Stage 27 — Claude and Devin as workers over ACP

Stage 27 — Claude and Devin as workers over ACP An architecture diagram generated by Archify. D.A.V.E. · delegate(agent=…) · /agent · hey-dave D.A.V.E. delegate(agent=…) · /agent Dispatch card · approve each charge · hey-dave · 1 per provider Dispatch card approve each charge 1 per provider AcpChild · SubagentRunner child · hey-dave AcpChild SubagentRunner child AcpClient · JSON-RPC over stdio · hey-dave AcpClient JSON-RPC over stdio claude-agent-acp · Agent SDK adapter · Your signed-in agents claude-agent-acp Agent SDK adapter claude · your own sign-in · Your signed-in agents claude your own sign-in devin acp · your own sign-in · Your signed-in agents devin acp your own sign-in Permission bridge · permission · fs · terminal · hey-dave Permission bridge permission · fs · terminal PermissionGate · role scope · hard denies · hey-dave PermissionGate role scope · hard denies Checkpoints · /rewind · hey-dave Checkpoints /rewind charge approved session/prompt spawn runs unmodified spawn agent requests allow · deny · ask writes recorded report hey-dave Your signed-in agents Legend Backend Database Security Message bus External

Routing

  • • delegate(agent=…) wins, then agents.routes, then local
  • • quartermaster and scribe stay local
  • • New ACP agents added by config

Compliance

  • • No login screen; credentials never read or injected
  • • Honest clientInfo: hey-dave
  • • Agents run as installed; no bypass modes

Outside the bridge

  • • Edits an agent makes itself are listed in the report
  • • git status diff; not covered by /rewind