THOX.ai Research · Paper v1.1.0 · 2026-11-04
Preprint, not peer reviewedThoxWork for the Enterprise: Governed Digital Employees, MeshGroups, Rolodex and Evidence-First Teamwork
THOX.ai LLC · Cedar Park, Texas · November 4, 2026
Abstract
Companies are adopting AI agents faster than they are governing them, and the open question for a buyer is no longer which model to use but which rules the work runs under. ThoxWork™ is THOX's third platform, the workspace where people and named Digital Employees share assignments, MeshGroups bound who may use which resources (planning is a preview today and never executes), Rolodex carries the assign, check-in and review loop, and the platform is designed so that every decision leaves a record. This comprehensive edition, v1.1.0, supersedes the published v1.0.1 edition of the ThoxWork paper [1] and extends it in five ways. First, it audits the code behind the model: 10 THOX code bases at stated commits, 3,747 tests passed when the suites were rerun for this paper, with 3 failures, and real screenshots and recordings of ThoxWork, ThoxEmployee, the Rolodex directory and validated dispatch. Second, it states the lineage honestly: the ThoxWork desktop and server shell is built on the open-source OpenWork project and the OpenCode engine, and THOX's contributions are the governance layers built on top. Third, it reconciles the record: three MeshGroup admission definitions and five assignment state machines are shown side by side with an owner, not merged. Fourth, it measures. A browser Evidence Lab re-implements the ThoxWork routing planner and agrees with the product's own function on 12,000 of 12,000 seeded previews; it agrees with the reference admission kit on 20,000 of 20,000 decisions. Comparing the two admission definitions on the same 20,000 requests, 56.3% of the reference rule's placements land on a node smaller than the demand under our demand model, while the pooled rule admits 4,333 requests the single-node rule cannot serve. For evidence, hash links alone missed tail truncation and a rebuilt suffix in all 500 trials each; a session HMAC key catches the rebuild and an external head anchor catches both, at 27.6 microseconds per keyed record. Fifth, it replays the protocol experiments of the paper of record against the live ThoxWork core service, the platform’s own server implementation of the model: 0 of 12,000 policy violations leaked, handoff chains were complete on all 5,000 reassigned tasks, the admission boundary held at exactly 120 of 121 resource units, no review-gate bypass succeeded in 6,000 attempts, and 50 parallel assignments admitted exactly to pooled capacity with zero over-admission, with three independent judges agreeing on all 102 workspaces (Section 7.7). Nothing here is measured on a customer deployment, and ThoxWork remains Coming Soon.
3,747
Product tests passed when the suites were rerun across the 10 ThoxWork repositories, with 3 failures and 34 skipped
Measured
12,000
Of 12,000 routing decisions on which the Evidence Lab planner and the ThoxWork product planner agree; 55,832 of 55,832 per-node verdicts agree
Measured
56.3%
Of reference-rule placements land on a node too small for the request; the pooled rule that governs admits 4,333 requests the reference rule cannot place (Section 7.3)
Measured
0 / 12,000
Cross-tenant policy violations leaked in the live core-service replay of the protocol experiments, with record completeness 1.0 over 5,000 tasks (Section 7.7)
Measured
0 / 6,000
Review-gate bypass attempts that succeeded in the live replay; the control arm completed 4,000 of 4,000 without review, so the gate discriminates (Section 7.7)
Measured
Contents
- Executive summary
- 1. Introduction
- 2. Background and related work
- 3. System and threat model
- 4. Design
- 5. What is built
- 6. The Evidence Lab
- 7. Evaluation
- 8. Governance mapping
- 9. Discussion and limitations
- 10. Conclusion
- 11. Roadmap and founder decisions
- Appendix A. Reproducibility
- Appendix B. Notation
- Appendix D. Document control, authorship and publication boundary
- References
Where the paper lives
- Read the paper (HTML)
The v1.1.0 comprehensive edition (HTML), hosted on this site
- Download the paper (PDF)
The v1.1.0 comprehensive edition (PDF), hosted on this site
- Browser demo
The ThoxWork Evidence Lab in the browser: admission rules, the MeshGroup planner and the hash-chained evidence record
- GitHub paper repository
Public paper repository: https://github.com/ttracx/thox-research-paper/tree/main/papers/thoxwork/v1.1.0
- DOI record
Zenodo DOI 10.5281/zenodo.23965052
Cite this paper
@techreport{ross2026thoxwork110,
author = {Ross, Craig and Xaypanya, Tommy},
title = {ThoxWork for the Enterprise: Governed Digital
Employees, MeshGroups, Rolodex and Evidence-First
Teamwork},
institution = {THOX.ai Research},
type = {Technical report, comprehensive edition},
version = {v1.1.0},
month = nov,
year = {2026},
doi = {10.5281/zenodo.23965052},
url = {https://thox.ai/research/papers/thoxwork},
note = {Preprint, not peer reviewed. Supersedes v1.0.1,
DOI 10.5281/zenodo.23963936.}
Preprint, not peer reviewed;
Your AI. Your Data. Your Rules.™