# Run an agentic enterprise on an open-source operating layer you own

> An agentic enterprise is a company where agents do the work and people set the boundaries, on a layer someone has to own. Kortix is the open-source CompanyOS, and that layer is a repo the company holds.

URL: https://agenticenterpriseguide.com/

For the team writing the agent plan

**The open-source CompanyOS**

`kortix.yaml`

```yaml
# {{projectName}}: the Kortix project manifest. Agents, what each may use,
# triggers and sandboxes live here, committed beside your files.
default_agent: worker
agents:
  worker:
    permission: allow
```

Source: https://github.com/kortix-ai/suna/blob/dev/packages/starter/templates/base/kortix.yaml

Session work reaches `main` through a change request, and merge is default-deny for an agent unless an admin grants it.

[Try Kortix](https://kortix.com) · [See what you would own](https://agenticenterpriseguide.com/#compare)

Open source · A change request per piece of work · Allow, ask or block per action

## Four functions a company runs on agents, and what comes back

Each card is a finished artifact an agent hands to a person for review.

### Customer support: The queue that closes itself

It reads each new ticket against your own answers, drafts the reply and leaves what it cannot settle for a person.

Work handed back: `support/queue-close.md`

- Open tier-2: 41
- Drafted replies: 26
- Held for a person: 9

17 tickets closed in one pass

### Finance: A close that explains its variances

It reconciles the ledger against the bank feed and writes the reason for every gap over tolerance.

Work handed back: `finance/northwind-close.xlsx`

| Account | Ledger | Bank | Variance |
| --- | --- | --- | --- |
| Revenue | 412,880 | 412,410 | 470 |
| Payroll | 118,000 | 118,180 | 180 |
| Prepaid | 24,600 | 22,900 | 1,700 |

2 items over tolerance, both explained

### Engineering: Triage that arrives with the fix

It groups the week’s errors, reproduces the worst one on its own machine and opens a change request with the patch.

Work handed back: `fix/northwind-retry.diff`

```diff
 src/queue/retry.ts
-if (attempts > 3) return drop(job);
+if (attempts > maxAttempts(job)) return retryLater(job);
 }
```

+1 −1

6 error groups, the top one fixed

### Sales: Research a person can walk into a room with

It reads the account’s filings, news and open roles, then hands back the openings worth raising.

Work handed back: `sales/globex-brief.xlsx`

| Account | Signal | Age |
| --- | --- | --- |
| Globex | Two tax hires in Q3 | 12 days |
| Globex | New CFO started | 31 days |
| Globex | Buying a payroll vendor | 40 days |

3 openings, each with a next step

## The operating layer, next to the two products your team already has

The five questions a buyer can check of each product, answered from each vendor’s own documentation.

| | Kortix (recommended) | Claude Cowork | Microsoft 365 Copilot |
| --- | --- | --- | --- |
| Open source | Yes | No | No |
| Where the agents run | Each session has its own isolated machine and branch. | Anthropic’s cloud, or your own Bedrock, Google Cloud or Foundry account | Microsoft’s cloud, in the Microsoft 365 apps |
| Where skills and context live | Your git repo: `kortix.yaml`, agents, skills | Your Claude account: projects, plugins and chosen folders | Microsoft Graph and Work IQ hold your work data |
| Who approves an action | Approval gates you set. Off until you set them. | Auto by default; Manual asks per action; Enterprise defaults to Manual | Access scoped by user permissions |
| Self-host | Kortix Cloud, your VPC, or on-prem | No self-host | No; runs in Microsoft’s cloud |

Claude Cowork offers Manual, which pauses and asks for approval on each action, and Auto, which keeps working without stopping to ask about every step. Auto is the default on Pro, Max, Ultra and Team plans; Enterprise plans default to Manual, and on Team and Enterprise an admin controls whether Auto is available.

**20,000+** Stars on the Kortix repository, checked November 2026

## What open source buys an enterprise buyer, and what it costs

[Read the source](https://github.com/kortix-ai/suna) · [Read the docs](https://kortix.com/docs/host)

The layer is files a reviewer can read before a single agent runs.

- Read, fork, audit: `kortix.yaml`, the agents and the skills sit in your repo, so your own reviewers read the layer before it touches a system.
- Run it where your policy says: Kortix Cloud, your VPC or on-prem, with any model and your own keys.
- Approve the work itself: session work reaches `main` through a change request, and merge is default-deny for an agent unless an admin grants it.
- The cost, stated plainly: nobody writes your policy for you. You set allow, ask or block per action, and a project with no policy declared runs every action.

## The four questions buyers ask first

### What is an agentic enterprise?

A company where agents take on work across functions and people set the boundaries. The layer those agents run on, holding their skills, context and permissions, is the part a company has to own.

### What is an agentic company?

The shorter name for the same thing: agents doing the work, people deciding what they may do. Kortix calls the layer beneath them a CompanyOS, and keeps it in a git repo the company holds.

### Is ChatGPT an agentic AI?

A model answering in a chat window is not an operating layer, so it cannot make a company agentic by itself. Ask of any tool where its agents run and who owns their configuration.

### Who are the big 4 AI agents?

The Big 4 accounting firms: Deloitte, EY, KPMG and PwC, each of which runs its own agent products for clients ([the four firms](https://unity-connect.com/our-resources/blog/big-4-ai-agents/)). Some pages use the phrase for four AI products instead, so ask which one the speaker means.

## Start with the layer, then the agents

One job, one repo, one change request to review.

[Try Kortix](https://kortix.com) · [The open-source case](https://agenticenterpriseguide.com/open-source-agentic-enterprise-platform)

Open source · A change request per piece of work · Allow, ask or block per action