Design patterns for agentic software that doesn’t exist yet.
Permission Timeline
Visible history of what you've approved, with per-item revoke.
Approvals pile up and vanish into scroll history: no way to revoke one grant without ending the session. Permission Timeline treats the audit log as a primary surface. Every approval lands as a persistent row with scope, timestamp, and the action it unlocks. Each row carries its own revoke.
Cost Meter
Forecast the finish cost, not just the current spend.
An agent is eight minutes into a refactor and the spend counter reads $0.38. Useful for the bill, useless for the decision in front of you: let it run, or cancel and retry cheaper. Cost Meter pairs live spend with a locked estimate at click-time so the number means something, and tracks the session running underneath. One task isn’t the cost. The drip of all of them is.
Trust Dial
Per-action autonomy level that adjusts with history.
Agent autonomy is usually a single switch: confirm every action or run fully unattended. A large refactor and a changelog edit get treated identically. The Trust Dial aims to fix that: four levels mapped to risk tiers, with the live feed showing exactly which pending actions shift between auto-approved and held for review before you commit.
Reverse Prompt
Agent rewrites your request into its interpretation before acting.
Agents pick a scope from vague requests without telling you what they chose. “Clean up the auth code” becomes a diff: too wide, too narrow, or just wrong. You only find out after it runs. Reverse Prompt surfaces the interpretation first. Your request is rewritten as a precise, scoped statement you can edit or reject before anything executes. You approve the interpretation, not the action.
Reasoning Trace
Make the agent's chain of thought inspectable, step by step.
Most agent UIs collapse reasoning, tool calls, and decisions into a single reply, leaving no way to see why the agent did what it did. Reasoning Trace surfaces the full chain of thought as an ordered, expandable log. Each step is typed (THINK, CALL, DECIDE) with a one-line summary, expanding to reveal raw content. Step through manually or reveal the full sequence at once. Trust is earned by inspection.
Blast Radius
Before approving, see what the agent will touch.
Agents take lateral actions. One rename hits hundreds of files, breaks a colleague’s open PR, touches a sibling repo’s import. Current tools either fire the action or show a text confirmation. Blast Radius is the missing middle: a spatial view of the full perimeter, with per-item opt-out before you approve.