Skip to content

THOX.ai Research · Paper v1.1.0 · 2026-11-04

Preprint, not peer reviewed

ThoxWork for the Enterprise: Governed Digital Employees, MeshGroups, Rolodex and Evidence-First Teamwork

Craig Ross

Chief Executive Officer

ORCID 0009-0005-9872-3673

Tommy Xaypanya

CTO and Co-Founder (corresponding author)

ORCID 0009-0000-4425-9565

THOX.ai LLC · Cedar Park, Texas · November 4, 2026

DOI 10.5281/zenodo.23965052

Abstract

Companies are adopting AI agents faster than they are governing them, and the open question for a buyer is no longer which model to use but which rules the work runs under. ThoxWork™ is THOX's third platform, the workspace where people and named Digital Employees share assignments, MeshGroups bound who may use which resources (planning is a preview today and never executes), Rolodex carries the assign, check-in and review loop, and the platform is designed so that every decision leaves a record. This comprehensive edition, v1.1.0, supersedes the published v1.0.1 edition of the ThoxWork paper [1] and extends it in five ways. First, it audits the code behind the model: 10 THOX code bases at stated commits, 3,747 tests passed when the suites were rerun for this paper, with 3 failures, and real screenshots and recordings of ThoxWork, ThoxEmployee, the Rolodex directory and validated dispatch. Second, it states the lineage honestly: the ThoxWork desktop and server shell is built on the open-source OpenWork project and the OpenCode engine, and THOX's contributions are the governance layers built on top. Third, it reconciles the record: three MeshGroup admission definitions and five assignment state machines are shown side by side with an owner, not merged. Fourth, it measures. A browser Evidence Lab re-implements the ThoxWork routing planner and agrees with the product's own function on 12,000 of 12,000 seeded previews; it agrees with the reference admission kit on 20,000 of 20,000 decisions. Comparing the two admission definitions on the same 20,000 requests, 56.3% of the reference rule's placements land on a node smaller than the demand under our demand model, while the pooled rule admits 4,333 requests the single-node rule cannot serve. For evidence, hash links alone missed tail truncation and a rebuilt suffix in all 500 trials each; a session HMAC key catches the rebuild and an external head anchor catches both, at 27.6 microseconds per keyed record. Fifth, it replays the protocol experiments of the paper of record against the live ThoxWork core service, the platform’s own server implementation of the model: 0 of 12,000 policy violations leaked, handoff chains were complete on all 5,000 reassigned tasks, the admission boundary held at exactly 120 of 121 resource units, no review-gate bypass succeeded in 6,000 attempts, and 50 parallel assignments admitted exactly to pooled capacity with zero over-admission, with three independent judges agreeing on all 102 workspaces (Section 7.7). Nothing here is measured on a customer deployment, and ThoxWork remains Coming Soon.

3,747

Product tests passed when the suites were rerun across the 10 ThoxWork repositories, with 3 failures and 34 skipped

Measured

12,000

Of 12,000 routing decisions on which the Evidence Lab planner and the ThoxWork product planner agree; 55,832 of 55,832 per-node verdicts agree

Measured

56.3%

Of reference-rule placements land on a node too small for the request; the pooled rule that governs admits 4,333 requests the reference rule cannot place (Section 7.3)

Measured

0 / 12,000

Cross-tenant policy violations leaked in the live core-service replay of the protocol experiments, with record completeness 1.0 over 5,000 tasks (Section 7.7)

Measured

0 / 6,000

Review-gate bypass attempts that succeeded in the live replay; the control arm completed 4,000 of 4,000 without review, so the gate discriminates (Section 7.7)

Measured

Contents

  1. Executive summary
  2. 1. Introduction
  3. 2. Background and related work
  4. 3. System and threat model
  5. 4. Design
  6. 5. What is built
  7. 6. The Evidence Lab
  8. 7. Evaluation
  9. 8. Governance mapping
  10. 9. Discussion and limitations
  11. 10. Conclusion
  12. 11. Roadmap and founder decisions
  13. Appendix A. Reproducibility
  14. Appendix B. Notation
  15. Appendix D. Document control, authorship and publication boundary
  16. References

Where the paper lives

Cite this paper

@techreport{ross2026thoxwork110,
  author      = {Ross, Craig and Xaypanya, Tommy},
  title       = {ThoxWork for the Enterprise: Governed Digital
                 Employees, MeshGroups, Rolodex and Evidence-First
                 Teamwork},
  institution = {THOX.ai Research},
  type        = {Technical report, comprehensive edition},
  version     = {v1.1.0},
  month       = nov,
  year        = {2026},
  doi         = {10.5281/zenodo.23965052},
  url         = {https://thox.ai/research/papers/thoxwork},
  note        = {Preprint, not peer reviewed. Supersedes v1.0.1,
                 DOI 10.5281/zenodo.23963936.}

Preprint, not peer reviewed;


Your AI. Your Data. Your Rules.™