Spinnable AI employees

Spectrum 0.2 beta · Public tier · read 2026-11-10 · not reviewed by its vendor yet

Role-based AI workers with their own email address, memory, scheduled tasks and access to 35+ connected tools, reachable by email, WhatsApp, Slack, meetings and voice.

What each level rests on

This card rates a product as its vendor documents it, not anyone's deployment of it. A feature the operator has to turn on counts, and is marked as available. Levels are computed from the evidence below by published rules. A dimension with no evidence reads "not yet evidenced".

Autonomy: level 3, Acts

What does the agent do on its own? Completes routine tasks end to end; a person handles exceptions.

• I08 It executes actions itself. The documentation states workers act in connected tools, such as updating databases and sending emails. "They can check your calendar, update databases, and send emails." Source (read, documented, captured 2026-11-10T19:45Z, sha256 9d2680d11239f6d5) · π Moderate · S1·R5·A1 ×3
• I17 The agent handles routine tasks; the person is consulted on exceptions. The home page FAQ states that a worker schedules tasks, sends follow-ups and completes workflows without being prompted each time, that it will not take actions with external consequences without the person's approval and asks when unsure; no documentation page describes how that approval is configured. "it won't take actions with external consequences without your approval" Source (read, documented, captured 2026-11-10T19:45Z, sha256 e524bed247dadd0e) · π Moderate · S1·R5·A1 ×3

This evidence touches 4 provisions: Salesforce, Microsoft, EAAMM.

Next unlock: level 4, Orchestrates. Public evidence that the agent works independently; the person approves critical decisions only.

Reach: level 2, Integrated

How connected is it? Documented connectors to common tools.

• I10 It works across several domains or systems. Workers connect to many tools across a business, from email and calendar to GitHub, Notion and Salesforce. "connect to 35+ tools to work across your entire tech stack" Source (read, documented, captured 2026-11-10T19:45Z, sha256 e175e5806f7aa1d7) · π Moderate · S1·R5·A1 ×3
• I11 It connects to external tools or services across a trust boundary. Each tool is connected by authenticating with the outside service through OAuth or an API key. "Authenticate with the service (OAuth or API key)" Source (read, documented, captured 2026-11-10T19:45Z, sha256 e175e5806f7aa1d7) · π Moderate · S1·R5·A1 ×3

This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.

Next unlock: level 3, Open protocol. Public evidence that there is a published protocol or communication layer between agents.

Control: level 1, Stated

Can people stay in command? Documents say how people approve, override or stop it.

• I47 A limit on it is a rule in prose. Persistent rules for a worker are written in prose in its Worker Policy. "Worker Policy instructions are treated as the highest-priority rules and apply across all conversations." Source (read, documented, captured 2026-11-10T19:45Z, sha256 a9df835d12dae365) · π Moderate · S1·R5·A1 ×3

This evidence touches 1 provision: OWASP.

Next unlock: level 2, Configurable. Public evidence that high-impact actions need a person's approval.

Openness: level 2, Documented

Does it show its work? Public documents on how it works, its data, its models and its limits.

• I22 Its limits and known failure cases are documented for those who use it. The troubleshooting page documents failure cases, such as a worker stopping mid-workflow, with causes and fixes. "Your worker initiates a task or multi-step workflow, but stops mid-way" Source (read, documented, captured 2026-11-10T19:45Z, sha256 dcf489600b0425cf) · π Moderate · S1·R5·A1 ×3
• I58 The data it uses is described. The privacy policy lists what the agents access: email, calendar, documents, messages and data from connected platforms. "When our AI agents work for you, they access:" Source (read, documented, captured 2026-11-10T19:45Z, sha256 7558a1dcef25c8a6) · π Moderate · S1·R5·A1 ×3

This evidence touches 7 provisions: NIST AI RMF, EU AI Act, AAGMM, EAAMM, Salesforce.

Next unlock: level 3, Measured. Public evidence that test or evaluation results are published.

How far to trust this card

Status: Draft. Draft means the facts were found in public pages and reviewed by agents. The company has not confirmed them and no customer has gone on record. FACT-Ray says how far each fact can be trusted: who says it (Source), how firmly it is recorded (Record) and who stands behind it (Accountability). It never changes a level.

• The facts: 23 facts: 23 π Moderate. Each is written beside its evidence above.
• The chain: found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it.
• Who: produced by gamma.studio@web-summit.dinis; checked by gamma.review@web-summit.dinis and gamma.approve@web-summit.dinis. The actors.
• What would raise it: the company's own file at /.well-known/fact-ray.json (Source 2), a customer's statement of use (Source 3), or a named person signing the card (how).

The standards constellation

One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.

The 69 provisions lit

Each line item, with the facts that reach it. "Evidenced" is a link of the kind same: the fact is what the provision asks. "Partly" is a link of the kind part: the fact is one piece of it. "Its absence" points the other way. Each provision has its own page with its text and its place in the source.

Upper layers

The public card is the front door. The same evidence, read with the governance rules, is this agent's GAMMA-Ray rating: freedom, governance, the level held, the grant and a work order. That layer is written for an operator.

The vault

Every source behind this card was captured and hashed into a public sgit vault (kghdiwq3): captures.json lists each URL with the SHA-256 of what was fetched and when. Read key:

sgit_public_read_76f8699d4556bfb03360cbda6e61d0c7f76b07e13444704e4ced072a90a1742c:kghdiwq3

With sgit: sgit clone sgit_public_read_76f8699d4556bfb03360cbda6e61d0c7f76b07e13444704e4ced072a90a1742c:kghdiwq3.