OpsTech PlatformThe AI-agent factory

Sign up, subscribe, and get your own durable, secure, fully-provisioned Hermès agent — reachable through a web console, a per-agent WebUI, Telegram and email. This is the documentation for developers, operators and partners building on the platform.

What is OpsTech

Quickstart

Architecture

🏭

A platform to deploy, run & sell AI agents

One control plane (Go operator + API on Kubernetes) turns a Stripe subscription into a running pod topology: a Hermès agent brain, an isolated companion tool-executor, and durable state — with zero ops work for the user.

Read the overview

🔒

A real security frontier

The companion pod is the sole tool executor. Every tool call runs isolated from the agent's secrets — a compromised tool can never exfiltrate platform credentials. Fail-closed, permanent, FROZEN.

The tool-isolation model

💾

Agent state that survives restarts

B4 durability — coherent SQLite checkpoints, a no-delete rclone mirror, and a fail-closed restore init container on Ceph + Cellar S3. Most agent platforms lose state on reschedule; this one provably does not.

How durability works

🔀

One-flip, fail-closed exposure

Publishing an agent to the internet is a single reconciled switch (HTTPRoute + NetworkPolicy) that is withheld until its OIDC/JWT gate exists — safe, reversible multi-tenant exposure.

The exposure switch

🪪

One identity, everywhere

OIDC only, via Zitadel — the single root of trust for humans, agents and machines. No parallel auth path, ever. The agent WebUI authenticates itself natively; the platform only flips the switch.

Single OIDC identity

📦

GitOps delivery, honest maturity

Flux + vendored Helm charts + digest-pinned releases on CleverCloud CKE. This documentation marks maturity honestly — some capabilities are built, tested, and reversible but not yet switched on in production.

Maturity scorecard

Status legend

Every capability in these docs carries an honest maturity marker, matching the platform audit:

✅ Works — verified functional (code + test, or a live browser proof).
🟡 Partial — works with caveats, gaps, or an unproven path; often built-but-dark (behind an env flag that is off in production).
🟥 Stub — non-functional, façade, disabled, or dead code.

The one-sentence read

A strong, incident-hardened core (agent lifecycle, B4 durability, exposure switch, Stripe billing, auth crypto) with a large "built-but-not-activated-in-prod" gap — most gaps are a flag flip and a proof away, not a rewrite. See the Maturity scorecard.