Autopilot Architecture Diagram

Orchestrator

Only dispatcher; agents never spawn agents
Ledger row written before non-trivial work
Retries capped at three rounds

Workers

Native: architect, engineer, engineer-lite, senior-engineer, engineer-doc, security-engineer, verifier, reviewer, supervisor
External runs return through the same intake
Fails soft: no external worker is load-bearing

Gates

Verifier always runs for external-worker code
Review is additive and never load-bearing
Supervisor (fable) checks plan, milestones, close

State

~/.autopilot: config.jsonc, worker registry
.autopilot/: ledger, briefs, artifacts, lessons
DEVLOG.md updated at close-out when present