Suede Ops Architecture

Suede Ops Architecture

Ordering law: data, then workflows, then intelligence.

An agent reading fragmented data does not report that it holds a third of the picture. It returns a fluent, confident answer built on a third of the picture. Fragmented input produces polished mistakes at scale, and polished mistakes survive review that visible chaos would not. Architecture is what stops the model from being asked a question its inputs cannot answer.

This skill ends with a written architecture, not a build. Every step below produces a line in the Output Contract, and every gate names what an agent does when it fails.

Before Starting

Collect these. Work with what exists and name what is missing in the Output Contract rather than blocking on it.

1. Entities: the nouns the operation runs on (client, project, order, job, track, release, patient).
2. Work units: the recurring things people do, one line each, in the words the person doing them uses.
3. Tool list: every system holding operational data, including spreadsheets, shared drives, and any inbox used as a database.
4. Cycle length: median days for one unit of work to go from open to done.
5. Blast radius per work unit: what a wrong output costs, and whether it can be undone.

Read references/triage-examples.md for worked classifications before running Step 3 on unfamiliar work.

Step 1: Schema before surfaces

Name the entities, their fields, and their relationships before designing a screen, an automation, or an agent.

For each entity record: the fields it carries, the entity it belongs to, and the lifecycle states it moves through.

Gate. Every work unit from Before Starting reads or writes at least one named entity. A work unit touching no entity means the schema is incomplete.

Halt format. Stop. Name the unmapped work unit in one line. Offer: add the missing entity, fold the work unit into an existing entity, or mark it out of scope in writing. Wait for the choice.

Step 2: One write path per entity

Each entity gets exactly one place a record is created and one path it is updated. Everything else reads.

For each entity, list every write path: each tool, script, form, and integration that can create or update it. People entering data through one application share that application's path and do not count separately; two applications writing the same record are two paths.

Gate. Write-path count per entity resolves to one. Two paths into the same record rebuilds the silo the system is being built to remove, on newer software.

Halt format. Stop. Name the entity and each competing path in one line apiece. Offer: designate one canonical writer and make the others read, put every writer behind one service that owns the write, or split into two entities with separate lifecycles. Wait for the choice.

Step 3: Triage every work unit

Route each work unit to an automation, an agent, or a human. Apply the Written Rule Test in order and stop at the first match.

Adding a model to deterministic work buys nondeterminism and per-call cost in exchange for nothing. Work that passes the first test stays code.

Settle the agreement question rather than estimating it: give the same three real past cases to two people who do the work. Matching answers put the work unit with the agents; diverging answers put it with the humans.

Blast-radius override. Apply after the table, and it wins. Any work unit whose wrong output moves money, reaches someone outside the team, changes access, or deletes data becomes agent proposes, human approves regardless of the verdict above. Reversibility is the test, not difficulty.

Notifications into a channel the team already owns do not reach outside it and keep their table verdict: a routing automation that posts to an internal channel stays a plain automation.

Halt format. When a work unit cannot be classified (its rule was never written down, or the two people needed to settle the agreement question are not available), stop. Name the work unit in one line. Offer: write the rule now and reclassify, run the three-case comparison with whoever does the work, ship it as human-decides until either lands, or mark it out of scope. Wait for the choice.

Step 4: Absorb, keep, or kill every tool

Each tool from the list gets one verdict and one proof path. Presence in a config is not evidence that a tool is live: cite a last-write timestamp, a seat count, an invoice line, or a recent export.

A tool with no proof path is unclassified, not killed. Report it as unknown and name what evidence would settle it.