BuildWithHQ structured knowledge

GoClaw Knowledge

Governed AI operator architecture covering identity, Universal Inbox work claiming, secure context assembly, planning, approval, execution, supervision, and guardrails.

8 canonical knowledge unitsHTML + Markdown

GoClaw is a governed participant in the BuildWithHQ security model. It does not bypass DataRoles, field permissions, approval requirements, or canonical action services.

Actions And Approvals

GoClaw suggestion batches and human approvalGoClaw groups proposed AI actions into a suggestion batch tied to one Inbox item and its activity version, allowing BuildWithHQ to validate, review, approve, reject, or escalate the work before execution.

Execution

GoClaw governed action execution and stale-context fenceApproved GoClaw suggestions execute through the BuildWithHQ AI action/runtime bridge with Inbox, batch, execution, and activity-version linkage; stale context blocks finalization or execution when the underlying Inbox activity has changed.

Overview

GoClaw governed AI operator modelGoClaw is BuildWithHQ’s governed AI operator pattern: it works from permitted Inbox/context, prepares actions, uses approval and freshness controls, and executes through canonical action services rather than mutating data directly.

Planning

GoClaw planning and model callGoClaw planning uses routed AI models to classify the work, estimate risk/confidence, draft a response, and propose structured actions without performing application mutations during the planning step.

Secure Context

GoClaw secure context assemblyBefore planning, GoClaw assembles a bounded context package from the Inbox source and permitted records, relationships, activity, conversations, files, calendar, knowledge, and secured RAG under one authorization envelope.

Security And Guardrails

GoClaw security and guardrailsGoClaw inherits BuildWithHQ’s server-derived identity, tenant/location/DataRole permissions, AI-specific retrieval permissions, approval controls, secret boundaries, and audit requirements; it is never a privileged bypass.

Team Supervision

GoClaw team identity and supervisionGoClaw workers can be represented as supervised team participants with explicit owning users, role membership, assignment rules, and operational state instead of anonymous system-wide bots.

Universal Inbox

GoClaw Universal Inbox claim loopGoClaw work is intended to enter through the Universal Inbox, where eligible items are claimed, leased, heartbeated, and released under user/role permissions instead of being handled through a direct ungoverned inbound shortcut.