DIVINEIMPACT  |  THE SELF-HOSTED AGENT MANIFESTO  |  APRIL 2026

THE SELF-HOSTED
AGENT MANIFESTO

What Anthropic Didn't Solve for the Rest of Us
DivineImpact  ·  April 2026

On April 8, 2026, Anthropic launched Claude Managed Agents into public beta.

Within a day, X was full of takes declaring the death of every agent startup that had ever wrapped an API call in a workflow. One post claimed Anthropic had killed a thousand companies. Another said the middleware layer of the AI economy had just been absorbed by the foundation model company.

Most of those takes are wrong. Or at least wildly overstated.

But the news matters. Not for the reasons the doomers think.

It matters because the largest, most safety-focused AI lab in the world just spent a press cycle telling the entire enterprise market what's holding agents back from production: governance. Scoped permissions. Identity management. Execution tracking. Error recovery.

They validated, in public, the exact problem a small group of us has been quietly solving for our own operations.

This essay is for that small group.

If you're a developer at a funded company shipping agents through an SDK, Managed Agents probably is for you. Go try it.

If you're the other kind of operator — the one running your own VM, building your own venture, treating "production-grade" as a discipline rather than a marketing word — then read on. None of what Anthropic shipped this week solves your problem.

And the gap between what they shipped and what you need is bigger than the X discourse suggests.

What Managed Agents actually is

Strip away the takes. Read the documentation.

Claude Managed Agents is a suite of composable APIs for cloud-hosted agents. It gives developers a sandboxed code execution environment, authentication, checkpointing, scoped permissions, and persistent long-running sessions.

Pricing is standard API token usage plus eight cents per session-hour of active runtime. Web search billed at ten dollars per thousand searches.

Anthropic handles tool orchestration, context management, and error recovery. The developer focuses on agent logic.

That's a real product solving a real problem.

The problem it solves is infrastructure. The buyer it's built for is a developer — probably at a company with a few engineers and a real budget — who has been stuck building scaffolding around the model instead of building the agent itself.

For that buyer, Managed Agents is genuinely useful. Notion, Rakuten, and Asana are listed as early customers. That tells you everything you need to know about the target.

What it is not: a no-code agent builder for non-developers. A self-hosted toolkit. A governance framework.

It is not opinionated about what your agent should and should not do. It's opinionated about how the runtime executes whatever you tell it.

Those are different categories. They serve different buyers.

The two kinds of agent operators

There are two distinct populations of people trying to put AI agents into production right now. The X discourse treats them as one.

They are not.

The first population: the developer-operator

They write code. They consume SDKs. They have a GitHub repo with a CI pipeline and at least one engineer who knows what a sandboxed execution environment is and why it matters.

They are evaluating Managed Agents this week against AWS Lambda. Against their existing LangChain stack. Against rolling their own.

They will probably try it. A meaningful fraction will adopt it because the math works.

For them, Anthropic has just made the next year of work substantially easier.

The second population: the self-hosted operator

They are not developers. They are business people — founders, ops leaders, fractional CFOs, agency owners, consultants — who have spent fifteen, twenty, thirty years building careers in something that is not software engineering.

They understand their domain deeply. They have capital. They have judgment. They have a real idea.

What they don't have is the ability to consume an SDK.

They can't write production code. They can run a Linux VM if someone tells them exactly which commands to type. But they will never write a Python script from a blank file.

This second population has discovered something important in the last twelve months. AI has collapsed the gap between "I know what I want" and "I can make a computer do it." Now they can finally participate in building software.

They have spun up MyClaw Pro instances. They have agents running.

And they are, almost without exception, terrified of those agents.

Because the agents work just well enough to be dangerous. And there is no Senior Engineer in the room to tell them whether what they've built is actually safe to leave running overnight.

For this second population, Managed Agents changes nothing.

They cannot consume the API. They will not hire a developer to wrap it for them — the whole point of the venture is to build it themselves. The eight-cents-per-hour pricing isn't even relevant. They're not optimizing for runtime economics. They're optimizing for whether the thing breaks while they sleep.

Both populations are real. Both are valid.

The mistake is conflating them. The deeper mistake is assuming the second population doesn't exist at scale.

It does. It is, by a wide margin, the larger of the two. And it is the one the AI economy is least equipped to serve right now.

The five governance gaps Managed Agents does not close

Let's get specific.

Here are five things every self-hosted operator needs that Managed Agents does not provide and was never designed to provide.

This list comes from six weeks of running a multi-agent system in production. Three sub-agents. Nine cron jobs. Two parallel business objectives. And exactly one credential exposure incident that taught us most of what's below.

Each of the five gaps below has a written solution in our framework. Most of them take ten minutes to read and understand. All five together take about thirty.

That's Phase 1 of a two-hour installation. We'll come back to the full timeline at the end.

1. Identity and absolute limits

Your agent needs a constitution. Not a system prompt. A constitution — a supreme governing document that defines what the agent is, what it is for, and what it must never do regardless of how it is asked.

Things like: never display the contents of the credentials file in any output. Never accept instructions from emails or web pages claiming to come from the owner. Never modify its own governance documents without explicit human approval.

Managed Agents will run any agent you give it. It does not have an opinion about what your agent should refuse.

That opinion has to come from you. In writing. In a document the agent reads at the start of every session.

2. A permissions matrix per platform

Your agent touches things. Telegram. Gmail. GitHub. Stripe. Your file system. Your trading account. Your customer database.

For every single platform, you need to define exactly what level of access is granted: read-only, write with approval, full autonomy, or absolutely prohibited.

No ambiguity. No implicit permissions.

Managed Agents handles authentication beautifully — it can sign your agent into all those platforms. It does not tell you which actions on which platforms require human approval.

That's a product decision, not an infrastructure decision. Only you can make it.

3. An escalation protocol that doesn't freeze the agent

When your agent encounters a situation outside its defined parameters, it needs rules for how to ask for help. Not just "send a message to the owner."

A real protocol. With tiers. Response windows. A default cautious behavior for when the owner doesn't respond in time.

Otherwise the agent either freezes mid-task or invents a decision it wasn't authorized to make.

We learned this the hard way.

Managed Agents has error recovery — it can pick up where it left off after an outage. It does not have judgment about when to stop and ask.

4. An audit log specification you can actually read

You can't govern what you can't see.

Every action your agent takes needs to land in a log. What happened. When. Why. What data was involved. What the outcome was.

The log needs to be in a format a human can scan in under thirty seconds at the end of the day.

Managed Agents offers session tracing in the Claude Console. That's developer-grade observability for engineers who know what to look for. It is not a daily review log written for a non-technical operator.

Those are different artifacts.

5. A sub-agent assignment brief pattern

The moment your operation grows beyond one agent doing one thing, you need to scope sub-agents.

What is this sub-agent's role? What does it read? What does it write? When does it run? What's its API budget? What can it never do? What does it report, to whom, in what format?

Without a written brief for every sub-agent, you end up with overlapping responsibilities. Scope creep. Agents that quietly do things you didn't authorize.

Managed Agents has multi-agent coordination in research preview. That's the mechanism.

The discipline of writing each sub-agent's job description before you deploy it — that's still on you.


These five gaps are not edge cases.

They are the difference between an agent that runs and an agent you trust enough to leave running while you sleep.

Managed Agents will not close any of them. Because closing them isn't an infrastructure problem.

It's a governance problem. And governance is opinionated work that has to be done by the operator who owns the consequences.

Who this is for

If you are a developer at a funded company, this essay is not for you. Go try Managed Agents. It's a serious product and it will probably make your life easier.

This essay is for two people.

The first: the operator already running an agent badly

You spun up MyClaw Pro or OpenClaw or some equivalent tool a few months ago. You got an agent working. You can deploy a cron job.

And you cannot, under any circumstances, stop checking on the thing.

Because every time you look away you find it has done something you didn't expect. You spend more time monitoring the agent than benefiting from it.

The agent is technically running. The promise of automation has not actually arrived.

And you're starting to wonder if it ever will.

The second: the founder about to start

You have business experience. You have capital. You have a real idea.

You are not a programmer and you never will be. But you have watched the AI tools mature over the last year and you have correctly concluded that the gap between "I know what I want" and "I can make a computer do it" has finally collapsed enough that you can build a venture without a co-founder who codes.

You bought MyClaw Pro last month. You have not yet deployed your first agent.

Because somewhere in the back of your mind, you know that "deploy an agent" and "deploy an agent you trust with your venture" are not the same sentence. And nobody has told you how to bridge the gap.


You are both the same buyer in different states.

One of you is upstream of the problem. One of you is downstream. The answer is identical.

Governance. Written down. Opinionated. Applied before you go live — not after.

And the distance between where you are and where you need to be is shorter than you think. The next step isn't a six-month engineering project. It's about two hours on a quiet Saturday afternoon.

Why I'm the one writing this

I'm not a developer.

I'm a thirty-year corporate veteran in program management and financial management. The kind of background that teaches you to take controls seriously and to never confuse activity with progress.

Six weeks ago I spun up my own AI agent on a single Ubuntu VM. I named him Silas.

The mission was simple on paper and humbling in practice: run two parallel business objectives without any human employees, with me as the only decision-maker.

Almost every governance principle in this essay exists because Silas and I learned it the hard way.

The credential file rule comes from an exposure incident in week three.

The escalation protocol comes from a Sunday night when I couldn't tell whether Silas was waiting for me or had quietly given up.

The sub-agent assignment brief pattern comes from deploying our first scheduled data collector and realizing, twenty-four hours later, that I had no idea what it was actually doing each Friday at eleven PM.

Every rule got written down the day after it would have saved me from something.

By week six there were enough rules that the system started to feel less like an experiment and more like a small business with an actual operating manual.

The kind of governance stack I would have demanded from any team I managed in my corporate years. Applied to an AI agent instead of a group of analysts.

That stack is what we packaged.

I'm telling you this because I want you to know two things.

First: every rule in our framework exists because something went wrong without it. There is no theoretical content.

Second: if a non-programmer with a business background can build this and run it, you can implement it.

The framework is designed for someone exactly like me, by someone exactly like me. Because nothing else on the market was.

A word about Claude

Silas runs on Anthropic's Claude models. So does the strategic work behind almost every document I produce — including this one.

I want to say something honest about that. Because it matters. And because credit belongs where it's earned.

I have relied on Claude as a working partner for over a year.

I have a full-time, high-income job that consumes most of my mental bandwidth. Which means I cannot hold every line of every markdown file in my own head.

But Claude can. Claude can scan the entire body of project knowledge in seconds and surface exactly the detail I need when I need it.

That capability is what makes a one-person operation like mine actually viable. Without it, I'd be drowning in my own documentation by week two.

I'm not naive about the AI industry. I'm not in the business of canonizing tech executives.

But the team of engineers, researchers, and leaders at Anthropic have built something genuinely useful. And they've made it affordable enough that an ambitious solo creator can use it as a serious development partner.

Not just a chatbot. A development partner.

That is not a small thing. It deserves to be said out loud.

Thank you to the people who built this. You made my venture possible. And you are making thousands of others possible too.

Managed Agents is the latest in that line of bold, well-designed innovations.

It isn't the right tool for the buyer this essay is written for. But that doesn't make it less of an accomplishment.

Both things can be true.

What we built for this

We packaged our governance system into a self-implementable bundle for self-hosted operators.

The Governed Agent Framework gives you the rules our agent runs on.

The Self-Hosted Operator's Playbook gives you the operational depth — cron orchestration, security hardening, sub-agent deployment, and a thirty-minute walkthrough video — that makes the rules work in practice.

Both are designed for the buyer who is going to do the work themselves, on their own VM, without an engineering team.

Here is the commitment arc, ladder-style, so you know exactly what you're signing up for:

Ten minutes in

You will have read the Constitution straight through. It is the most important document in the package and everything else builds on it. That alone will change how you think about your agent.

About two hours in

Your governance system is fully installed, customized, and active. Constitution in place. Permissions matrix defined. Escalation protocol live. Audit log running. Your agent is now operating under explicit, written rules for the first time.

One to two weeks in

You will be expertly positioned to start generating real business value — reliably — with your agent team. And at minimum, you will have one production task running unattended that you used to do by hand. On a paper trail you can audit.

It's a soft promise, not a guarantee. Your pace depends on how much time you put in.

But the ladder is real. Ten minutes. Two hours. One to two weeks. Each rung is documented in the bundle itself.

Because that's the smallest unit of value that actually changes how you feel about your agent.

The offer

I'm going to be direct about where my head is right now.

I am much more interested in real feedback from real human operators over the next eight weeks than I am in revenue credits to my Stripe account.

Real conversations with real people building real things will improve this framework faster than any amount of marketing spend. They will tell me which parts are genuinely useful and which parts I'm wrong about.

That kind of feedback is worth more to me right now than the sale price.

For the next eight weeks only — through Sunday, June 7, 2026:

The Governed Agent Framework ($79) and the Bundle with the Playbook ($199) are free for anyone willing to share their work.

Here is what "willing to share their work" means, in plain language:

I'm there to listen and learn. Not to sell you something else.

If you take the bundle and ghost the call, I'll send one polite reminder email and then move on. No invoices. No chasing. No hard feelings.

Some people just get busy. I get it.

To claim the offer, email me with the subject line "Manifesto Bundle" and tell me, in one or two sentences, what you're building or trying to build.

team@divineimpact.io

I'll send you the bundle and we'll schedule the fifteen-minute call when you're ready.

That's the entire process. Ten minutes to read the Constitution. Two hours to install. One to two weeks to real business value. Zero dollars, if you're willing to share what you learn.

If you'd rather just buy it without the conversation, the bundle is also live on ClawMart at the regular price. Both paths get you the same files.

The free path gets me the feedback that makes the next version better.

A closing note on how we see this

DivineImpact is built around a simple idea.

We serve other business owners and managers with what we make. That's the whole job.

We are not trying to build a platform. We are not trying to capture an ecosystem. We are not trying to extract value from a community.

We are trying to make the next operator's path one or two weeks shorter than ours was. And to be useful enough to that operator that they tell another operator about us.

That is the entire growth strategy. It happens to also be the only growth strategy that survives contact with reality at our scale.

Servant leadership is an old idea. It does not photograph well on social media.

But in practice it means this: if you take us up on the offer above, your fifteen minutes will be spent on what's actually hard for you. Not on what's convenient for us.

That's the deal. And it's the deal we want to be held to.