Orchestra
Health Warn
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Pass
- Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
- Permissions — No dangerous permissions requested
No AI report is available for this listing yet.
Installable AI workflow plugin that routes complex software tasks through focused specialist skills for architecture, UI/UX, docs, diagrams, databases, QA, security, and resilience review.
Project-agnostic governance and orchestration framework for AI-assisted development.
At a Glance
| Layer | Role | Purpose |
|---|---|---|
| Governance | The Steward | Business, scope, SDLC, requirements, and value alignment |
| Governance | The Governor | Legal risk, privacy, IP, licensing, security, and compliance review |
| Governance | Arbiter | Continuity, validation, transition governance, and merge readiness |
| Orchestration | Conductor | Routes approved work to the correct specialist skills |
| Execution | Specialist Skills | Performs focused architecture, documentation, QA, security, or design work |
| Execution | Ponytail | Implementation, code navigation, and safe edits |
Core Concept
Orchestra uses freedom-first, need-based governance. Users can ideate freely. Governance review is invoked when the task requires alignment review, implementation readiness, audit, risk review, or release validation. The governance layer does not assume what rules apply to every project. Before review, The Steward and The Governor establish the Governance Basis of Review based on the active operating mode and supplied context. If the scope is unclear and review is required, governance returns REVISION_REQUIRED instead of assuming.
Architecture
flowchart LR
classDef input fill:#101010,stroke:#555,color:#f5f5f5,stroke-width:1.5px
classDef gov fill:#2b2112,stroke:#d4af37,color:#fff2b2,stroke-width:2px
classDef orch fill:#201433,stroke:#9d6cff,color:#eadfff,stroke-width:2px
classDef exec fill:#102436,stroke:#58a6ff,color:#d8ecff,stroke-width:2px
classDef stop fill:#321414,stroke:#ff6b6b,color:#ffdada,stroke-width:2px
Request([User Request]):::input
Context([Project Context]):::input
subgraph Orchestra[Orchestra]
subgraph G[Governance Layer]
Steward{{The Steward<br/>Business • Scope • SDLC}}:::gov
Governor{{The Governor<br/>Privacy • IP • Compliance}}:::gov
Arbiter{{Arbiter<br/>Continuity • Transition}}:::gov
end
subgraph O[Orchestration Layer]
Conductor((<br/>Conductor)):::orch
end
subgraph E[Execution Layer]
Skills[[Specialist Skills<br/>Design & Review]]:::exec
Ponytail[[Ponytail<br/>Implementation]]:::exec
Validate[[Validation]]:::exec
end
end
Output([Release or Response]):::input
Revision([Revision Required<br/>or Blocked]):::stop
Request --> Context --> Steward --> Governor --> Conductor
Conductor --> Arbiter
Conductor --> Skills
Arbiter --> Ponytail
Skills --> Ponytail
Ponytail --> Validate --> Output
Steward -.-> Revision
Governor -.-> Revision
Arbiter -.-> Revision
Governance Layer
The Governance Layer sits above the Conductor. Orchestra uses freedom-first, need-based governance. Users can ideate freely. Governance review is invoked when the task requires alignment review, implementation readiness, audit, risk review, or release validation.
The Steward and The Governor are entirely context-driven. They do not pre-assume what rules apply to every project, nor do they apply every governance rule universally. If the project scope is unclear or missing, governance returns REVISION_REQUIRED instead of assuming. Conversely, if a risk area does not apply to the current context, the authority returns NOT_APPLICABLE.
[!IMPORTANT]
If a request violates alignment, fails scope verification, or breaches compliance boundaries, the Steward or Governor issues aREVISION_REQUIREDorBLOCKEDstatus. The Conductor will immediately halt execution.
Operating Modes
Conductor uses 5 distinct operating modes to scale governance dynamically, ensuring that ideation and dynamic prototyping are not restricted:
- Ideation Mode: Brainstorming, exploration, planning, concept development, prompt refinement. Returns
ADVISORY_ONLYorNOT_APPLICABLE. - Prototype Mode: Local experiments, throwaway proofs-of-concept. Lightweight checks only.
- Implementation Mode: Making file, code, documentation, or architecture changes. Uses fast path by default. Escalate to expanded review only if risk triggers are met.
- Audit Mode: Explicit request for a review, compliance check, or risk assessment. Context-heavy.
- Release Mode: Production deployment, public release, client delivery, or open-source distribution. Strictest path. Escalate uncertain issues for human review.
Interpret the Decision
| Decision | Meaning | User Action |
|---|---|---|
| APPROVED | Work can proceed | Let the conductor route the task |
| ADVISORY_ONLY | Advice given, exploration unblocked | Continue brainstorming or prototyping freely |
| REVISION_REQUIRED | More context or correction is needed | Add missing details and resubmit |
| BLOCKED | Work should not proceed as requested | Resolve the blocking issue first |
| NOT_APPLICABLE | Governance check is not needed | Continue with the fast path |
Governance Authorities and Specialist Skills
Governance Authorities
| Authority | Focus |
|---|---|
| Business alignment, scope boundaries, and software development lifecycle (SDLC) documentation. | |
| Evaluates legal compliance, privacy risks, intellectual property (IP), licensing, and security policies. | |
| Continuity, validation-state review, branch transition, and source-of-truth governance. |
Specialist Skills
| Skill | Focus |
|---|---|
| Routing and orchestration | |
| Implementation and safe code edits | |
| Architecture, OOP, refactoring | |
| UI, UX, layout, accessibility | |
| Documentation and technical writing | |
| Visual modeling and diagram specialist | |
| Database architect and schema auditor | |
| QA, testing, release readiness | |
| Security and privacy evidence | |
| Controlled resilience tester |
For details on all execution skills, routing logic, and behavioral constraints, see the Specialist Skill Index.
Installation by AI Host or IDE
Orchestra can be used across different AI-assisted development environments, but each host loads skills differently. The installation method depends on the AI host you are using.
Installation Summary
| Host / IDE | Installation Scope | How Orchestra Loads | Recommended Setup |
|---|---|---|---|
Antigravity / agy |
Global | Installed as an Antigravity plugin | Use agy plugin install once |
| Codex | Per project repo | Reads .agents/skills inside the target repo |
Install only into repos where Codex needs Orchestra |
| VS Code | Per extension or per repo instructions | Depends on the AI extension, such as Copilot or Continue | Use instruction files, not full skill folders |
| IntelliJ / JetBrains IDEs | Per plugin or per project instructions | Depends on JetBrains AI Assistant, Copilot, Junie, or similar plugins | Use instruction files or project docs |
| Other AI coding tools | Tool-specific | Usually reads repo instructions, rules, or prompt files | Adapt Orchestra as project instructions |
Antigravity Setup
Antigravity uses agy plugins. This is the cleanest setup because the plugin is installed globally and can be used across Antigravity workspaces.
agy plugin install https://github.com/Baelfyre/Orchestra
Verify installation:
agy plugin list
Expected result should include:
conductor
Use Orchestra in Antigravity with:
/ponytail /conductor
Notes:
- Antigravity does not require
.agents/skillsinside each project repo. - Removing local Codex folders from a project does not affect Antigravity.
- This is the recommended setup for users who want one global Orchestra installation.
Codex Setup
Codex uses a repo-local skill model. Orchestra skills must be installed into the project repo where Codex will run.
The target layout is:
<ProjectRepo>/.agents/skills/
Example:
C:\YourProject\.agents\skills\conductor
C:\YourProject\.agents\skills\scribe
C:\YourProject\.agents\skills\clockwork
Install Orchestra Codex skills into a target project repo:
cd C:\conductor
powershell -NoProfile -ExecutionPolicy Bypass -File .\scripts\refresh-installed-integrations.ps1 -Target Codex -CodexRepoPath "C:\path\to\your\project" -Force
Important:
- Codex installation is per project repo.
- Only install Codex skills into repos where you actively want Codex to use Orchestra.
- Do not install Codex skills into every repo by default.
- If
.agents/is only for local Codex use, do not commit it.
For local-only Codex installs, add this to the target repo local Git exclude file:
.git/info/exclude
Recommended local-only entries:
.agents/
.amalgam/
This keeps the files available locally without adding them to the shared repository.
Use .gitignore only if the whole project intentionally wants to share those AI configuration files with all contributors.
VS Code Setup
VS Code does not use agy plugins and does not automatically load Orchestra skill folders unless an extension specifically supports them.
Most VS Code AI workflows are extension-driven, such as:
- GitHub Copilot
- Continue
- Cody
- CodeGPT
- other local or cloud AI extensions
Recommended setup:
- Do not copy the full Orchestra skill folders into every VS Code project.
- Use a lightweight instruction file if the AI extension supports it.
- Keep project-specific AI guidance small, clear, and intentional.
For GitHub Copilot, a common project instruction file is:
.github/copilot-instructions.md
Suggested content:
# Copilot Instructions
Use Orchestra-style workflow guidance.
Default routing pattern:
`/ponytail /conductor`
Prioritize:
- Small, targeted changes.
- SOLID and OOP compliance where applicable.
- No broad rewrites unless requested.
- Preserve existing architecture unless the task explicitly asks to refactor.
- Run available validation before finalizing.
- Return changed files, summary, validation results, risks, and next step.
Commit this file only if the repository should permanently share these AI instructions.
Optional: Agentic Skill Installer Extension
VS Code users may optionally use the Agentic Skill Installer extension to browse, install, and update Orchestra skills, prompts, and agents from GitHub repositories directly inside VS Code.
Basic setup flow:
1. Install the Agentic Skill Installer extension from the VS Code Marketplace.
2. Open the Agentic Skill Installer panel from the VS Code Activity Bar.
3. Click Install Source Repository or Add Source Repository.
4. Paste the Orchestra repository URL:
https://github.com/Baelfyre/Orchestra
5. Let the extension scan the repository and load the available skills / agents.
6. Install or use only the skills needed for the active workspace.
7. Run git status before committing to confirm no local-only skill files were added unintentionally.
IntelliJ / JetBrains IDE Setup
IntelliJ and other JetBrains IDEs do not use agy plugins. AI behavior depends on the installed plugin, such as:
- JetBrains AI Assistant
- GitHub Copilot for JetBrains
- Junie
- other third-party AI coding plugins
Recommended setup:
- Do not add
.agents/skillsunless the AI tool specifically requires it. - Use IDE chat instructions, project documentation, or a small AI workflow guide.
- If the guidance should be shared with contributors, document it in the repo.
- If it is only for local use, keep it outside Git tracking.
Optional shared project file:
docs/AI_WORKFLOW.md
Suggested instruction pattern:
Use Orchestra-style workflow guidance.
Default to /ponytail /conductor for multi-step tasks.
Prefer small, reviewable changes.
Preserve existing project structure.
Validate before summarizing.
Report changed files, validation results, remaining risks, and next recommended step.
Local-Only vs Shared AI Configuration
Use this rule of thumb:
| Scenario | Recommended Location | Commit It? |
|---|---|---|
| Antigravity global plugin | agy plugin install |
No project files needed |
| Codex local-only testing | .agents/skills |
No |
| Codex shared team workflow | .agents/skills |
Yes, only if intentional |
| Copilot project instructions | .github/copilot-instructions.md |
Yes, if useful to contributors |
| Personal IDE prompt notes | Outside repo or local notes | No |
| General project AI workflow docs | docs/AI_WORKFLOW.md |
Yes, if useful to contributors |
Recommended Default Setup
For most users:
Antigravity:
Install globally with agy.
Codex:
Install per repo only when needed.
VS Code:
Use extension-specific instruction files.
IntelliJ:
Use plugin-specific instructions or project docs.
Other IDEs:
Check whether the AI host supports repo instructions, skill folders, or plugins.
Do not assume all IDEs use the same plugin model. Antigravity uses a global plugin model, Codex uses repo-local skills, and most traditional IDEs use extension-specific instructions.
For manual configurations or environment setup details, see the Installation Guide.
Ponytail and Caveman Notice
Ponytail and Caveman are external tools. They are not included, vendored, or required by Orchestra. Install them separately from their official repositories if desired:
- Ponytail: https://github.com/DietrichGebert/ponytail
- Caveman: https://github.com/JuliusBrussee/caveman
Orchestra may reference Ponytail and Caveman as workflow companions for focused implementation and compressed communication, but they remain separate from the Orchestra plugin and skill package.
For more details on the boundary between Orchestra and these tools, see the External Companions guide.
Quick Start Usage
1. Start with a project context
The governance layer does not assume what rules apply. Provide enough context for The Steward and The Governor to know what they are reviewing.
Minimum context:
- Project Type: e.g., open-source repo, internal tool
- Goal: What the task should accomplish
- Release Target: e.g., local only, public release
- Data Use: e.g., no user data, sensitive data
- Dependencies: e.g., libraries, assets
- Constraints: e.g., files to preserve, style rules
2. Use the standard prompt pattern
Add this template to the top of your request:
[@ponytail] use conductor for this task
Project Context:
Project Type:
Goal:
Release Target:
Data Use:
Dependencies or Third-Party Assets:
Constraints:
Task:
Describe the work clearly.
Requirements:
- List what must be changed.
- List what must be preserved.
- List any rules the implementation must follow.
Expected Output:
Changed Files:
Summary:
Validation Results:
Remaining Risks:
Next Recommended Step:
3. Review the IDE output and Iterate
Follow this feedback loop:
- Send the refined prompt to the IDE.
- Let the IDE inspect files and propose changes.
- Review changed files and validation results.
- Approve, revise, or ask for another iteration.
- Commit only after validation passes.
[!NOTE]
When unsure which specialist to use, start with Conductor. It can route the task to the correct specialist. Use a specialist directly only when the task is narrow and obvious (e.g., UI only, QA only).
Output Mode Behavior
Output from Conductor and its specialists automatically adapts to your intent:
- Compact mode is the default for normal iterative tasks.
- Full mode is used only when explicitly requested for formal audits, deep reviews, or comprehensive planning.
- Specialized modes (like Diagram formats) are automatically selected when the artifact type is clear.
- Clarification is only asked when output intent is ambiguous.
Token-Efficient Usage
[!TIP]
For best token efficiency:
- Start with a refined prompt.
- Provide only relevant project context.
- Ask for changed files, summary, validation, risks, and next step.
- Do not request expanded governance analysis unless the task is MEDIUM or HIGH risk.
- Use fast path for typo fixes, formatting edits, and local documentation cleanup.
- Link to detailed governance docs instead of repeating them in your prompt.
Documentation Map
| Area | Start Here | Purpose |
|---|---|---|
| Governance | Governance Layer | Understand The Steward, The Governor, risk scaling, and release gates |
| Skills | Skill Index | Review available specialists and routing behavior |
| Installation | Installation Guide | Set up the plugin in Antigravity, Codex, VS Code, or JetBrains IDEs |
| Validation | Validation Guide | Run structure and manifest checks |
| Maturity | Maturity | Current project stability and roadmap |
| Contributing | Contributing Guide | Guidelines for contributing and safety policies |
| Disclaimer | Disclaimer | Understand legal and operational limitations |
Validation & Enforceable Governance
Orchestra's rules are divided into clear enforcement levels to distinguish between advisory instruction and guaranteed validation:
Enforcement Model
- Level 1: Instruction governance. (Advisory) The host AI is instructed to follow The Steward and The Governor. Conductor is instructed to halt if governance returns BLOCKED.
- Level 2: Structural validation. (Enforced Locally/CI) Scripted checks ensure manifests, skills, and formats align.
- Level 3: Runtime guardrail scan. (Warning-only Default) Scripted checks for secrets, PII, and copyleft licenses. Exits with code
0by default. - Level 4: Strict local enforcement. (Opt-in) Strict enforcement of guardrails locally (
$env:ORCHESTRA_ENFORCE_GUARDRAILS = "true"), failing the process on violation. - Level 5: CI release gate. (Enforced in CI) Build pipeline fails if structural validation or strict guardrails fail.
- Level 6: Host-integrated runtime blocker. (Future) Host platform forcibly blocks output if policies are violated.
Before releasing, staging, or pushing changes, run the centralized behavior validation suite:
# Run all validation checks (structure, manifest, stale references, and locking tests)
powershell -NoProfile -ExecutionPolicy Bypass -File .\tests\behavior\run-tests.ps1
Governance Verification Workflow
- Centralized Test Runner (
run-tests.ps1): Verifies project directory structure, manifest definitions against skill frontmatter, stale reference checks, Codex skill adapter alignment, and lock/guardrail regression cases. - Opt-In Runtime Guardrails: Scans staged or modified files for security risks (secrets, copyleft licenses, PII leaks, destructive commands, or stale naming conventions).
- Warning-Only Mode (Default): Scans are advisory and exit with code
0. - Strict Enforcement: Set
$env:ORCHESTRA_ENFORCE_GUARDRAILS = "true"to fail the build (exit code1) upon safety violations.
- Warning-Only Mode (Default): Scans are advisory and exit with code
- Workspace State Locking: Manages a
.amalgam/lock.jsonfile during workflow executions to prevent concurrent agent collisions, automatically detecting and cleaning stale locks based on process ID (PID) liveness.
For full configuration and usage instructions, see the Validation & Enforceable Governance Guide.
Limitations
- Instruction-Level Framework: Orchestra primarily operates through structured instructions, skills, and documentation.
- Optional Runtime Guardrails: Some repository-level checks can be enforced through scripts when explicitly enabled.
- Human Review Required: Guardrails reduce risk but do not replace developer review, secure coding practice, or legal/security review.
- Project Profile Requirement: Governance relies entirely on the accuracy and completeness of the provided project context profile.
Collapsed Repository Structure
GitHub displays repository files above the README by default. This README keeps detailed documentation layered into linked files and collapsed sections to reduce scrolling.
Repository structureskills/
├── arbiter/
├── chronicler/
├── cipher/
├── cloak/
├── clockwork/
├── conductor/
├── dagger/
├── overseer/
├── ponytail/
├── scribe/
├── the-governor/
├── the-steward/
└── weaver/
docs/
├── CONTRIBUTING.md
├── governance/
│ ├── GOVERNANCE_LAYER.md
│ ├── GOVERNOR.md
│ ├── STEWARD.md
│ ├── GOVERNANCE_REVIEW_FLOW.md
│ └── RELEASE_GATES.md
├── meta/
│ ├── CHANGELOG.md
│ └── DISCLAIMER.md
├── project/
│ ├── FOUNDATION.md
│ ├── ROADMAP.md
│ ├── PLUGIN_READINESS.md
│ ├── MANIFEST_SCHEMA.md
│ └── V1_READINESS_CHECKLIST.md
└── setup/
├── INSTALLATION.md
├── LOCAL_ONLY_GUIDE.md
├── COMPATIBILITY.md
└── VALIDATION.md
tests/behavior/
└── GOVERNANCE_SCENARIOS.md
assets/readme/
└── orchestra-governance-banner.svg
Disclaimer
[!CAUTION]
The Governor and Steward skills validate compliance frameworks, scope, and best practices. They do not provide legal advice or absolute security guarantees. Please read docs/meta/DISCLAIMER.md for full terms.
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found