Everdict docs
Every document in this tree is listed here. Conventions (single source of truth):
CLAUDE.md + ../.claude/ (rules + skills).
Two audiences, one tree.
guide/is the product documentation — written for someone using Everdict, and the tree the public docs site publishes. Everything else here is maintainer-facing: reference pages, design records, runbooks. See architecture/docs-site.md for how the two map onto the site.
Guide — product documentation
- guide/README.md — the section index
- Get started (index) — What is Everdict · Quickstart · Your first scorecard · Bring your own agent · Bundles · Connect an agent
- Core concepts — overview · Run · Harness · Dataset · Grader & Judge · Scorecard · Verdict · Workspace · Runtime
- Your workspace (index) — Workspace agents · What the agent knows · Filesystem · Environments · Secrets · Image registry · Browser profiles
- Integrations (index) — MCP · Claude Code plugin · Running Codex · Desktop app
- Operate (index) — Tracker · Schedules · Views · Durability · Products & releases · Budgets · Notifications
- Self-hosting — overview
Start here (maintainers)
- architecture/overview.md — the architecture map (spine, eval loop, extension points)
- architecture/collaboration.md — module collaboration diagrams (Mermaid): bird's-eye dependency/eval-loop/control-plane + one detailed diagram per package & app
- architecture/execution-scoring-orchestration.md — the three concerns, and why they stay apart
- dev.md — local development: persistent Keycloak + control-plane API + web hot-reload (
scripts/dev/up.sh)
Surfaces
- api.md — the control-plane HTTP API (
apps/api): runs, scorecards, datasets, judges, runtimes, schedules, bundles, workspace integrations, runners — asyncPOST /runs+ poll/webhook - mcp.md — the agent-facing MCP server (
/mcp): OAuth-protected (Keycloak) + API keys, role-gated, full BFF↔MCP parity - web.md — the SaaS web (
apps/web, Next.js FSD, Linear-style): Keycloak login,/{workspace}/…dashboard, workspace settings, personal account page - architecture/desktop-app.md — the desktop app (
apps/desktop, Electron): web-parity shell + resident self-hosted runner + one-click pairing + auto-update + 3-OS release CI - architecture/one-call-sdk.md — reproduce env + N trials + score → verdict in one
await - everdict-otel.md —
@everdict/otel: sending traces to Everdict (migration recipes)
Eval entities
- registry.md — versioned SSOT (
@everdict/registry): harnesses · datasets · judges · runtimes,(tenant, id, version), immutable versions,_sharedfallback - datasets.md — harness-agnostic eval-case bundles (import, provenance, recipes)
- judges.md — Agent Judges:
model(LLM/VLM call) |harness(delegate an agent), applied per-trace on scorecards - models.md — workspace-registered LLM models (provider · model · baseUrl ·
apiKeySecret), referenced by id from a judge/harness - runtimes.md — tenant-registered execution infra (
local|nomad|k8s); "my machine" → self-hosted runner - scorecards.md — batch evals (dataset×harness →
Scorecard+summary), baseline↔candidate diff, push/pull trace ingest, leaderboard - suites.md — suites & version regression (
everdict suite, scorecard diff) - command-harness.md — declarative
commandharness: bring any CLI agent as aHarnessSpec, no code adapter - service-harness.md — service-topology harnesses (multi-service + browser/OS target env), Nomad/K8s, OTel/MLflow trace
- architecture/harness-taxonomy.md — Template (category) + Instance, pins and resolution
- architecture/harness-playground.md — interactive test cases against a live harness session
- architecture/eval-domain-model.md — the Dataset / Rubric / Grader split
- architecture/standard-task-formats.md — bring an existing agent benchmark, run it managed
- architecture/bundles.md — one-shot self-serve registration (harness + benchmark + runtime as a unit)
- architecture/managed-case-image.md — the
case.imageagent-bootstrap contract
Scoring & verdicts
- trust-certification.md — the nightly invariant suite: what "a defensible verdict" is mechanically pinned to
- architecture/trial-based-verdict.md — pass@k, flakiness & statistical regression
- architecture/judge-input-contract.md — declare, preview, dry-run
- architecture/judge-placement-locality.md — judge runtime selection + store-locality placement
- architecture/scoring-plane-revisions.md — the scoring plane as revisions (MVCC)
- architecture/scorecard-analysis-views.md — scorecard analysis + saved Views (SSOT)
- architecture/leaderboard-model-dimension.md — model as a first-class dimension (harness × model × benchmark)
- architecture/streaming-case-pipeline.md — kill the batch barriers, release compute early
Execution & placement
- execution-backends.md — Backend (placement) vs Driver (in-sandbox), multi-cluster routing, capacity-aware + tenant-fair scheduling, trust zones, secrets/budgets, autoscaling
- orchestration.md — durable control plane on Temporal (Direct/Temporal orchestrators + worker; powers scheduled evals)
- architecture/execution-model.md — Run as the platform's universal execution record
- architecture/run-as-primitive.md — scorecard = orchestration over runs
- architecture/execution-master-plan.md — PLAN OF RECORD: the five designs sequenced into waves
- architecture/scheduled-evals.md — run a scorecard on a cron schedule (regression monitoring)
- architecture/batch-resilience.md — transient retry · restart resume · retry-failed
- architecture/temporal-batch-orchestration.md — SHIPPED, live-verified against a real Temporal
- architecture/work-queue.md — workload visibility (running/queued/next-scheduled per runtime lane)
- architecture/multi-replica.md — running more than one control-plane replica
- architecture/completion-stream-callback.md — front-door completion: stream & callback modes
- architecture/front-door-generalization.md — absorbing the control plane into the topology front door
- architecture/target-acquisition-generalization.md — the target axis
- architecture/heterogeneous-topology-placement.md — infra-agnostic, capability-driven placement
- architecture/nomad-colocated-topology.md — Nomad co-located service topology
- architecture/topology-portability.md — one
HarnessSpec, identical semantics on every runtime - architecture/portable-harness-runtime.md — one definition, runs whole anywhere (managed or the user's laptop)
- architecture/suna-harness-gaps.md — Suna (Kortix) as a harness: the mapping and the gaps it exposes
Self-hosted runners
- architecture/self-hosted-runner.md — run a workspace's harness/dataset on your own machine
- architecture/self-hosted-runtime-and-runners.md — a pool you target, workers that drain it
- architecture/self-hosted-service-runner.md — drive service (topology) harnesses on your own machine
- architecture/runner-distribution.md — a one-liner install for a headless machine
- architecture/runtime-inspection.md — a live cluster read model
- runbooks/github-self-hosted-runner.md — runbook: GitHub self-hosted runner co-registration
Environments & images
- architecture/agent-worlds.md — persistent environments over ephemeral sandboxes
- architecture/browser-profiles.md — a real interactive remote browser, cookies reused in eval
- architecture/environment-image-store.md — managed eval-environment images as store assets
- architecture/managed-image-store.md — the managed image store
- architecture/workspace-image-registry.md — classify + publish harness images (BYO registry)
- sandbox-auth.md — how
claudeauthenticates across backends (subscription / token injection)
Observability
- architecture/native-observability.md — Everdict as the trace platform (OTel-first)
- architecture/otel-trace-model.md — spans are the record;
TraceEventis a projection - architecture/live-observability.md — watch a run while it runs
- architecture/trace-sink.md — export judged results to the team's observability platform
- architecture/replay.md — record a run so the analysis phase can re-watch it
- architecture/notifications.md — job completion via web inbox + desktop native
- architecture/workspace-pulse.md — the home screen's one read
Work, knowledge & the product axis
- tracker.md — the eval tracker: Initiative ⊃ Project ⊃ Issue (the "why we evaluate" layer)
- architecture/product-timeline.md — Product ⊃ Release over an imported version ledger (the "what we ship" axis)
- architecture/workspace-filesystem.md — one isolated file tree per workspace, attributed revisions, three-way merge
- architecture/knowledge-graph.md — the workspace knowledge graph
- architecture/capability-store.md — the capability store (SSOT)
- architecture/analysis-studio.md — natural-language analysis, artifacts, scheduled reports over Views
- architecture/event-plumbing.md — the platform's nervous system: facts, one log + N cursor consumers, subscriptions
- architecture/ownership-protocol.md — the ownership protocol
- architecture/dependency-store-roles.md — plumbing vs data, and data-as-condition
Agents
- architecture/agent-automation.md — platform-triggered agents, fleet observability, the crafting studio
- architecture/agent-conversations.md — a conversational, multi-turn agent over the eval control plane
- architecture/agent-teams.md — message-based collaboration + proactive agents
- architecture/agent-execution-auth.md — a credential for request-less agent turns
Tenancy, auth & integrations
- auth.md — the control-plane-owned auth core (
@everdict/auth): OIDC (Keycloak) + API keys →Principal{workspace,roles}, role-based authZ - tenancy.md — tenant access layer: workspace = tenant = trust zone, tenant-owned entities, scoped reads
- secrets.md — workspace secret management: encrypted-at-rest model/provider keys, injected per-tenant into runs
- architecture/workspace-scoped-integrations.md — workspace-owned GitHub App + Mattermost (replacing personal Connected accounts)
- architecture/github-actions-trigger.md — CI-fired evals + zero-input repo↔service integration
- runbooks/corporate-proxy.md — runbook: deploying behind a corporate proxy
Billing & metrics
- usage-metering.md — BYO model gateway + Everdict-owned budget: usage-proxy sidecar recovers per-run token usage →
budget.settle - architecture/usage-metering.md — the billing surface (meter-only, durable)
- architecture/metrics-commercialization.md — two products, three bundles, one closed scrape
Database migrations
- migration/README.md — migration discipline (expand → deploy → contract, preflight checks)
- Per-migration preflight records: 0001_create_runs · 0002_create_harnesses · 0003_create_tenant_keys · 0004_harness_tenant · 0023_connections_owner (superseded)
The public docs site
- architecture/docs-site.md — information architecture for the Docusaurus site published from this tree
- architecture/docs-quality-rubric.md — the scoring instrument used to close the gap to Mastra
Internals — historical design records
Written during the re-architecture review and not maintained since. The umbrella migration SHIPPED on 2026-07-10, so the
packages/{core,suite,run-case,billing}andapps/api/src/core/**paths they cite name the pre-migration layout. Read them for the reasoning, not the addresses.
- architecture/rearchitecture/00-target-architecture.md — the target architecture (SHIPPED)
- Per-domain collaboration models: auth · billing · comment · dataset · failure · harness · integrations · judge · member · notification · ops · run · runner · runtime · schedule · scorecard · secret-key · trace · view
- architecture/api-route-modularization.md — splitting the monolithic
server.tsinto resource route modules (SHIPPED) - architecture/rich-domain-core.md — the domain expresses itself