You don't chat with Legion. You give it a mission. Specialized agents plan, build, review, and scan — and nothing irreversible happens without your signature.
A mission is a durable object — a typed state machine with artifacts, approvals, and a microsecond-precise append-only ledger. It survives restarts, audits, and you closing the laptop.
Planner, coder, reviewer — specialized agents per mission, each in its own lane. The coder works in an isolated clone with its remote removed: it doesn't refrain from pushing to your repo. It can't.
Plan, build, review, and scan run as mission stages with a full record. A failed stage doesn't kill the mission — it routes the work back to the responsible agent with the evidence attached.
Every diff is scanned for secrets and unsafe patterns before you're ever asked to judge it. Errors block the merge; warnings go on the record. Security is a stage in the pipeline, not an afterthought.
The merge waits for your passkey. The signature is bound to the exact bytes of the diff and the scan report — tamper with either and the approval voids. Nothing ships without a human seal.
A durable record of every mission: who did what, what was approved, what merged — and the signature that authorized it. Survives restarts, audits, and handoffs.
