Create an agent by describing the job. Each one carries a matrix of what it may create, read, update and delete, enforced as a strict subset of its parent's reach, and every action is on the record.
Every user and every agent carries a matrix of what they may create, read, update and delete, on every surface in the workspace. The combinations are yours; nothing is reachable that the grid does not allow.
Describe an agent and it appears on the canvas as a draft. Gaia coordinates sub-agents that each run their own workflows, with the scope and spend caps you set, and every handoff between them is logged.
Create, read, update and delete, set per surface and per actor.
A ceiling per agent, and approvals for anything above it.
Company and agent documents an agent must follow.
What it reads before it drafts anything outward-facing.
Upload a skill, grant a tool, revoke it later.
Every action, handoff and approval, written once and never edited.
An agent working on something says what it is doing right now, how long it has been at it, and what each finished step found. Anyone in the stream can stop it, and a stopped run keeps its steps.
Authority decides what an agent may touch. Cognition decides how well it thinks about it, and what that costs.
Claude
GPT
Gemini
DeepSeek
Kimi
GLMA workspace does not pick one model and use it for everything. Cognition is a list of named roles — routing, retrieval, perception, generation, reasoning, governance — and each offers a short, sensible list rather than the whole catalogue.
The subscription buys seats; agent work is metered and varies by the hour. It runs on prepaid credit, and the balance tells you how many days it lasts at the rate you are actually spending.
No. Agents are part of the plan and you pay for the people who log in.
Three things: the matrix that bounds what it can touch, the spend cap that bounds what it can cost, and the approval step before anything irreversible.
It can propose one. The proposal carries a permission set that cannot exceed its own, and a person approves it before it runs.
Start with one agent, one base and read-only access. Widen it when it has earned it.