Product identity, principles, and differentiators.
MOA is a cloud-first, Rust-based, multi-tenant AI agent operations platform for enterprises. It runs durable agent sessions, executes tools through isolated hands, stores product-visible and audit state in Postgres/Neon, and improves from completed work under tenant control.
The core product model is:
Platform
-> Tenant (team)
-> Users
-> Workspaces
-> Admin controls
-> Task segments
-> Intent taxonomy
-> Learning log
-> Lineage and audit evidence
-> Workspace memory and skills
MOA is not a personal assistant or chat wrapper. It is an execution platform with durable orchestration, an auditable event log, graph memory, automated task resolution scoring, and a tenant-scoped learning pipeline.
- Durable work: sessions and sub-agents survive process restarts because Restate owns orchestration and Postgres owns product data.
- Task segmentation: conversations are split into discrete task segments so one long session can contain many independently tracked outcomes.
- Resolution detection: MOA scores whether each task segment resolved, partially resolved, failed, was abandoned, or remains unknown without requiring explicit user feedback.
- Per-tenant intent learning: tenants start with no intents; MOA proposes intents from conversation clusters and only uses active, tenant-approved intents for classification.
- Learning log: every learned pattern, resolution score, intent decision, memory update, and skill change can be audited and invalidated by version or batch.
- Lineage and audit: retrieval, context, generation, scores, DSAR exports, and optional compliance audit records are first-class operational artifacts.
- Workspace memory: graph memory stores facts, decisions, lessons, sources, and provenance while Postgres sidecars and pgvector provide retrieval.
- Skills: successful workflows can become reusable Agent Skills; ranking improves as segment outcomes accumulate.
- Pluggable execution: local hands, Docker, Daytona, E2B, and MCP servers are routed through one tool abstraction.
- Multiple interfaces: CLI, REST/gateway, and messaging adapters all talk to the same session model.
- Durability before cleverness. A session should recover from crashes, pauses, and human approval waits without losing state.
- Inspectable state. Product-visible facts live in queryable stores: Postgres tables, graph memory records, event records, and learning-log entries.
- Tenant control. Learned behavior must be scoped and reviewable. Platform-wide defaults are libraries to adopt, not policies to impose.
- Blank-slate learning. A new tenant should not inherit another team's assumptions. Useful behavior emerges from its own conversations and explicit admin choices.
- Small stable abstractions. Traits in
moa-coredefine the boundaries; implementations can differ between local and cloud runtimes. - Progressive context. The pipeline keeps stable prefix content cacheable and loads expensive dynamic context only when it matters.
- Least necessary tool access. Hands and MCP tools are selected, approved, and isolated based on the task.
- Enterprise governance. Admin operations, audit trails, and rollback paths are part of the product surface, not post-hoc logs.
MOA's differentiators are architectural, not cosmetic:
- Restate-native agents: sessions and sub-agents map to virtual objects with single-writer semantics and durable waits.
- Segment-level analytics: learning is based on task outcomes, not whole-session guesses.
- Resolution-weighted improvement: skills and future retrieval decisions can use measured success rates.
- Tenant-owned taxonomies: intent labels reflect a team's work patterns and admin review.
- Auditable learning: the learning log gives provenance, confidence, versions, and rollback hooks.
- Operational evidence: lineage, scores, analytics, and compliance audit tiers let operators explain what happened without scraping logs.
- Graph memory plus database retrieval: learned knowledge keeps provenance and bitemporal history while retrieval gets production-grade indexes and embeddings.
- MOA does not train a per-tenant model for intent classification. It uses embedding nearest-centroid classification over tenant intent centroids.
- MOA does not force a global intent catalog onto tenants. Catalog entries are opt-in.
- MOA does not keep durable product state only in Restate. Restate is orchestration state; Postgres is the product record.
- MOA does not bind agent work to a single front door. CLI, REST/gateway, and messaging adapters are peers over the same runtime model.
- MOA does not optimize for a single-user personal desktop workflow. Local mode is a development and operator path over the same enterprise runtime model.