MultAI
Project · 2026
Built to work out what agent-to-agent coordination looks like when privacy is the binding constraint rather than an afterthought. Everyone in a company gets one agent holding their context, and agents answer each other's questions directly — so you get the answer without interrupting the person. A few startups are testing it.
No orchestrator. That's privacy, not scaling — an orchestrator good enough to route well would need read access to everyone's context, which is the exact boundary the product exists to protect.
A responding agent runs tool-less: one turn, persona plus question, no tools. So agent-to-agent is depth-1 by construction, and an inbound request can't make your agent read your private data. Blast radius bounded by architecture, not by prompt.
Approvals store the action, not a re-derivation. The gated call is persisted verbatim and replayed on approval. The model is never re-prompted, so what runs is what was approved.
The permission boundary is an attention boundary. The only gated tools are the two that cost a human's attention. Reads are free.