mrcharles be5d840c44 docs: clarify BW-only credential model + reachableceo role
- BW access info is the ONLY secret on disk; everything else in BW
- reachableceo session stays as Charles's personal assistant
- TSGCOO session runs the provisioning + holds BW access info
- Discourse admin via system username (not reachableceo)
- reachableceo will handle ticket transitions to new agents

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
2026-08-13 10:49:07 -05:00

org-buildout

Building an AI-native organization — shared transparently as a bootstrapping reference.

This repository documents the full thought process behind TSYS Group's transition from a solo-founder operating model to an AI-agent-augmented organization. It captures the planning, architecture decisions, and operational design work behind:

  • COO → CTO transition — delegating operations to AI agents + a human COO
  • AI agent identity architecture — Cloudron SSO, Bitwarden credential management, per-agent RBAC
  • Infrastructure buildout — Proxmox fleet, k8s cluster, monitoring, zero-trust networking
  • Security/compliance targets — CMMC L3, STIG, ITAR, zero trust

Why public?

My brand (@reachableceo) is about reachability and transparency. Most organizations hide their internal operations. I'm sharing the full process — the messy early stages, the planning docs, the architecture decisions — because I believe the future of work involves AI agents as first-class organizational members, and showing how that gets built is more valuable than hiding it.

Documents

Document What it covers
prompt.md Q2/Q3 2026 planning notes — org chart, AI team roles, goals, SDLC/process requirements
prompt-techops.md IaC testing model — sectestbed/preprod VM workflow
prompt-k8s.md K8s vision — VCluster, Rancher, multi-tenancy, workload catalog
transition-map.md Full transition map — current state across Redmine/Discourse/Gitea/infrastructure, Q3/Q4 timeline, risk register, open decisions
agent-identity-bootstrap.md Agent identity provisioning plan — Cloudron enrollment, API key generation, Bitwarden credential architecture, Playwright automation design

Context

  • TSYS Group is the overall organization (multiple business entities under one umbrella)
  • Known Element Enterprises (KNEL) owns and operates all IT/business systems
  • The environment operates in ITAR/CMMC/TS/SCI compliance space
  • The infrastructure is a Proxmox bare-metal cluster in a private residence
  • The production stack runs on Cloudron (Reston VA VPS) + on-prem k8s

Status

This is live, evolving documentation. The transition is in progress (Q3-Q4 2026).

License

See LICENSE. All content here is shared for educational/reference purposes.

S
Description
Building an AI-native organization — full thought process, planning docs, and transition maps for TSYS Group's COO→CTO handoff and AI agent identity architecture.
Readme
81 KiB
Languages
Markdown 100%