One identity for people and agents: who may do what
Agents acting under a shared service account make every action anonymous. Why an agent needs its own identity, delegated from a person, with scopes that expire.
- identity
- permissions
- agents
Five layers, from superintelligence at the top to security and sovereignty at the base.
The whole architectureTen modules covering the whole company, all on one data model and one ontology.
All modulesPre-launch · in build
One operating system for the whole company instead of ERP, CRM, WMS and the spreadsheets between them. Agents build and run it on a self-developing model of your business, people decide what matters, and all of it runs on infrastructure you choose.
Built on open source
Nobody chose this. It is what decades of buying the best tool for each job add up to: an ERP for the books, a CRM for customers, a warehouse system for stock, and spreadsheets for everything none of them covers. Each one records what already happened, none of them acts, and the whole picture exists only in the weekly meeting where somebody assembles it by hand. Hurukan removes the seams instead of adding another product to them: one data model, one login, and one place where decisions are made and carried out.
Superintelligence at the top, your infrastructure at the base, and in between the agents that act, the model of the company they act on, and the record it all stands on. Each layer has its own page describing what it does and how it works with the others.
Ten modules share one directory of companies, people, items and documents, so a customer in marketing is the same customer in commerce, service and finance. Start with one; the others read the same data when they arrive.

B2B funnel, target accounts, campaigns and content, with lead scoring that shows its evidence.

Opportunities, quotes in variants, versioned offers, contracts, orders and billing schedules on one directory.

Planning, work queue, scheduling, hours and subcontracting; inspections, non-conformances, release and certificates.

Cases with stages, SLAs and escalation, the customer's full history, and agents drafting answers for people to send.

Every agent works inside written limits: which records it may read, what it may change, up to what value, and what must wait for a person. Proposals arrive in one approval inbox with their sources and their risk, and every action — by a person, an agent or the system — is logged with who, what and why.

Connectors bring in what the company already holds — the old ERP, spreadsheets, mailboxes, office documents, e-invoices — and land it in one data model rather than syncing copies between products. Import once, keep what still works running alongside, and retire it when the new record has proved itself.

Underneath every module is a written model of the business: its objects, the relations between them and the rules that govern them. When the company changes, an agent proposes the change to the model, a person approves it and the new version is recorded — so the system is extended by describing the business, not by configuring screens.
The Super Intelligence layer sends each task to a model under your rules: a frontier model where quality matters most, a local model where the data stays in the building. Hurukan is designed for several providers, and a model can be replaced while the agents above it stay as they are.
Hurukan's records, tasks and approvals reachable from the Microsoft 365 tools people already work in, under the same permissions as everywhere else.
PlannedAnthropic's models for drafting, analysis and agent work, used through the company's own account and chosen per task by the routing rules.
PlannedOpenAI's models as a second frontier route, so that no single provider becomes a dependency of the company's operations.
PlannedOpen-weight models running on hardware you control, for work whose data must not leave it: personnel, contracts, anything you mark as such.
PlannedAll four integrations are planned and none is live yet. They are listed so the design can be judged, not as something available today.

A change is described in plain language, an agent writes it, a person approves it and the system records it. No months of consultants clicking through configuration screens, and no change that nobody can explain afterwards.
A system that runs a whole company is the deepest dependency that company will ever take on. These five properties are what make it reasonable to take.
Runs on infrastructure you choose: your servers, your cloud account or a provider you picked. Your data and your models stay yours, and your company keeps running whatever commercial decisions are made elsewhere.
Built on an open-source stack: readable, auditable and maintainable by a team of your choosing. The licence is stated in a file, not in a headline.
New objects, processes and modules are added by describing them. An agent builds them on the same ontology, so an extension is part of the system rather than a bolt-on.
Every change is versioned, tested and reviewed, and reversible where it can be. Every release that reaches a running company has a person who owns it.
Permissions enforced on the server, not in the screen. Every change audited as human, agent or system. Critical operations are approved by people.
Said up front, because a system this ambitious should be judged first on how it is introduced and who stays in charge.
The scope above is what Hurukan is being built to do. This is where it stands today.
The five layers and the first modules are in build, designed so that the first engagements can start with one domain alongside what a company already runs.
A small number of companies, each starting with one domain alongside what they already run, chosen for fit rather than size and watched through a bad month.
Microsoft 365 Copilot, Claude, ChatGPT and local models connected through the Super Intelligence layer, each under the company's own routing rules.
Replacing the remaining operational products rather than integrating with them, while accounting stays in its own program: the real test of the idea, and the part nobody should be asked to believe in advance.
A superintelligent, agentic operating system for a whole company: one data model instead of several systems, agents that build and run it within limits you set, and an audit trail that makes the whole thing answerable.
That the system is built to use the most capable models available, frontier and local, and to route each task to the one that fits under the company's rules. It describes the capability the system draws on rather than a claim of consciousness, and judgement on critical steps stays with the people who approve them.
That is the design intent. Hurukan is built to be adopted one domain at a time alongside what you run, which is also how each company can test the claim for itself. Full accounting — the general ledger, statutory reporting and tax — stays in a dedicated accounting program that Hurukan connects to.
It runs on infrastructure you choose, the stack is open source, your data and your models stay yours, and the exit is written down at the start. Your company keeps running even if a supplier, including us, changes its terms.
It prepares, drafts, checks and proposes: a quote, a replenishment, an answer to a customer, a change to the system itself. It works within its written limits, critical operations are approved by people, and everything it does is logged.
The design covers Microsoft 365 Copilot, Claude, ChatGPT and local open-weight models, chosen per task. The routing layer is in build; the named integrations are planned and not live.
Pricing is not published yet: a price for a system of this scope is best set once the first engagements show the real work involved. The exit is decided: what is handed over, in what format and within what window, agreed at the start, because on a system this deep that clause matters more than the price.
Agents acting under a shared service account make every action anonymous. Why an agent needs its own identity, delegated from a person, with scopes that expire.
A company operating system needs two memories: the live state modules change every second, and the record of every event, proposal and decision for the audit.
Reading from a system of record is cheap and safe. Writing back is where integrations fail. What has to exist before an agent may write, and where Hurukan draws its line.
If one of your systems hurts more than the others, that is where a first conversation would start. Until the form opens, the system pages and the blog carry the argument, including the places where agents deliberately stop.
No form yet, no data collected, no sales calls.