Every setting, stated once
Any page in the programme that quotes a number about the Cabinet reference design points back to this page. It is written for whoever will hold the design to its numbers: your technical deputy, your auditor, or the sceptic in the room. If you run the company, the page for you is the Cabinet.
a decision taken here, not yet checked against two providers' public documentation; it speaks for this design alone.
the mechanism belongs to a model provider; the design states it without naming one.
the number comes from a provider's public price list, linked at first mention in the papers.
produced by the design's own measurement, and labelled so wherever it appears.
A setting with no tag is also the design's own choice; the tags mark only the cases that need saying.
01

Runs the room. One voice for the whole company.
The Chair may go around at most fifteen times before the meeting ends.
15 rounds
The meeting ends the first time the Chair answers without asking for anything more.
the first answer that asks for no tool
When the Chair asks for a tool that is not on its list, the room answers with a refusal that names the missing tool and restates the tools it does have; the request is never met with silence.
a refusal naming the tool, the list restated
02

Who is in the room and how they are called, in parallel.
A meeting may consult every Seat at the Table at once; the cap is the size of the roster, not a smaller number.
the roster size
A Seat over the cap receives an explicit skip message; requests are never silently dropped.
a skip message, never silence
03

Ten specialists: Strategy, Finance, Counsel, People, Operations, Marketing, Product, Board, Talent, Triage.
Strategy, Finance, Counsel, People, Operations, Marketing, Product, Board, Talent, Triage.
10 Seats
The four deep-reasoning Seats think at the low setting; higher settings cost roughly three times the time for no gain the Rehearsal could measure.
the low setting
04

What the Chair reads before every turn.
Two cached blocks: who the agent is (long shelf life) and where it is working (short shelf life).
2 blocks
A budget of four cache markers per request; the design spends two on the Brief, one on the tool list, and keeps one for the conversation.
4 markers
The tool list is sorted by name before every request so its order never changes.
sorted, always
A cached read is billed at roughly a tenth of a fresh read.
0.1 of the fresh-read price
05

Four shelves, kept apart on purpose.
Four shelves kept apart: house knowledge, the client's documents, recorded failures, recent research.
4 shelves
A match at a similarity distance beyond 0.55 is discarded; a weak match is worse than none.
0.55 similarity distance
Messages of one or two characters never reach the Library; a three-letter business term still does.
under 3 characters
06

What was decided, written after the meeting, read back next time.
The next meeting opens by reading back the eight most recent decisions and every initiative still open.
8 recent decisions
The Minutes are extracted once the meeting has ended, so writing them can never slow the meeting itself.
after the meeting, by a separate hand
07

Acts when nobody asked.
The Clock wakes every thirty seconds.
every 30 seconds
Claiming a job and marking it claimed happen in one indivisible step, so a job fires once and only once.
one indivisible claim
The design runs a single Clock; the claim is what guarantees a job fires once, and a second Clock would only waste work racing the first.
one Clock
08

What may leave the room, to whom, and when.
A message near-identical to one already sent to the same person in the past six hours is refused.
6 hours
No more than five messages to one person in an hour.
5 per hour
Nothing is sent while a person is on leave or outside their working hours.
kept
If the Door itself errors, the message is allowed and the fault is written down; a guard that fails closed turns every outage into silence, and silence is the harder failure to see.
allowed, and logged
A company may set the Door to refuse rather than allow when the Door itself errors, for a named class of tools such as payments and regulatory filings; the default for everything else stays allowed and logged.
per tool class, by the buyer
When refused, the Chair is told why, so it can reschedule instead of retrying.
the reason, returned
09

A step that waits for a person.
When the person answers, the run records the decision and stops; a person restarts it.
captures the decision; does not auto-continue
10

Every action, with its stated reason.
An entry in the Record is never edited; a correction is a new entry and the old one stands, which is what makes the Record evidence rather than notes.
append only
A failed audit write is itself logged and can never break a meeting; a room that falls silent whenever the ledger hiccups is a room nobody keeps running.
never
11

Which model answers which call.
The model is chosen per call, so one meeting can draw on several providers and owes none of them loyalty.
per call
At most two web searches per meeting; each is billed at the provider's published rate.
2 per meeting
A feature the chosen model does not support is removed before the request leaves, so routing to a different model can never turn a working call into an error.
stripped before sending
12
What each Seat may do without asking: act, propose, or escalate.
Each Seat carries one authority setting: act on its own, propose and wait for approval, or escalate to a person; it is a setting, not a promise.
act, propose, escalate
Every Seat ships at propose and wait; a person writes act, and the change is on the Record.
propose
A Seat's goals carry one of three states, reported on a cadence without being asked.
on track, at risk, off track
13
The people the Cabinet knows: who it may address, who may approve what.
A message from anyone not on the roster is dropped without a reply; the room never converses with a stranger.
dropped unanswered
Approval rights are named per person: spend bands, hiring, vendor onboarding, legal signature; exactly one scope approves anything at all, and it belongs to the chief executive.
named, per person
14
Set-piece deliverables, run to a plan the reader sees before the work.
A deliverable streams its plan before any of the work, so the reader can stop it before it spends.
the plan, first
When the person answers at a gate, the run records the decision and stops, exactly as at the Signature.
the Signature's rule, unchanged
An approval reply the design is less than 85 percent sure it understood is asked again, never guessed.
85 percent
15
What the room hands the chief executive at eight and at close of day.
The morning header synthesises what matters and never re-lists the items shown beneath it.
a synthesis
16
What the room looks at when nobody has messaged it.
At most sixty inbound events are evaluated a minute; the alarm is rationed by design.
60 per minute
Every signal carries a stable duplicate key, so scanning the same source twice cannot raise the same alarm twice.
one alarm per signal
17
How the design is examined before it meets your company, and after every change.
The design is examined on five dimensions: sounds like an executive, gets the domain right, uses the company's own situation, consults the right Seats, and says what to do next; each scenario is scored by a judge model that is not the model being examined.
5 dimensions
The examination average must reach 3.5 of 5 before a change ships.
3.5 of 5
Any single dimension slipping by more than 0.1 points on the 5-point scale fails the change, whatever the average says.
0.1 points of 5
Appendix
Suppose a working day of 40 meetings. With the Brief laid out for caching, the day's model bill is about $0.42. With one careless line breaking the cache, about $4.10: roughly ten times more, for the same answers.
$0.42 against $4.10
The agent machinery is about a fifth of a working system; the guards, record, integrations and screens are the rest.
about one fifth
Both figures are round, internally consistent, and labelled wherever they appear. Neither is a measurement of any client or market.