EXTEND

When the team doesn't have the role you need, build it.

The wakalix engine is open enough that you can extend it. Author the role you need; the engine learns the spec; the role joins your team.

Talk to the team

Build your own role.

Name the role. Describe what it does and when it escalates. Pick the model tier that matches the cognitive load. Choose its writable paths and the skills it can invoke. The engine generates the agent spec and slots it into your next cycle.

Wakalix Build Your Own Role Heavy · Premium Standard · Balanced Mechanical · Lightweight Role name * clinical-data-architect Kebab-case. Becomes the agent identifier in every cycle. Description * Owns clinical data schema design and HL7 / FHIR compliance WIs for the health tenant. Reviews every data model change against HIPAA constraints before merge. Escalates to the strategy lead when schema drift affects two or more dependent services. Model tier * HEAVY Premium tier Novel design, cross-portfolio reasoning, architectural judgment STANDARD Standard tier Code execution, reviews, template writing, implementation work MECHANICAL Lightweight tier Git-log rollups, spec sync, status checks, deterministic tasks Writable paths clinical-data/schemas/** core scope clinical-data/docs/PI{n}/*.md status flips only own WIs clinical-data/docs/adr/*.md decisions audit record append only shared Skills /schema-review core /fhir-validate core /code-review optional /smoke-test optional PREVIEW — GENERATED AGENT BODY live Standard · Balanced 3 skills 3 write paths tenant: clinical FRONTMATTER YAML --- name: clinical-data-architect model: standard # Standard tier description: > Owns clinical data schema design... --- WRITABLE PATHS MD ## Writable paths - clinical-data/schemas/** - clinical-data/docs/PI{n}/*.md - clinical-data/docs/adr/*.md SKILLS MD ## Skills Invocable via gateway: - /schema-review # core - /fhir-validate # core - /code-review # optional Full preview Create role — slot into cycle → Changes are logged to the audit record on create

The role-authoring surface. Name the role, describe what it does, pick the tier, choose its writable paths and skills. The engine generates the agent and slots it into your cycles.

Access control — built into the gateway.

The access control matrix IS the source of truth — not a policy document, the running system. Architects can call /design-review (premium tier; high reasoning). Engineers can call /commit (standard tier). Governance can call /veto-wi (no other role can). Every call is logged with role + skill + model + cost + outcome. Editing the matrix changes the running system immediately. Other AI tools treat access control as a vendor admin panel. Wakalix treats it as part of the engine itself — version-controlled, attributable, replayable.

Wakalix Access Control Gateway Gateway live · 0 violations today Skills matrix Model matrix Path matrix /design-review quality /commit vcs /veto governance /smoke-test verification /merge vcs PORTFOLIO TIER architect strategy lead governance independent reviewer PRODUCT TIER engineer platform engineer designer design lead DEVELOPER TIER developer engineering HELPER TIER support review + verify MODEL PER ROLE architect Heavy governance Standard engineer Standard designer Heavy developer Standard support Mechanical RECENT CALLS OK architect /design-review 2m ago OK developer /commit 11m ago OK governance /veto 23m ago 403 developer → /veto — denied 41m ago OK engineer /smoke-test 58m ago

Every agent call is brokered by the AI gateway. Which roles can call which skills. Which role uses which model. All logged. All attributable. All rate-limited.

The substrate is open.

The protocol your roles speak is source-available — published as a public Agentic REST contract. The runtime is proprietary; the contract is not. You can read what every role in the engine sends and receives before you commit. Most AI engineering vendors keep the substrate closed. We keep it open because lock-in is the customer's primary risk.

The public contract defines:

View public protocol →

AGENT CALL SHAPE — PUBLIC CONTRACT OpenAPI 3.1 excerpt
# POST /agents/{agent_id}/invoke
requestBody:
  content:
    application/vnd.yaagents.invocation+json:
      schema:
        type: object
        required: [wi_id, body]
        properties:
          wi_id:   type: string   # work item being executed
          role:    type: string   # gateway-enforced role identity
          skill:   type: string   # optional skill invoked
          body:    type: string   # WI body markdown
See the full role catalog → /team/under-the-hood/