Mayor
Decides what to work on, and in what order.
Reads the backlog and queues issues by priority, dependency and capacity. Nothing starts out of order, and blocked work waits for what it depends on.
Nine specialized agents plus a Code Map, coordinated by a deterministic state machine. Each agent does one job and records the evidence for it. If anything stops, the next run picks up exactly where the issue sits — not in someone’s head.
Two weeks to first merged PR.
No agent is a generalist. Each owns one step and the evidence that justifies it; Sentinel watches all of them.
Decides what to work on, and in what order.
Reads the backlog and queues issues by priority, dependency and capacity. Nothing starts out of order, and blocked work waits for what it depends on.
Reads the issue, the repo, and the conventions.
Resolves the issue to a concrete problem: affected files, existing patterns, open unknowns. If the issue is ambiguous, it asks a person instead of guessing.
Lays out the change before code is written.
Produces a structured plan — files touched, functions modified, tests added. Work too large for one pull request is split here, before any code exists.
Writes the code.
Implements the plan, runs the tests and opens the pull request. The PR carries its own evidence: test output, diff summary, files touched.
Catches what would have been merged anyway.
Reviews the diff against your conventions, the plan and the evidence. If the evidence doesn’t hold, the work goes back to the Builder.
Respects the human-defined gate.
Merges under your branch protection: required reviews, status checks, code-owner approvals. It never elevates its own permissions, and with auto-merge off it hands the call to a person.
Watches the pipeline itself.
Tracks throughput, cost and failure patterns across every lane. It surfaces what the other agents can’t see because they only know their own step.
Writes the post-mortem.
After each issue closes, it records what happened and nominates lessons for Repo Intelligence.
Repairs failed CI checks.
Makes a bounded, targeted fix attempt when CI fails hard, then hands the issue to a person if it doesn’t hold.
Plans self-improvement work against an operator charter.
Turns your goals into a weekly plan, and work inside the limits you set ships automatically on Colony’s own repositories — see the Strategist.
Indexes the repo’s structure. Runs no model.
A deterministic index of files, functions and imports, so the Surveyor can ask what a change touches without reading the whole repo; see Repo Intelligence.
Each agent is prompted, tooled and evaluated for exactly one step, and each handoff carries evidence the next step checks. That is why Colony’s failure modes are recoverable instead of mysterious — when something goes wrong, it goes wrong in a named state with a named owner. Read the public failure catalogue.
Epics decompose into sub-issues with dependency edges, can build against their own feature branch, and get reviewed as a whole before merge — with an optional second, adversarial review pass. Gaps become new sub-issues; a human signs off at the end.
Pause, resume, retry, re-route or reset any issue with a comment; the pipeline acknowledges each command and refuses any transition the workflow does not allow. The dashboard carries the same pause, resume, retry, change-state and cancel controls.
The receipts — live ledger, recent merges, full agent transcripts — are public.