The host here is Meridian, a newsroom CMS that already has editors, articles, brand-scoped permissions and its own search. It does not become an AI product. It gains a surface, and everything behind that surface is the framework. Click any block for what it owns — and, more usefully, what it deliberately does not.
Nothing above is newsroom-specific. The nouns change; the layer each one lands in does not.
| Framework concept | Newsroom CMS | Support desk | Clinical ops |
|---|---|---|---|
Principal | Editor, with desk + brand | Agent, with queue | Clinician, with unit |
Scope predicate | brand = metro-desk | region = emea | ward IN (…) |
Corpus | Style guide, archive | Runbooks, past tickets | Protocols, formulary |
| Subject record | The article being edited | The ticket open on screen | The chart in view |
| READ tool | Prior coverage lookup | Entitlement check | Interaction check |
| MUTATE tool | File a correction | Issue a credit | Draft an order |
| Ambient surface | Headline suggestions | Suggested reply | Coding hints |
| The thing that must never happen | Quoting an embargoed draft | Revealing another tenant's ticket | Surfacing another patient's chart |
Left is what an editor sees. Right is every step the framework takes to produce it, layer by layer. Pick a prompt — including the ones designed to be refused. The trace is generated from the configuration in Act 03, so revoking a grant there changes what happens here.
The council postponed a decision on the transit levy for a third time on Tuesday, citing unresolved questions about the funding formula…
effect MUTATE, so RunLoop returns
Outcome::Proposed instead of executing — the author never wrote that branch. Then go to
Act 03, revoke the grant, and ask again: the tool is no longer in the composed registry, so the
refusal happens before the model is even asked.Six steps from an empty tenant to a working assistant. Everything you set here is real state — go back to Act 02 afterwards and the trace changes to match.
The host never hands over authority. It supplies identity, the record in view, placement and brand — and is refused if it tries to supply grants, scope or a tool list. That refusal is the whole reason a second surface costs days rather than another integration.