JarvisOS

Body-wing AI — recovery alerts, daily summaries, routine chat — runs on Haiku only. That data is structured and formulaic; a frontier model would spend Sonnet money to reformat a number it was handed. Sonnet is reserved for the work that is actually reasoning: reviewing the day's real commits, mediating a judgment call, writing. Model choice is a cost architecture decision, and treating it as a quality setting is how AI bills get away from people.

Each wing publishes a small typed payload to a namespaced key and subscribes to the ones it cares about — the body wing emits a recovery score and consumes the cycle phase; the CEO morning brief reads both. Nothing reaches across into another wing's schema. Twenty-seven wings that queried each other directly would be a single wing with twenty-seven names, and the first schema change would take the whole thing down.

jarvis:signals:body:{userId}
  → { recovery_score, sleep_hours, training_sessions, alert, alert_advice }

jarvis:signals:cycle:{userId}
  → { cycle_phase, cycle_day }

The recovery score is not a model output. It is a clamped sum of three contributions — heart-rate variability against personal baseline, sleep hours against a floor, self-reported quality — and it is written down as arithmetic. A number that tells you how your body is doing has to be inspectable, or you either believe it too much or stop reading it. The version that a model produces is more sophisticated and worth strictly less.

baseline 50
+ hrv     : (hrv_ms / baseline_hrv - 1) × 25 , clamped ±25
+ sleep   : (sleep_hours - 6) × 5            , clamped ±15
+ quality : (sleep_quality - 5) × 2          , clamped ±10
final = clamp(sum, 0, 100)

One subscriber to the queue's own `function.failed` event covers every worker in the system at once, including the ones written after it, plus a six-hourly sweep over the heartbeat tables with a latch so a stuck job alerts once rather than forty times. This was not foresight. It was written the week after six workers went quiet for a month and nothing said anything — the scar is in the Scar Room, and this is the fix that came out of it.