Fig. 1b — the write path, top to bottom
Claude Code plugin · open source (MIT)
Trigger
"find duplicate contacts and merge them"
▼
Orchestrator
Claude routes via the native Agent tool
▼
44 specialist sub-agents (11 at spec)
hygieneobjectsworkflowspipelinesanalyticstriageverify+37
charters — stateless, no credentials, zero trust
▼
⛔ The gate — apply_write
preview → human approves → count re-check
undo snapshotaudit entryscope check
▼
HubSpot API — writes execute
rate-limited client · verify agent re-reads the result
▼
☺ Human — in the middle
approves that exact change · can undo it after
output: the CRM changed. every change signed.