# StructuPath Herdr Suite

> Herdr-native tools for human-supervised agent work. Explore is the ready first workflow; Deliver is an advanced assembly pattern; Browser and Guard are supporting capabilities.

Landing and first Explore run: https://herdr.structupath.ai/
Canonical docs: https://herdr.structupath.ai/docs/
Source Markdown: https://github.com/StructuPath/herdr-suite-site/tree/main/docs-src
Pinned evidence: https://github.com/StructuPath/herdr-suite-site/blob/main/data/plugins.json

## Workflow taxonomy

### Explore — ready first workflow

Swarm (`structupath.swarm`) release 0.1.0: Herdr >=0.7.4; evidence records 0.7.4 and 0.7.5 paths. It gives one bounded task to parallel worktree agents, reports candidate changes, and provides review-first harvest. Agents commit locally and never push. The operator defines comparison criteria, reviews diffs/tests, and selects what lands.

A clean-slot selection in Harvest performs a `--no-ff` merge. When the base is not checked out, a plugin-owned merge worktree can advance the base ref after preview without another confirmation screen. Treat selection as approval. Abort preserves branches.

Guide: https://herdr.structupath.ai/docs/swarm/

### Deliver — attended Stage 2

Conductor (`structupath.conductor`) release 0.3.0: Herdr >=0.7.5; evidence records 0.7.5. It runs task-bound roles as visible panes with repository/workspace-bound strict state, immutable tasks, private report outboxes, deterministic zero-or-one-CAS integration, exact-SHA reviewer and validator gates, and archival stand-down.

A human or trusted orchestrating agent directs work, reviews unauthenticated worker assertions, explicitly invokes every transition, and handles approval decisions, conflicts, or ambiguous recovery. The pinned runtime does not provide approval receipts or approval-aware apply, suite adapters, unattended automation, automatic recovery, cryptographic report attestation, or protection against malicious same-UID processes.

Guide: https://herdr.structupath.ai/docs/conductor/

## Supporting trust capabilities

- Browser (`structupath.browser`) release 0.5.0: Herdr >=0.7.0; evidence records testing with 0.7.4. Drivable workspace browser session and WebM recording. Sessions are a trusted same-user boundary; recordings may be sensitive. https://herdr.structupath.ai/docs/browser/
- Guard (`structupath.guard`) release 0.1.1: manifest minimum Herdr 0.7.5; evidence records testing with 0.7.5. Advisory rendered-text policy: audit, alert, and best-effort interrupt requests. Request acceptance may be observed; command prevention is unknown. It is not a sandbox or authorization boundary. https://herdr.structupath.ai/docs/guard/

## Trust and composition boundaries

- The four plugins do not form one automatic runtime pipeline.
- Swarm independently creates and harvests Swarm-owned worktrees for interchangeable fan-out agents.
- Conductor creates and reconciles Conductor-owned worktrees itself; it does not delegate worktree creation or harvest to Swarm.
- Write-capable agents and plugins are trusted same-user principals. Worktrees isolate changes for review, not filesystem or process access.
- Guard sees rendered terminal text, not authoritative tool intent. Native harness, sandbox, and operating-system controls remain authoritative.

## Install by capability

`herdr plugin install StructuPath/herdr-swarm`
`herdr plugin install StructuPath/herdr-conductor`
`herdr plugin install StructuPath/herdr-browser`
`herdr plugin install StructuPath/herdr-guard`

These commands are not a blanket marketplace-availability claim. Inspect each manifest and repository before installing same-user plugin code.