NX, Creo for mechanics;
or in-house tooling. We adapt to your stack; we do not ask you to adopt ours.