Architecture: How Figaro Is Built
An org chart of seats over one shared substrate: an append-only business record, pure decision brains, one human approval gate, and a ledger that scores every action it ever approved.
Published August 9, 2026
We publish our architecture because the mechanisms are not the moat — the accumulated, audited record they produce is. Here is the shape of the system, honestly told.
One loop, everywhere
Every seat runs the same five steps: sense → decide → gate → actuate → measure. Connectors pull real data — storefront, ad platforms, books, search — into an append-only business record where every number carries its date and a gap says “not wired” rather than pretending to be zero. Decision brains are pure functions over that record: same inputs, same draft, which is what makes decisions testable today and replayable years later. Drafts wait at one human gate. Approved actions execute through scoped, capped, reversible tools. And every action is born with a measurement plan, so a dated verdict lands whether the idea worked or not.
The invariants
Five rules hold everywhere, and breaking any of them is breaking the product: one approval gate held by a human; an append-only record; honesty rails (data-dates on every number, no zero-filled gaps, no self-reported success); hard brand walls with credentials that refuse rather than fall back; and provenance on everything — who proposed, who decided, what executed.
An org chart, not a task list
The unit of organization is the seat, and seats compose into a company: growth, operations, finance, content — each chair with its own cadence, its own autonomy rung, its own measured track record. The chart is holacratic about information and hierarchical about accountability: any seat can read what it needs; exactly one owner decides any given thing. The human at the top keeps the three jobs that don’t delegate: attention, taste, and judgment.
Built inside a real company
Figaro wasn’t designed on a whiteboard and then aimed at commerce. It runs a real portfolio of brands — live ad budgets, live books, live inventory — and every mechanism above exists because its absence cost something first. The measurement discipline exists because self-reported agent wins turned out to be worthless. The credential walls exist because shared keys nearly leaked. The gate exists because the cost of a wrong action in commerce is a chargeback, a suspended account, or a regulatory letter. Scar tissue, formalized.
Questions founders ask
- What is a seat, technically?
- A seat is a role — media buyer, finance monitor, inventory brain — expressed as a five-step loop: sense, decide, gate, actuate, measure. It senses real business data from the shared record, a decision brain drafts what should happen, the draft waits at the human gate, approved actions execute through scoped tools, and a pre-registered measurement plan scores the result. The seat persists; the AI model powering it is a swappable engine.
- Why is the business record append-only?
- Because a record you can edit is a record you can’t trust. Metrics land as dated rows; corrections are new rows, never overwrites. This is what makes the rest possible: decisions can point at the exact data that motivated them forever, history can be replayed against a changed brain, and no one — human or agent — can quietly rewrite what happened.
- Where does the AI model fit in this design?
- As an engine, deliberately at the edge. Decision brains are code with model calls behind an injected interface, which keeps every decision testable and replayable, and lets each seat run the model that fits it — frontier reasoning where judgment pays, cheaper engines where it doesn’t. The system is designed so what compounds (the record, the verdicts, the org chart) is independent of what commoditizes (the model).
- Is Figaro a workflow tool with AI sprinkled in?
- The order is the point: it is an accountability structure that AI makes affordable. Workflow tools route tasks between humans. Figaro structures a company so most production is done by seats, every consequential action passes one human gate, and everything is scored after the fact. The scarce input it optimizes for is not compute — it is the owner’s attention and judgment.
- What does Figaro deliberately not do?
- No task boards, no project management, no autonomous money movement by default, no cross-brand data sharing, and no self-reported success: a seat claiming impact is measured by the ledger, not believed. Several of the most useful design decisions are refusals.