Tentrico documentation
Concepts and guides for the AI software engineering control plane: requirements, missions, Human Tasks, evidence and the policy model behind them.
GET STARTED
What is Tentrico?
A control plane that turns intent into verified software outcomes.
Tentrico is a software-delivery control plane. It coordinates requirements, AI agents, human decisions, testing, environments, releases and evidence, so that what you asked for can be shown to be true.
It optimises for Intent → Evidence rather than Prompt → Code. Code generation is one execution capability inside a larger governed delivery system.
Tentrico is designed to sit over the tools you already use for source control, CI/CD, infrastructure, security and observability, not to replace them. It owns orchestration, traceability, policy, decisions, human escalation and evidence.
Product principles
The rules every part of Tentrico is designed to preserve.
- Intent is represented as Requirements, and requirements must stay internally consistent.
- Important ambiguity becomes an explicit Decision.
- Work is executed through Missions and Tasks.
- Agents escalate unavoidable human dependencies through Human Tasks.
- Completion requires Evidence mapped to acceptance criteria. An agent saying “done” is never sufficient.
- Build artifacts are immutable and promoted, not rebuilt per environment.
- Production access is governed, least-privileged and auditable.
- Agents are workers, not authorities: independent verification stays separate from implementation.
- Every important state transition is recoverable and recorded as an Event.
From intent to evidence
How a single request moves through Tentrico.
Every piece of work follows the same path, whether it starts as a new requirement, a failed verification, a security finding or a bug.
- Intent
- Requirement
- Integrity check
- Mission
- Build
- Review & test
- Evidence
- Verified
- You describe an outcome in natural language. Tentrico proposes a structured, testable requirement with acceptance criteria.
- An integrity check looks for duplicates, conflicts and ambiguity before any implementation starts.
- An approved requirement creates a Mission, which is planned into tasks and assigned to agents.
- Work is reviewed by an agent other than the one that built it, and tested against the acceptance criteria.
- Evidence is linked back to each criterion. The requirement is verified only when that evidence holds.
See this path end to end on the How It Works page. Watch one intent become verified
CORE CONCEPTS
Requirements
Living, versioned statements of what must be true.
A requirement is a statement of something that must be true. Requirements are added incrementally in natural language and normalised into structured proposals with rationale, priority, acceptance criteria, risks and dependencies.
- Each requirement has a stable ID, for example REQ-AUTH-014, and an immutable version history. Changes create versions rather than overwriting.
- A requirement stays Proposed until it passes integrity analysis and any required human approval.
- Requirements link to the work, tests, reviews, decisions, releases and evidence that relate to them.
Before a Mission is created, every new or changed requirement passes an integrity check:
| Check | Example |
|---|---|
| Contradiction | “Must” versus “must not”, or mutually exclusive behaviour. |
| Duplicate or overlap | An existing requirement already covers some of the intent. |
| Constraint violation | New behaviour breaks a security, privacy, architecture or performance constraint. |
| Dependency gap | The requirement assumes a capability that doesn’t exist yet. |
| Supersession | New intent replaces an older requirement. |
Decisions
Durable human resolutions of conflict and ambiguity.
A conflict or important ambiguity creates a structured Decision rather than a chat interruption. The decision shows the competing requirements, what they affect, the available options, a recommendation with its rationale, and the consequence of each choice.
- Reject the new requirement.
- Replace or supersede an existing requirement.
- Introduce a scoped exception.
- Modify both requirements.
- Defer the decision, or provide a custom resolution.
Approved decisions are kept as immutable records of what was decided, why and by whom. Agents receive them as project context, so they don’t later simplify away an intentional constraint.
Missions and tasks
The execution container for approved work.
A Mission is created from an approved requirement, a requirement change, a failed verification, a security finding, a bug or an explicit objective. It moves through Understand → Plan → Build → Verify → Deliver.
- Planning breaks the work into tasks with dependencies. Tasks can run in sequence or in parallel.
- Agents are assigned through explicit policy and capability routing.
- Work runs in isolated contexts, such as separate Git worktrees, where appropriate.
- Independent review is normally done by a different agent from the implementer.
- Mission status comes from real task states, tests, approvals and dependencies. There are no invented progress percentages.
Human Tasks
A structured way for work to wait for a person, then resume.
When an agent or workflow needs a person, it doesn’t just stop. It creates a Human Task, waits, and declares what response it needs and exactly what happens after you respond.
| Type | Examples |
|---|---|
| Approval | Install a dependency, run a migration, merge, deploy. |
| Decision | Choose a provider, an architecture option or a business rule. |
| Action | Configure DNS, invite a user, create an external account. |
| Information | Provide copy, a domain or a business detail. |
| Credential | Configure a secret through a secure flow. The agent receives a reference, never the value. |
| Authentication | Complete an OAuth or browser sign-in. |
Completing a task isn’t automatically resolving it. The workflow checks that the requested condition now holds and either resolves the task or returns it to Waiting with an explanation.
- Created
- Waiting
- Submitted
- Validating
- Resuming
- Resolved
Verification and evidence
How completion is proved, and how proof goes stale.
Evidence is the bridge between “the agent changed something” and “the requirement is satisfied”. Each acceptance criterion can reference one or more pieces of evidence.
| Evidence | Examples |
|---|---|
| Tests | Unit, integration and end-to-end tests. |
| Visual | Screenshot comparison against an approved design. |
| Security | Static analysis, dependency and authorisation checks. |
| Environment | Observed configuration or deployed resource state. |
| Human | UAT approval or business sign-off. |
| Runtime | Production telemetry showing the requirement still holds. |
Evidence has freshness. When relevant code, configuration, design or infrastructure changes, the evidence behind a requirement can become Stale and trigger re-verification.
DELIVERY
Environments
Governed, first-class runtime contexts.
An Environment represents everything that makes up a runtime context: its endpoint, release, deployment provider, data stores, infrastructure, configuration, secret references and policies.
| Environment | Default posture |
|---|---|
| Local | High agent autonomy. Destructive actions are still controlled. |
| Development | High automation, aware of shared resources. |
| QA | Automated deployment and testing with controlled changes. |
| UAT | Human approval for promotion; business validation. |
| Production | Read-mostly for agents. Deployment or changes need explicit approval. |
| Preview | Temporary and scoped to a mission, removed after use. |
“Implemented”, “verified in QA” and “verified in Production” are tracked as different states for the same requirement.
Releases
Build once, promote the same artifact everywhere.
- Source
- Build once
- Immutable artifact
- QA
- UAT
- Production
- Application artifacts are built once and promoted through environments, never rebuilt per environment.
- Infrastructure and configuration are declarative and version controlled. Plans are reviewed before they are applied.
- Environment secrets are referenced, never packaged.
- A release brings together application artifacts, infrastructure, migrations, a requirement manifest and verification reports.
GOVERNANCE
Policy and security model
Agents get capabilities, not uncontrolled access.
Every agent request passes through a policy engine that considers identity, workspace, environment, capability, risk, required approvals and audit before a connector reaches a remote system.
- Agent request
- Policy engine
- Connector
- Remote system
- Agents receive capabilities rather than raw credentials wherever possible.
- Production defaults to least privilege and read-only agent access.
- High-risk actions require explicit approval according to policy.
- Secrets don’t belong in chat transcripts, task descriptions or diagnostics.
- Instructions found in repositories or remote content are never treated as authorisation.
- Policy decisions are enforced independently of model output.
The Security page covers trust boundaries and deployment models in more depth. Explore security
Events and audit
An immutable record of every meaningful change.
Every important state transition emits a structured, immutable event. Events feed the workspace dashboard, the audit timeline, notifications and requirement health.
| Area | Events |
|---|---|
| Requirements | created, updated, conflict_detected, approved |
| Missions | started, blocked, resumed, completed, failed |
| Human Tasks | created, submitted, verified, reopened, resolved |
| Verification | passed, failed, stale |
| Deployments | started, completed, rolled_back |
REFERENCE
Integrations
The tools Tentrico is designed to coordinate.
Integrations are capability-based connectors behind policy enforcement. Tentrico coordinates mature tools rather than rebuilding them. Availability will vary by release.
| Category | Intended options |
|---|---|
| AI coding agents | Codex, Claude Code, OpenCode, with extensible agent adapters |
| Source control | Git and GitHub, then other hosts |
| CI/CD | GitHub Actions, then other CI systems |
| Testing | Playwright for UI and end-to-end testing |
| Infrastructure | Terraform or OpenTofu, with other declarative tools |
| Observability | Sentry, with other providers optional |
| Project tracking | Native requirements, with optional Jira or Linear sync |
MCP can extend Tentrico broadly, but an MCP server never bypasses Tentrico policy.
Workflow states
Explicit, recoverable states for missions and Human Tasks.
Mission and task execution:
- Queued
- Running
- Waiting for agent
- Waiting for human
- Resuming
- Verifying
- Complete
Missions can also end Failed or Cancelled. Human Tasks can end Cancelled, Expired or Failed.
- Transitions are validated centrally and are safe to repeat.
- Restarting doesn’t lose blocked work.
- A duplicate callback or double-click never resumes a workflow twice.
Glossary
The shared vocabulary used across Tentrico.
| Term | Definition |
|---|---|
| Intent | A human expression of a desired outcome, before it is normalised. |
| Requirement | An approved statement of what must be true. |
| Acceptance criterion | A specific, verifiable condition of satisfaction. |
| Decision | A durable human resolution of ambiguity or conflict. |
| Mission | Coordinated execution undertaken to change project state. |
| Human Task | A structured human dependency that can pause and resume a workflow. |
| Evidence | Proof used to determine whether a requirement is satisfied. |
| Requirement health | The current, evidence-derived status of a requirement. |
| Environment | A logical runtime context such as QA or Production. |
| Release | An immutable, promoted collection of artifacts. |
| Connector | An adapter that exposes an external system’s capabilities through policy. |
Can’t find what you need?
Installation guides and references arrive with the first release. Until then, we’re happy to walk you through Tentrico.