Spectrum 0.1 beta · Public tier · read 2026-11-10 · participant entry: one of our own agents
The team of Claude Code sessions that builds and runs promptugal.news: a conductor, a journalist, a developer and others, each with its own key, policy and folder.
The PrompTugal.news agent teama deployment
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates
R2ReachIntegrated
C3ControlObservable
O1OpennessDisclosed
Stage: Scaling (10 of 16)
Standout. Autonomy 4 (Orchestrates): the repository, the vaults, the inboxes and the live site
Next unlock. Openness 2 (Documented): public evidence that its limits and known failure cases are documented for those who use it would get there.
Standards constellation. 91 provisions lit across 8 of 8 instruments.
Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act
Evidence: 10 sources, captured and hashed · the card's page has the vault's read key · A participant entry: one of our own agents · send a correction
The walk down from this card: each dimension, the indicators its level stands on (a link to the question), the public source of each answer (a link out; dashed means available, not default) and the instruments its provisions sit in (a link to the instrument). A solid frame is evidenced; a dashed frame is not yet evidenced, which is not a no.
This card is read from the deployment's own public pages. Levels are computed from the evidence below by published rules. A dimension with no evidence reads "not yet evidenced".
Autonomy: level 4, Orchestrates
What does the agent do on its own? Runs multi-step workflows across systems or coordinates other agents; a person sets goals and reviews outcomes.
I10 It works across several domains or systems. The repository, the vaults, the inboxes and the live site. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 19ada272c71e1aa3)
I12 Several agents coordinate inside the organisation. Sixteen roles, a conductor that routes work, and an inbox per agent. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 19ada272c71e1aa3)
I18 The agent works independently; the person approves critical decisions only. Only the operator instructs; decisions that are his alone wait for him; the main branch is his to merge. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 19ada272c71e1aa3)
This evidence touches 10 provisions: Salesforce, Microsoft, OWASP, AAGMM, EAAMM.
Reach: level 2, Integrated
How connected is it? Documented connectors to common tools.
I10 It works across several domains or systems. The repository, the vaults, the inboxes and the live site. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 19ada272c71e1aa3)
I11 It connects to external tools or services across a trust boundary. The policy names the outside hosts and tools an agent may use. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 617ecee4098d1dd8)
This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.
Next unlock: level 3, Open protocol. Public evidence that it asks for narrower access than the whole account.
Control: level 3, Observable
Can people stay in command? Audit logs, a way to pause or stop, and monitoring are available.
I41 Its actions are logged. A run report for every run of every agent is committed to the public repository: its tool calls, counted against the grant. Source (read, observed, captured 2026-11-10T03:32Z, sha256 5903c71a92a48869)
I39 There is a way to pause or stop it. A hold file stops every agent; a stop of the whole team was ordered and reported on 9 November 2026. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 3f7273826e6477a8)
I43 It is monitored in operation. Dated hourly reports that review the run reports and the commit log are committed to the public repository. Source (read, observed, captured 2026-11-10T03:32Z, sha256 d144416f67254b6a)
This evidence touches 15 provisions: OWASP, EU AI Act, AAGMM, NIST AI RMF, Microsoft, Salesforce.
Next unlock: level 4, Enforced. Public evidence that a limit on it is enforced by something outside its own reach.
Openness: level 1, Disclosed
Does it show its work? Says it is AI and what it is for.
I56 It tells the people it talks to that it is an AI. The site says it is built and run by AI agents with a named operator. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 fe1a1433327be5bc)
I20 Its purpose and permitted tasks are stated in writing. The team table says what each agent owns and what it never does. Source (read, self-reported, captured 2026-11-10T03:32Z, sha256 19ada272c71e1aa3)
This evidence touches 6 provisions: EU AI Act, NIST AI RMF.
Next unlock: level 2, Documented. Public evidence that its limits and known failure cases are documented for those who use it.
The standards constellation
One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.
Instrument
Provisions touched
Of those publicly readable
Salesforce
14
24
EAAMM
2
8
OWASP
20
20
MCP authorization
4
8
AAGMM
8
8
Microsoft
17
23
NIST AI RMF
21
21
EU AI Act
5
6
Upper layers
The public card is the front door. The same evidence, read with the governance rules, is this agent's GAMMA-Ray rating: freedom, governance, the level held, the grant and a work order. That layer is written for an operator.
The vault
Every source behind this card was captured and hashed into a public sgit vault (e8jd77mm): captures.json lists each URL with the SHA-256 of what was fetched and when. Read key: