Use this file to discover all available pages before exploring further.
An IXO POD is a Programmable Organisational Domain.It is a secure operating domain where people, organizations, AI agents, services, tools, Claims, evidence, credentials, workflows, and value can cooperate around a shared purpose.Use a POD when work needs to happen across multiple actors and the system must know:
who is involved
what each actor is allowed to do
which entities, Claims, evidence, and outcomes matter
which Flows run the work
which Blueprints define the rules
which agents and services may act
which decisions, payments, credentials, or state changes are allowed
A POD is not just a workspace, DAO, database, or chatbot. It is the governed domain where shared state, human roles, agent authority, workflows, and verifiable outcomes come together.
A POD operates over the IXO Graph.The graph gives the POD shared context for:
identities and roles
entities and relationships
Claims and evidence
credentials and authority
workflow state
transactions and state changes
evaluations and determinations
outcomes and learning loops
This prevents the POD from depending on disconnected spreadsheets, private databases, chat history, or agent memory as the system of record.
Do not use a POD as a loose collection of tools. Model the entities, Claims, evidence, permissions, Flows, and decisions that must be inspected or acted on.
Agents can participate in a POD, but they should not have open-ended authority.Use scoped permissions or UCAN-style delegation to define:
which agent may act
which POD, Flow, Claim, room, tool, or evidence set it may access
which capability it may use
whether it may read, evaluate, propose, or execute
when the authority expires
which actions require human approval
how the action is logged
A safe first pattern is:
Read Claim
One Claim type in one Flow
Read evidence
Only evidence linked to that Claim
Read rubric
Only the active Blueprint version
Create Evaluation Claim
Structured recommendation with citations
Propose transition
Suggest next Flow state
Execute transition
Disabled until the workflow is proven safe
Start with propose-only agents. Let humans, governance roles, or protocol-controlled checks decide when an agent recommendation becomes an approved state transition.
Evidence Review Oracle checks completeness, consistency, and missing fields
Human role
Verifier accepts, rejects, disputes, or requests more evidence
UDID
Records whether the service was accepted and whether payment should be released
The POD gives the marketplace an operating boundary. The Flow runs the work. The Blueprint defines the rules. Claims and evidence make delivery inspectable. The UDID records the decision and impact.
Do not begin by modeling the whole organization. Start with one repeatable process that creates, reviews, determines, and acts on Claims.
Keep authority explicit
Every important action should be tied to a role, credential, permission, delegation, Flow state, or governance rule.
Separate recommendation from decision
Agent outputs should be recorded as Evaluation Claims. Decisions and impacts should be recorded as UDIDs when the Flow reaches a determination point.
Use Blueprints for repeatability
Put schemas, evidence requirements, rubrics, thresholds, disqualifiers, escalation rules, and outcome logic into a Blueprint.
Design for audit and dispute
A reviewer should be able to reconstruct what happened from the POD record: actor, authority, Claim, evidence, evaluation, decision, impact, and state change.
Do not over-automate early
Keep high-value, irreversible, ambiguous, or contested actions under human or governance review until the Flow has enough operating history.