# org-buildout

Building an AI-native organization — shared transparently as a bootstrapping reference.

This repository documents the full thought process behind TSYS Group's transition from a solo-founder operating model to an AI-agent-augmented organization. It captures the planning, architecture decisions, and operational design work behind:

- **COO → CTO transition** — delegating operations to AI agents + a human COO
- **AI agent identity architecture** — Cloudron SSO, Bitwarden credential management, per-agent RBAC
- **Infrastructure buildout** — Proxmox fleet, k8s cluster, monitoring, zero-trust networking
- **Security/compliance targets** — CMMC L3, STIG, ITAR, zero trust

## Why public?

My brand (@reachableceo) is about reachability and transparency. Most organizations hide their internal operations. I'm sharing the full process — the messy early stages, the planning docs, the architecture decisions — because I believe the future of work involves AI agents as first-class organizational members, and showing how that gets built is more valuable than hiding it.

## Documents

| Document | What it covers |
|---|---|
| [`prompt.md`](prompt.md) | Q2/Q3 2026 planning notes — org chart, AI team roles, goals, SDLC/process requirements |
| [`prompt-techops.md`](prompt-techops.md) | IaC testing model — sectestbed/preprod VM workflow |
| [`prompt-k8s.md`](prompt-k8s.md) | K8s vision — VCluster, Rancher, multi-tenancy, workload catalog |
| [`transition-map.md`](transition-map.md) | Full transition map — current state across Redmine/Discourse/Gitea/infrastructure, Q3/Q4 timeline, risk register, open decisions |
| [`agent-identity-bootstrap.md`](agent-identity-bootstrap.md) | Agent identity provisioning plan — Cloudron enrollment, API key generation, Bitwarden credential architecture, Playwright automation design |

## Context

- **TSYS Group** is the overall organization (multiple business entities under one umbrella)
- **Known Element Enterprises (KNEL)** owns and operates all IT/business systems
- The environment operates in ITAR/CMMC/TS/SCI compliance space
- The infrastructure is a Proxmox bare-metal cluster in a private residence
- The production stack runs on Cloudron (Reston VA VPS) + on-prem k8s

## Status

This is live, evolving documentation. The transition is in progress (Q3-Q4 2026).

## License

See [LICENSE](LICENSE). All content here is shared for educational/reference purposes.