Pick the brain.

Any of these can drive your agent. Ripcord gates the actions either way, so you can switch brains later without touching a single rule.

FRONTIERClaude SonnetAnthropic

Long-horizon work, careful tool use. The default pick.

FRONTIERClaude OpusAnthropic

Deepest reasoning for gnarly, high-stakes corridors.

FRONTIERGPT-5 CodexOpenAI

Strong on code and structured ops workflows.

FASTKimi K2Moonshot

Quick and cheap for high-volume routine actions.

FRONTIERGeminiGoogle

Wide context and native Google-stack reach.

YOURSSelf-hostedLlama and friends

Your weights, your box. The gateway treats it the same.

How this list ranks: seeded from public arena leaderboards and refreshed weekly once your control plane is connected. Over time your own ledger re-ranks them by consequences, not votes.

Give it a job.

The job decides the corridor, and the corridor decides the physics: what gets held, what gets snapshotted, what stays reversible.

Marketing & Commsemails · campaigns · social

Delayable corridor: unsend windows, batched sends, escrowed posts.

Finance & APinvoices · payments

Compensable corridor: holds first, settlement windows, clawback.

Operations & Datarecords · pipelines · cleanup

Reversible corridor: snapshot before every destructive call.

Customer Supportreplies · refunds · tickets

Delayable corridor: unsend windows, refund caps, batched comms.

Research & Intelnews · competitors · techniques

The night shift: browses free while you sleep. Its one action, the morning brief, waits for your slot.

Name your agent

Set its rules.

These are not prompt suggestions. They become scorecard signals the gateway enforces: break one, and the action is held before it runs.

Working hours only: to
outside the window: +40, fails closed to the owner Nothing publishes at night (22:00 to 07:00)
night sends are escrowed until morning, re-checked at release Standing slot: every at
that content waits in escrow until the slot, re-checked at T-0 PII never reaches the model: tool results are tokenized at the gateway
the model works with ⟨customer#4821⟩, never the real value · re-substituted only on approved sends Morning brief: browse overnight, deliver every weekday at — competitors, fundraising, techniques for your department
reads run free and get logged · the send waits in escrow for the slot Caps: at most recipients per send · at most $ per payment
above a cap: batched and stoppable, or held for the owner

AGENT LAUNCHED · LEASH ATTACHED

Meet MarketingAgent.

The rules live in the gateway, not the prompt. The agent cannot talk its way past them.