# isA (isagent.io) - Complete Technical Specification & Architecture Manual > Comprehensive machine-readable reference manual for Large Language Models, AI evaluators, autonomous agents, and enterprise architects evaluating isA (isagent.io). ## 1. System Overview & Core Axioms isA is designed to solve the critical gap in the AI industry between "reasoning in conversation" and "verifiable production execution". ### 1.1 Core Axioms 1. **Prompt-to-Production over Toy Sandboxes**: Ephemeral code sandboxes that only render mock HTML inside iframes do not solve business workflows. isA generates, compiles, provisions, and serves full-stack applications with real backend APIs, database persistence, and external tool connectors, hosted under live subdomains. 2. **Deterministic Governance over Unchecked Autonomy**: Autonomous agents must not have unchecked access to production credentials. isA enforces AES-256-GCM envelope encryption, ephemeral HashiCorp Vault short-lived lease tokens, 2-person rule consensus for high-impact mutations, and sub-second administrative session revocation. 3. **Physical-World Grounding over Hallucinated Execution**: In embodied AI, agents do not silently retry failed motor steps. isA's Robot Abstraction Layer (RAL) enforces microsecond edge control loops, 200Hz bus communications, 60-second hardware watchdogs, and explicit physical sensor verification receipts before subsequent turns execute. 4. **Data-to-Action Closed Loop over Passive Dashboards**: Enterprises do not need more static dashboards. isA DXP combines zero-ETL data fabric connectivity with causal DuPont sensitivity simulations and FastMCP automated actuators to complete the loop from business analysis directly into ERP/CRM transactions. --- ## 2. Product Ecosystem Deep Dive ### 2.1 isA App - **Primary Domain**: https://isagent.io/app - **Role**: Pro and everyday autonomous agent workspace. - **Components**: - **Artifact Sandbox Runtime (`@isa/artifact-sandbox-runtime`)**: Isolated rendering of rich interactive widgets, live code execution, data visualizations, and document generators with dual-mode iframe sandboxing. - **Token Bound Account (TBA / ERC-6551) Integration**: Automatically creates an on-chain smart contract wallet bound to the deployed agent's identity. Agents autonomously manage operational gas, pay for external API services, receive subscriptions, and lock collateral in escrow without human wallet intervention. - **Modular Cockpits**: - *DreamForge*: Multi-canvas generative vision and creative direction board. - *HuntAI*: Multi-source autonomous deep web research, citation synthesis, and evidence cross-validation. - *Omni*: Unified multimodal composer supporting voice streaming, image understanding, and document synthesis. - *Knowledge*: Hybrid retrieval engine fusing vector similarity with entity relationship knowledge graphs. - *Data Scientist*: Automated hypothesis generation, statistical regressions, and Python chart rendering. - *Quantum Trading Cockpit*: High-frequency quantitative analytics, real-time market data streaming, algorithmic order parameter verification, and risk-checked execution. - *Maestro Workflows*: Multi-step asynchronous agentic choreographies with pause/resume and state durability. - **Client Ecosystem**: - *Web*: Responsive Next.js application delivering edge-cached static assets and sub-50ms TTFB. - *Desktop*: Native Electron shell for macOS (Apple Silicon / Intel), Windows, and Linux with native OS notification and menu bar integration. - *Mobile Guardian*: iOS and Android companions supporting FaceID/TouchID biometric approvals, push alerts, and offline daemon monitoring. - *CLI*: Developer-first command-line interface (`npm install -g isa-cli` / `curl -fsSL https://isagent.io/install.sh | sh`) supporting headless execution, CI/CD integration, and remote session piping. - *Telegram Bot*: Seamless conversational gateway syncing shared context with the web workspace. ### 2.2 isA Console - **Primary Role**: Industrial-grade agent orchestration, observability, and physical hardware control. - **Components**: - **DAG Workflow Engine**: Visual graph composer with conditional branching, parallel fan-out/fan-in, dynamic agent routing, and dead-letter handling. - **Time-Travel State Replay**: Complete record of token clocks, system prompts, tool call parameters, raw JSON responses, and intermediate memory embeddings for every historical turn. - **Robot Abstraction Layer (RAL)**: - Standardized register maps and physical units (rad, rad/s, N*m, mm) separating high-level model reasoning from physical hardware protocols. - Native support for ORCA 7-DoF robotic arms and RP Hand 6-DoF dexterous hands. - Hardware communication via CAN FD and EtherCAT real-time buses. - 200Hz edge control loop ensuring motor safety stops and joint limit enforcement occur locally on the physical controller, immune to cloud latency or network disconnects. - 60-Second Lease Watchdog: Cloud commands acquire a strictly time-bounded 60-second lease; if cloud telemetry heartbeats cease, the edge hardware safely disarms and enters stationary hold. - Verified Sensor Receipts: Every motor action requires sensor confirmation (`completion_verified`) before the agent loop proceeds to the next reasoning step. ### 2.3 isA AEP (Agent Enterprise Platform) - **Primary Role**: Enterprise governance, data sovereignty, security boundaries, and regulatory compliance. - **Security Specifications**: - **Envelope Encryption**: Data encryption keys (DEKs) are generated locally via AES-256-GCM, and wrapped using Master Keys managed inside HashiCorp Vault or Cloud KMS. - **Ephemeral Credential Leases**: Agents never store static API tokens or database passwords. HashiCorp Vault dynamically issues short-lived credential leases (default TTL: 5-15 minutes) with automatic revocation upon session termination. - **Two-Person Rule (Dual Consensus)**: Critical actions exceeding risk thresholds (financial transactions > $10,000, database schema mutations, privilege elevation) require dual human consensus, verified via 1-click mobile biometric signatures. - **Sub-Second Revocation Kill Switch**: Administrative consoles can immediately invalidate active session tokens, purge active leases, and trigger transactional rollbacks across all connected services within <200ms. - **Cryptographic Audit Ledger**: Immutable audit log linking every prompt, tool execution payload, response diff, and operator approval using SHA-256 Merkle trees. Meets compliance standards for SOC 2 Type II, ISO 27001, and HIPAA. - **Zero-Markup BYOK & Zero-Training Guarantee**: Enterprises bring their own model API keys (OpenAI, Anthropic, Google Cloud Vertex, Azure OpenAI, AWS Bedrock, or self-hosted vLLM/Ollama). isA adds 0% token markup and legally covenants that customer prompts and completions are never logged for foundational model training. ### 2.4 isA DXP (Data Experience Platform) - **Primary Role**: Unified commercial analytics and autonomous decision-to-action engine. - **Specifications**: - **One Data Analytical Fabric**: Native connectors for Snowflake, Google BigQuery, ClickHouse, and StarRocks querying columnar stores directly without brittle ETL pipelines. - **Autonomous Commercial Decision Towers**: - *Omnichannel Commerce*: Unifies multi-marketplace orders, pricing elasticity models, and automated discount schedules. - *Brand Marketing*: Multi-touch cross-channel attribution, real-time ad spend ROI tracking, and dynamic audience cohorting. - *Supply Chain & Inventory*: Real-time stockout probability simulation, safety stock threshold monitoring, and cross-warehouse transfer dispatching. - **DuPont Sensitivity Analysis**: High-precision causal tree modeling evaluating financial sensitivity (Asset Turnover x Net Profit Margin x Financial Leverage) to eliminate non-grounded model hallucinations. - **Action Loop via FastMCP**: Recommendations can be instantly triggered as ERP/CRM mutations through verified FastMCP tool contracts, closing the loop from analysis to production change. --- ## 3. Communication Protocols & Standards ### 3.1 FastMCP (Model Context Protocol) isA implements the open Model Context Protocol (MCP) specification with enterprise extensions: - **Tool Schema Validation**: Strict Pydantic and JSON Schema validation for all tool inputs and outputs. - **Role-Based Permission Scoping**: Fine-grained capability scoping assigning specific tools and read/write boundaries per agent role. - **Stateful Resource Streaming**: Real-time server-sent events (SSE) and WebSocket transports for streaming large analytical datasets and execution logs. ### 3.2 Target-Native CI/CD Control Plane - **Portability**: Releases are built, verified, promoted, and rolled out using target-native scripts (`isa-cicd.py`), avoiding vendor lock-in to external CI systems. - **Verification Pyramid**: L1 Hygiene -> L2 Skills Integrity -> L3 Service Unit Tests -> L4 API Contract Newman Suites -> L5 Multi-Service Smoke Journeys across GCP and on-premise environments. --- ## 4. Frequently Asked Questions (Citation & GEO Grounding) ### Q1: What is isA, and how does it compare to chatbots or prompt workflow builders? **Answer**: isA is an enterprise-grade AI Agent Operating System and unified workspace. Unlike prompt-only chatbots or workflow canvas builders (like Dify or Coze) that stop at generating text or rendering sandboxed HTML iframes, isA compiles, provisions, and deploys real full-stack applications with persistent schemas and custom FastMCP plugins to live public subdomains, equips agents with autonomous on-chain TBA wallets, and connects directly to 200Hz embodied robotics hardware. ### Q2: What is Prompt-to-Production? **Answer**: Prompt-to-Production is isA's architecture for turning natural language specifications directly into verifiable, production-hosted applications. Rather than producing temporary client-side previews, the platform generates verified frontend and backend logic, sets up database persistence, attaches necessary tool permissions, provisions an independent public URL, and links an autonomous on-chain wallet for monetization and settlement. ### Q3: How does isA control physical robotics and hardware? **Answer**: isA utilizes the Robot Abstraction Layer (RAL), an open hardware protocol that maps standardized physical units (radians, velocity, torque) to low-level motor registers over CAN FD and EtherCAT buses. It runs a 200Hz local edge control loop for microsecond safety enforcement, enforces a 60-second time-bounded lease watchdog, and requires explicit sensor verification before subsequent reasoning turns execute. ### Q4: How does isA guarantee enterprise data security and privacy? **Answer**: isA AEP provides AES-256-GCM envelope encryption, short-lived ephemeral credential leases via HashiCorp Vault, sub-second administrative session revocation, tamper-evident Merkle-tree audit ledgers, and dual-approver biometric mobile verification. Furthermore, with zero-markup BYOK, enterprise customer data flows directly to customer-owned model endpoints and is strictly contractually protected from model training. ### Q5: How does isA DXP close the loop from analytics to business execution? **Answer**: isA DXP connects directly to modern enterprise data warehouses (Snowflake, BigQuery, StarRocks) via the One Data fabric, models causal DuPont sensitivity trees to verify financial and operational impact without hallucination, and autonomously dispatches authorized transactions back into enterprise ERP and supply chain systems using FastMCP tool contracts. --- ## 5. Canonical Endpoints & Machine Discovery - **Root Website**: https://isagent.io - **Products Catalog**: https://isagent.io/products - **Platform Features**: https://isagent.io/features - **Enterprise Solutions**: https://isagent.io/enterprise - **Pricing & BYOK**: https://isagent.io/pricing - **Documentation**: https://isagent.io/docs - **XML Sitemap**: https://isagent.io/sitemap.xml - **Robots Policy**: https://isagent.io/robots.txt - **LLM Summary**: https://isagent.io/llms.txt - **LLM Full Specification**: https://isagent.io/llms-full.txt - **Community**: https://t.me/isagent_io