Skip to content
Agentic Enterprise Guide

For the team writing the agent plan

Run an agentic enterprise on an open-source operating layer you own

The open-source CompanyOS

An agentic enterprise is a company where agents do the work and people set the boundaries, on a layer someone has to own. Kortix is the open-source CompanyOS, and that layer is a repo the company holds.

Open source · A change request per piece of work · Allow, ask or block per action

Session work reaches main through a change request, and merge is default-deny for an agent unless an admin grants it.
Session work reaches main through a change request, and merge is default-deny for an agent unless an admin grants it.Change history
kortix.yamlyaml
# {{projectName}}: the Kortix project manifest. Agents, what each may use,# triggers and sandboxes live here, committed beside your files.default_agent: workeragents:  worker:    permission: allow

Source: https://github.com/kortix-ai/suna/blob/dev/packages/starter/templates/base/kortix.yaml

Four functions a company runs on agents, and what comes back

Work handed back

Each card is a finished artifact an agent hands to a person for review.

Customer supportsupport/queue-close.md

The queue that closes itself

It reads each new ticket against your own answers, drafts the reply and leaves what it cannot settle for a person.

Open tier-2
41
Drafted replies
26
Held for a person
9

17 tickets closed in one pass

Financefinance/northwind-close.xlsx

A close that explains its variances

It reconciles the ledger against the bank feed and writes the reason for every gap over tolerance.

AccountLedgerBankVariance
Revenue412,880412,410470
Payroll118,000118,180180
Prepaid24,60022,9001,700

2 items over tolerance, both explained

Engineeringfix/northwind-retry.diff

Triage that arrives with the fix

It groups the week’s errors, reproduces the worst one on its own machine and opens a change request with the patch.

src/queue/retry.ts
if (attempts > 3) return drop(job);
if (attempts > maxAttempts(job)) return retryLater(job);
}

+1 −1

6 error groups, the top one fixed

Salessales/globex-brief.xlsx

Research a person can walk into a room with

It reads the account’s filings, news and open roles, then hands back the openings worth raising.

AccountSignalAge
GlobexTwo tax hires in Q312 days
GlobexNew CFO started31 days
GlobexBuying a payroll vendor40 days

3 openings, each with a next step

The operating layer, next to the two products your team already has

The five questions a buyer can check of each product, answered from each vendor’s own documentation.

KortixThe open-source CompanyOS
Open source
Yes
Where the agents run
Each session has its own isolated machine and branch.
Where skills and context live
Your git repo: kortix.yaml, agents, skills
Who approves an action
Approval gates you set. Off until you set them.
Self-host
Kortix Cloud, your VPC, or on-prem
Claude Cowork
Open source
No
Where the agents run
Anthropic’s cloud, or your own Bedrock, Google Cloud or Foundry account
Where skills and context live
Your Claude account: projects, plugins and chosen folders
Who approves an action
Auto by default; Manual asks per action; Enterprise defaults to Manual
Self-host
No self-host
Microsoft 365 Copilot
Open source
No
Where the agents run
Microsoft’s cloud, in the Microsoft 365 apps
Where skills and context live
Microsoft Graph and Work IQ hold your work data
Who approves an action
Access scoped by user permissions
Self-host
No; runs in Microsoft’s cloud

Claude Cowork offers Manual, which pauses and asks for approval on each action, and Auto, which keeps working without stopping to ask about every step. Auto is the default on Pro, Max, Ultra and Team plans; Enterprise plans default to Manual, and on Team and Enterprise an admin controls whether Auto is available.

What open source buys an enterprise buyer, and what it costs

20,000+

Stars on the Kortix repository, checked November 2026

The layer is files a reviewer can read before a single agent runs.

  • Read, fork, audit: kortix.yaml, the agents and the skills sit in your repo, so your own reviewers read the layer before it touches a system.
  • Run it where your policy says: Kortix Cloud, your VPC or on-prem, with any model and your own keys.
  • Approve the work itself: session work reaches main through a change request, and merge is default-deny for an agent unless an admin grants it.
  • The cost, stated plainly: nobody writes your policy for you. You set allow, ask or block per action, and a project with no policy declared runs every action.

The four questions buyers ask first

What is an agentic enterprise?

A company where agents take on work across functions and people set the boundaries. The layer those agents run on, holding their skills, context and permissions, is the part a company has to own.

What is an agentic company?

The shorter name for the same thing: agents doing the work, people deciding what they may do. Kortix calls the layer beneath them a CompanyOS, and keeps it in a git repo the company holds.

Is ChatGPT an agentic AI?

A model answering in a chat window is not an operating layer, so it cannot make a company agentic by itself. Ask of any tool where its agents run and who owns their configuration.

Who are the big 4 AI agents?

The Big 4 accounting firms: Deloitte, EY, KPMG and PwC, each of which runs its own agent products for clients (the four firms). Some pages use the phrase for four AI products instead, so ask which one the speaker means.

Start with the layer, then the agents

One job, one repo, one change request to review.

Open source · A change request per piece of work · Allow, ask or block per action