-
Notifications
You must be signed in to change notification settings - Fork 0
Home
The gated runtime for AI agent fleets — built on the spine of the world.
Valhalla AI Multi-Purpose Orchestrator — Every consequential action transits an explicit gate: ingress, policy, approval, sandbox, arbitration — before a side effect occurs. Fail‑closed, fully audited, framework‑agnostic, deterministic.
“Before there were realms there was the tree. The Eddas call it askr Yggdrasils — the ash of Yggdrasil — and Snorri says plainly that it is the greatest of all trees and the best: its limbs spread over the whole world and stand above heaven. Nothing in the Nine Worlds reaches another world except by way of the tree.”
There is no second trunk. No path around it. That is the first thing the platform took: a single spine that all traffic must transit. In the code, Yggdrasil is the service mesh core. Every inter‑realm call rides the trunk — because if there is exactly one way between worlds, then that one way can be watched, metered, and refused. A side channel is a second tree, and the cosmology permits no second tree.
subdomain = realm — the routing topology and the mental model are one diagram.
| Realm | Role | Domain |
|---|---|---|
| Asgard | Control Plane | asgard.* |
| Vanaheim | Federated Trust | vanir.* |
| Alfheim | Low‑Latency Edge | alfheim.* |
| Realm | Role | Domain |
|---|---|---|
| Midgard | User‑Facing | app.* |
| Jotunheim | Untrusted Execution | jotun.* |
| Muspelheim | Raw Heat · GPU Cluster | muspel.* |
| Realm | Role | Domain |
|---|---|---|
| Niflheim | Cold Storage | nifl.* |
| Svartalfheim | CI/CD Forge | forge.* |
| Hel | Dead‑Letter Queue | hel.* |
| Valhalla | Completed Jobs Archive | valhalla.* |
The myth encodes a threat model: the giants are contained, not exterminated; the Vanir are allied, not absorbed; the fire is used, not trusted. Every one of those relationships is a trust posture the platform had to define anyway. The cosmology had already defined them.
Urd, Verdandi, Skuld — the Norns. The append‑only audit ledger (Urd), live metrics (Verdandi), and forecasting (Skuld). Telemetry that feeds back — the daily watering — keeps the runtime from rotting.
Odin’s eye for a drink. The shared knowledge base (Mimir) where deliberation costs tokens and latency. The price is explicit and budgeted — hidden costs are later paid in incidents.
Níðhöggr gnaws the root. Entropy is a resident, not an incident. Checksums, signed hash‑chains, scheduled chaos, and a red‑team agent (Loki) that gnaws on purpose before something else gnaws by surprise.
-
Ratatoskr — Event bus
The squirrel runs the trunk carrying words between eagle and Níðhöggr — full duplex, unfiltered. Filtering happens at gates, never in transit. -
Eagle + Veðrfölnir — Observability
A watcher mounted on a watcher — dashboards observed by alerting, alerting observed by anomaly detection. A single unobserved observer is the oldest monitoring failure. -
Four Stags — Load
Grazing the highest shoots — a steady‑state model of consumption, survivable only with continuous regeneration (scaling, refresh, Idunn rotating models). -
Heiðrún & Eikþyrnir — Archive gives back
The completed‑jobs realm is not a graveyard — it provides replay corpora, golden datasets, and evaluation baselines that flow back to train the living fleet.
“Yggdrasill means Ygg’s horse — Odin’s gallows: the god hanged himself on the tree nine nights, wounded by his own spear, a sacrifice of himself to himself, to seize the runes from the deep.”
The runes were not granted — they were paid for, on the tree, under constraint. Norse cosmology is a mythology of bindings and gates: Asgard is walled, Bifröst watched, Fenrir bound at the cost of Tyr’s hand. The gods’ entire operating model is bounded autonomy — enormous power, everywhere gated.
The five‑gate pipeline — ingress, policy, approval, sandbox, arbitration, each able to say no, every no terminal and written into Urd’s well — is that operating model translated into a request path. The agents are mighty the way the Æsir are mighty. And not one crosses between worlds except over a watched bridge.
An org chart with failure modes.
| God | Role | Description |
|---|---|---|
| Odin | Planner | Trades an eye for wisdom and hangs nine nights for the runes. Meta‑reasoning with explicit cost (tokens, latency, frontier model spend). |
| Huginn & Muninn | Retrieval · Memory | “I fear for Huginn, that he come not back — yet more anxious am I for Muninn.” Thought can be re‑flown; memory, once lost, is gone. Durability guarantees on Muninn; Huginn gets retries. |
| Thor | Executor | Mjölnir returns; goats can be slaughtered and hallowed back — idempotency and restartable workers. Throw twice, land once. |
| Heimdall | Gatekeeper | Needs less sleep than a bird, sees a hundred leagues, hears grass grow — the ingress SLA personified. Gjallarhorn is the alert channel. |
| Tyr | Policy | Lost his hand binding Fenrir. Fail‑closed enforcement costs latency and false positives. That cost must be owned — enforcement that pretends to be costless will be bypassed. |
| Loki | Red Team | Bound, kept inside the walls, destructive — and the cause of the gods’ greatest assets (Mjölnir). Fault injection that produces hardening. Chaos Monkey, made first in Iceland. |
| Forseti | Arbitration | His hall Glitnir reconciles all disputes. When two agents contend for the same write, the verdict is rendered in one place — writes never race. |
| Idunn | Lifecycle | The gods do not age because she keeps the apples. A fleet on frozen models withers the same way — drift, deprecation, eval regression. Model refresh is scheduled. |
| Hermod | DLQ Rider | Rides nine nights into Hel to negotiate Baldr’s return. Retrieval from the dead‑letter queue has preconditions and may fail — not every job comes back. |
| Valkyries + Bragi | Dispatch · Generation | Valkyries choose the slain — selection logic centralized. Bragi handles long‑form content and nothing else — a bounded role. |
Baldr’s Death — The Mistletoe Gap
Frigg extracts oaths from everything except the mistletoe. Loki finds the uncovered case, puts it in the hand of Höðr (a blind executor), and the most beloved god dies from a single gap in an otherwise complete policy. The action is irreversible.Every clause of the platform’s design answers a clause of that story. Enumerated allowlists miss the mistletoe, so the policy gate is default‑deny — fail‑closed. Executors act only on fully‑admitted intents, so no Höðr throws blind. Side effects commit only at the final gate. Frigg’s allowlist was heroic and 99.99% complete. The platform is built on the remaining 0.01%.
“skelfr Yggdrasils askr standandi”
The standing tree trembles when the end comes. But the same poems promise recovery: the earth rises green from the sea, and two humans survive hidden in the tree itself — Líf and Lífþrasir.The disaster‑recovery exercise is named Ragnarök and run on a schedule: full‑system chaos, deliberate, followed by restoration from seeds kept inside the tree — backups, state checkpoints, the ledger from which the world can be replayed.
Recovery is not improvised at the end of the world. It is provisioned at the beginning.
| Rune | Saga | System | Why |
|---|---|---|---|
| ᚠ | Yggdrasil, sole world‑spine | Service mesh core | One path ⇒ one place to watch, meter, refuse |
| ᚢ | Nine realms in three tiers | Trust zones; subdomain = realm | Myth pre‑encodes threat model |
| ᚦ | Urðarbrunnr + Norns | Urd/Verdandi/Skuld: ledger, metrics, forecasting | Telemetry must feed back or the tree rots |
| ᚨ | Mímisbrunnr; Odin’s eye | Mimir knowledge base; costed deliberation | Deep knowledge is priced, budgeted, never free |
| ᚱ | Hvergelmir; Níðhöggr gnawing | Entropy assumption: checksums, hash‑chains, Loki chaos | Corruption is a resident, not an incident |
| ᚲ | Ratatoskr trading insults | Event bus, unfiltered full‑duplex | A bus that censors bad news is a lie |
| ᚷ | Eagle + hawk Veðrfölnir | Watcher‑on‑watcher observability | Unobserved observers are the oldest failure |
| ᚹ | Four stags; Heiðrún/Eikþyrnir | Load steady‑state; Idunn lifecycle; archive feeds eval | Consumption survivable only with regeneration |
| ᚺ | Heimdall at Bifröst; Fenrir bound | Ingress gate; fail‑closed policy gate (ᛏ) | Containment over elimination; enforcement has a price |
| ᚾ | Odin on the gallows nine nights | Capability acquired under constraint | Power is earned inside bindings, not assumed |
| ᛁ | Odin’s eye; ravens’ daily flight | Odin planner; Huginn retrieval / Muninn memory | Deliberation priced; memory durability outranks retry |
| ᛃ | Mjölnir returns; goats revived | Thor executor | Idempotent ops, restartable workers — throw twice, land once |
| ᛇ | Heimdall’s senses; Gjallarhorn | Ingress gatekeeper; fleet‑wide alert channel | The one component that must not blink |
| ᛈ | Tyr’s hand in Fenrir’s mouth | Policy gate (ᛏ), fail‑closed | Enforcement has an owned, explicit cost |
| ᛉ | Loki bound; Sif’s‑hair forging | Red‑team / chaos agent | Fault injection inside the boundary produces hardening |
| ᛊ | Forseti’s hall Glitnir | Arbitration | One venue for conflicting writes; writes never race |
| ᛋ | Idunn’s apples; gods wither | Lifecycle / model rotation | Freshness is maintained, never assumed — drift is aging |
| ᛏ | Hermod’s ride; Hel’s condition | DLQ reprocessor | Dead‑letter retrieval may fail; the ledger records why |
| ᛒ | Valkyries choose the slain | Dispatch / worker pool | Selection logic centralized |
| ᛖ | Baldr: Frigg’s oaths, mistletoe gap, blind Höðr | Default‑deny policy; admitted‑intent execution; G4 side effects | Allowlists miss the mistletoe; built on the missing 0.01% |
| ᛗ | Tree trembles; Líf & Lífþrasir survive within | Ragnarök DR drill; in‑tree recovery seeds | Recovery is provisioned before the end, not improvised at it |
-
Create your API key
Generate a key for local testing. -
Make your first request
Pick a language: JavaScript, Python, cURL, Go.// Example: JavaScript const client = new ExampleAPI({ apiKey: "YOUR_API_KEY" }); const response = await client.messages.send({ message: "Hello, world!" });
Welcome
Getting Started
Core Concepts
Guides
- Guides
- Configuring Gates
- Setting Up Subdomains (Realms)
- Integrating AI Agents
- Monitoring & Observability
- Disaster Recovery (Ragnarök Drill)
- Custom Domains & TLS
Reference
Silence means no.