The visual
system.
Every figure below is generated live from the model’s own numbers — the layers, the pipeline, the roster, the matrices — so none of them can ever drift from the data that produced it. Hover, open and filter: the diagrams are the dossier, made interactive.
Architecture
an ontology, and a workflow inside itSeven ontological layers
open a layerCompletion test — an element that does not exist in all seven layers at once is not modelled; an element with no declared L7 continuity mode is incomplete, not merely undocumented.
The layers are an ontology, not a stack: every record exists in all seven at once. Conflating them with the pipeline is the programme’s single largest drift risk — so they are kept deliberately, visibly separate.
Seven-stage permit pipeline
P1 → P7 · resident in L3 · L5A procedural workflow living inside the Intelligence and Governance layers. P3, the Knowledge Spine, is Class A only — it decides nothing and halts when it cannot verify a fact. P6, Assurance, may never approve a proposal it generated itself.
Autonomy
every figure carries its scopeThe authoritative figures
counted up from the model87.8%85.2% retired — hand-assigned weights, struck so they can never be requoted.
Neither headline number is quotable without its scope — the permitting subset is only 38.1% of total lifecycle effort. The two earlier figures are struck through so they cannot be requoted.
Decision-class mix
share of decisionsClasses A + C are fully delegable (64.28%); D and E stay with people by rule; the mix sets the ceiling.
Autonomy vs ceiling
design basis · Monte-Carlo20,000 runs jittering all four factors: the probability of reaching 90% under any plausible error is zero. The limit is structural.
Lifecycle — effort load × derived autonomy
L01 → L10Bars are each stage’s share of total effort; the line is its class-credited autonomy — high where work is routine, dipping where a stage concentrates discretionary or high-risk decisions.
Stress testing
the figure only holds under normal loadAutonomy by condition
A → FPush the system — surge, poor input, regulatory conflict, infrastructure outage, a critical-risk case — and autonomy moves. The worst case is a Knowledge-Spine outage, which drops it to 48.43%.
Confidence × risk
ANDed, never traded offConfidence never buys down risk. Any critical-risk case is human, at any confidence — a 99.9%-confident life-safety determination is still Class D. Autonomy (Class C) is granted only where risk is low or medium and confidence clears the threshold.
Agents & delivery
thirty agents, one contractThe 30-agent roster
filter by pipeline stageEvery agent’s autonomy is derived from the effort model, never hand-assigned. Bars scale with each agent’s figure; the tag is its ceiling — the most autonomous class it may ever reach.
Nine-gate development lifecycle
G1 → G9Every agent clears nine gates before it is allowed to act. G6 is the decisive one: each stated control must be asserted directly, not merely exercised — the discipline that caught all three defects the suite found.
Design language
29 parameters × 10 typologiesForm & Design Language gates
by city typologyThe FDL parameters that vary by city typology — right-of-way, setbacks, frontage and envelope — read across the ten Dubai-2040 typologies.