Judge the Atlas code on its engineering merits alone - keep it, port it off the laptop, and stop building skills with direct data access

September 2, 2026 at 11:56 PMtechnicalhigh

Situation

After a deep dive through the revops-motherbrain repo and a walkthrough with Karl Lowenbjer, Tabatha Wilmot and Chris Baek, Peter delivered a written verdict on 8/31. He opened by refusing the question he was not asked: I am making ZERO statements about whether what this code was written to do is something we need at CIQ - that is a discussion for others. On the code itself: keep the bulk of it. API, frontend, warehouse and agents are independently separable with no cross dependencies. Data access is SQL direct rather than through hallucination-prone skill paths, read-only is enforced at the right layers, the MCP server sits above those layers, test-to-code ratio is roughly 2:3 and the documentation has not drifted. Fixes named: pull the business logic out of the code into a human-readable rule set (he called it the most valuable part of the project), delete the dead Trust Anchor, remove a write token that should be read-only, de-duplicate the mql LLM screen defined in two codebases. The real problem is what runs on the contractor laptop - Claude skills against the claude.ai MCP connector with direct HubSpot write scope, running without asking permission, bypassing the pipeline-approval and closed-edit rules HubSpot enforces on humans. Verdict on the open PRs: approve the move to a consolidated server, do NOT proceed with the interim laptop-resident lead router, fix it properly instead. And a standing instruction: the process of building out skills with direct access to data should stop immediately. In the 8/31 sync with Bjorn and Chris Baek he also confirmed he could pick up and make good use of the code if the contractor who wrote it did not stay - separating the keep-the-code question from the keep-the-person question.

Reasoning

Peter was asked to assess a system whose business ownership is contested, and he deliberately scoped himself to the only question he is the right person to answer. Answering the business question would have let an engineering assessment settle a commercial argument he was not party to. Separately, the technical verdict is the same principle he took to the whole engineering org 48 hours later at the AI all-hands: an agent must never hold unmediated write access to a system of record. The laptop code was the concrete instance of exactly the failure he had already been warning about. Confirming he could maintain the code without its author removes the contractor from the critical path, so the retention decision can be made on its own merits rather than under hostage conditions.

Additional Context

Karl Lowenbjer sent the repo, reading order and Marlin question answers on 8/27. The contractor arrangement is winding down - the contract ends mid-September and the other contributor departs 9/30 - which is why Chris Baek needed a keep-or-cut read within days.

Observed Evidence

Written email verdict 8/31 14:00 PT to Karl Lowenbjer, Tabatha Wilmot and Chris Baek, plus the 8/31 16:30 Fathom sync with Bjorn Hovland and Chris Baek.

Matching Patterns

60%
Constrain the Mechanism, Not the Access(deterministic code between agent and system of record, read-only token scoping, same category)

Confidence Breakdown

34/35
Evidence
26/30
Pattern
20/20
Source
14/15
Corroboration

Reasoning Depth Analysis

Org Signal:An engineering leader can be handed a politically loaded artifact and return only the part he is qualified to judge. It also tells the org that agent-with-write-access is now a named defect class, not a style preference.
Who Affected:Chris Baek and Bjorn Hovland, who own the keep-or-cut commercial call; the RevOps contractors; anyone running Claude skills against a write-scoped connector.
Precedent:Sets the standard that a code review from the CTO answers engineering questions and explicitly declines business ones - and that laptop-resident production systems are not acceptable regardless of who built them.
Consequences:Real. Two PRs get different fates, a one-to-two week port becomes required work, and the skills-with-direct-data-access practice stops.
Timing:Forced by the contractor calendar - one contract ends mid-September, the other contributor leaves 9/30, so the read had to land before notice windows closed.

Source

reflection

AI Confidence

94%

Related Context

📧
Re: Atlas deep dive: repo, reading order, Marlins answers

email

I am making ZERO statements about whether what this code was written to do is something we need at CIQ - that is a discussion for others. What I can say about the quality of the code itself though - is that with one exception it is really quite well done. ... The process of building out skills with direct access to data should stop immediately.

🎥
Sync w Peter/Bjorn - 8/31

fathom

Bjorn: if it was somebody who was not Carl, could you pick up that code and - Peter: Yeah. To make good use of it. Yep.

Outcome

No outcome recorded yet.

Decision ID: a917f5a2-a4e5-4162-ba75-7cbbb24d892d