Galyarder Framework: agentic company Workflow¶
The workflow turns founder/operator intent into reviewed work across departments. It is designed for software, product, growth, finance, sales, documentation, legal, security, operations, and strategy. Coding is one surface area; the framework is broader than coding.
Foundation Protocols¶
Every workflow should keep these operating constraints visible:
- Traceability — work maps to a scoped issue, brief, plan, decision, report, or PR.
- Grounding — agents inspect the repo, source docs, user context, and relevant APIs before acting.
- Routing — work moves to the correct department, agent, skill, command, or tool path.
- Planning — non-trivial work gets a blueprint with constraints, risks, success criteria, and proof gates.
- Verification — completion claims require tests, builds, reviews, citations, screenshots, logs, workflow runs, or other evidence.
- Persistence — useful results become durable artifacts: docs, reports, release notes, campaigns, financial models, decision logs, or reusable skills.
- Human approval — public, external, financial, irreversible, access, or production-sensitive actions require the operator's approval.
Operational Modes¶
| Mode | Use case | Rules |
|---|---|---|
| BUILD | Normal product, docs, growth, finance, or engineering work | Use planning, implementation, review, and verification gates. |
| INCIDENT | Urgent breakage or production risk | Move faster, document the incident, and create follow-up cleanup work. |
| EXPERIMENT | Timeboxed exploration or prototype | Keep it reversible, mark assumptions, and avoid merging throwaway work into stable paths. |
Verification Ladder¶
Use the cheapest proof that actually verifies the claim.
- Logic-level checks: unit tests, schema validation, lint, typecheck, calculations, or static scans.
- Interface checks: API contracts, CLI output, generated files, markdown/docs rendering, or tool-response shape.
- System checks: smoke tests, browser tests, workflow runs, deploy checks, or live artifact verification.
- Human review gates: approval for public posts, external sends, security changes, production deploys, account access, and irreversible actions.
Phase 1: Intent and Context¶
Typical owners: galyarder-ceo, galyarder-cmo, product-manager, growth-strategist
Common skills: brainstorming, write-a-prd, competitor-alternatives, market-research, founder-context
- Clarify the operator's goal and the real outcome.
- Identify the buyer, user, stakeholder, system, or workflow affected.
- Define success criteria, constraints, assumptions, risks, and kill conditions.
- Create a PRD, issue, planning note, or short execution brief when needed.
Phase 2: Architecture and Blueprinting¶
Typical owners: galyarder-cto, super-architect, architect, planner
Common skills: prd-to-plan, writing-plans, ubiquitous-language, design-an-interface
- Inspect the current codebase, docs, data, or workflow surface.
- Pull current official references for APIs and platform behavior.
- Choose the smallest viable implementation path.
- Break work into vertical slices or domain-specific deliverables.
- Write decisions as ADRs, plans, or reviewable notes when the tradeoff matters.
Phase 3: Specialist Execution¶
Typical owners: elite-developer, ui-ux-designer, security-guardian, legal-counsel, financial-analyst, growth-engineer, sales-engineer
Common skills: subagent-driven-development, test-driven-development, systematic-debugging, copywriting, financial-analyst, legal-tos-privacy, social-content
- Move the active issue, brief, or task into progress.
- Execute through the correct specialist, command, tool, or subagent.
- Keep changes scoped to the outcome.
- Preserve useful technical content instead of replacing it with generic messaging.
- Leave enough context for another maintainer to inspect the result.
Phase 4: Review, Compliance, and QA¶
Typical owners: qa-automation-engineer, code-reviewer, security-reviewer, devops-engineer, legal-counsel, galyarder-cfo-coo
Common skills: requesting-code-review, verification-before-completion, security-reviewer, devops-engineer, gdpr-ccpa-privacy-auditor
- Run the relevant test, build, lint, render, security, or source-verification checks.
- Review for overreach, unsafe automation, secrets, fragile assumptions, and unverified claims.
- Confirm external/public actions are approved before sending, posting, inviting, deploying, or changing access.
- Record evidence and blockers instead of hiding uncertainty.
Phase 5: Distribution and Memory¶
Typical owners: galyarder-cmo, docs, social-strategist, release-manager, obsidian-architect
Common skills: seo-audit, schema-markup, copywriting, social-content, docs, release-manager, obsidian
- Prepare release notes, documentation, launch copy, or a distribution plan when the work is meant to ship.
- Save reusable knowledge into docs, skills, decisions, or reports.
- Update the issue/task state and name the evidence used.
- Hand the final decision back to the operator when public, external, financial, or irreversible action is involved.
Core rule: do not call work complete until the relevant artifact exists and the verification path has been exercised.