Skip to content

A.3. Glossary

Overview​

This chapter collects the meanings of the terms used in administrator work. It uses the same names that appear on the screen. The same thing is always called by the same word. Ordinary terms are in the first table and product names and abbreviations are in the second. Each table is in alphabetical order.

General Terms​

TermMeaning
AdministratorA person who manages the whole of AAS. It is one of: a person who received the administrator role on the sign-in server, a person designated on the "Users & permissions" screen, or a person the operator designated at installation.
AllowanceThe act of an administrator permitting each AI agent workspace to receive packages from the "Restricted" namespace. It is a record inside AAS and has nothing to do with billing.
Approval settingsSettings that decide how approval is obtained before a risky command runs. Only administrators change them.
Auto upgradeA function that automatically upgrades profiles that have not been modified to the new version of a built-in skill.
Automatic approval (no admin review)A way of publishing the publish request for a skill made by the owner without administrator approval.
Backup copyA copy of the content from before a change, kept for a set period.
BandA one-line message shown at the very top of the screen. Notices, restart guidance, and rollout progress steps appear as bands.
CanaryA test AI agent workspace that is switched to the new version first.
Change logA screen that records who changed what and when. Values are not recorded.
ChannelOne messenger connected to a profile. You work with it on the "Channels" tab of the profile detail window.
CollectionThe act of reading and saving the dashboard numbers at regular intervals.
ContainerA way of running a program bundled together with the files it needs.
DashboardThe first screen, which gathers the status of AI agent workspaces and the items that need action on one screen.
Data volumeThe disk that an AI agent workspace uses. It remains even if the workspace is deleted.
DepartmentAn organizational unit that a user belongs to. It becomes the audience for department notices and the scope of a team manager.
DictationA function that turns speech into text. You use it with "Voice input" in the message box.
DrawerThe detail pane that opens on the right side of the screen. This manual calls it this. It opens when you click a row in a list.
Export fileA file that keeps the settings, scheduled jobs, skills, and memory of a deleted AI agent workspace.
FallbackThe model that is used instead when the main model cannot answer.
False positiveA decision in which a guardrail wrongly blocks normal text.
Force disconnectAn administrator disconnects another person's Claude Code connection and writes a reason.
GatewayThe channel through which an AI agent receives messenger messages and scheduled jobs. Only administrators turn it on and off. It is used together with "Messenger connections" on the screen.
General userA person who is signed in and is not an administrator, and is neither the owner nor a team manager of the AI agent workspace in question.
GroupA unit that collects similar items. There are the "Kind" groups of the change log and the screen groups of the left menu.
GuardrailA safeguard that checks a question before it goes to an AI agent and blocks it if it goes against policy.
Guardrail categoryA classification of the reasons a guardrail blocked something. Example: jailbreak attempt.
ImageA set of files used to create the container that runs the server or Hermes.
InboxThe place where approval requests, user requests, and notices gather.
Internal certificate (CA)A certificate made by a Certificate Authority that the company runs itself. A PC must trust this certificate to connect to internal HTTPS addresses.
Internal wiki connectionA connection that lets an AI agent read and write pages in an internal wiki such as Docmost or Outline.
KanbanA board inside the Office that divides work into cards and manages them.
KubernetesA platform that runs and manages server programs across several computers. It is the environment in which AAS is installed.
Kubernetes namespaceA division that separates resources inside Kubernetes. The resource limits of an AI agent workspace are set in this unit.
Main modelThe AI model a profile uses to make answers.
Main profile (main)The profile a user receives first. Its name is main.
Manual tokenA Claude Code connection token used where there is no browser. Choose the expiry from 7, 30, 60, or 90 days.
Mark as seenMarking an item in "To check" as read so that it is removed from the list. It does not fix the problem, it only closes the notice.
Messenger connectionA way to talk to an AI agent through a messenger such as Telegram or Slack. The program that accepts the connection is the gateway.
MirrorA copy of a publicly released skill. It is in the community area.
NamespaceA division that separates packages inside the Skill Hub. There are shared, restricted, and community. It is different from a Kubernetes namespace.
New versionThe state in which a higher version has been published to the Skill Hub and can be upgraded to.
NodeThe server computer on which AI agent workspaces run. Several workspaces run on one server.
NoticeA message that announces maintenance, outages, and news of new features in a band at the top of user screens for a set period.
OfficeA 3D screen where several AI agents and people work together in one room.
OperatorThe person who installs AAS and manages the server. They may or may not be the same person as the administrator.
OwnerThe user who has that AI agent workspace. The same as workspace owner.
Ownership transferChanging the owner of an AI agent workspace to another person.
PackageThe unit of distribution published to the Skill Hub.
Personality (SOUL)The text that decides what kind of AI agent a profile is.
ProfileThe set of settings for one AI agent inside an AI agent workspace. Each workspace starts with one main profile (main).
Publish requestA request in which a user asks to put a skill they made into the Skill Hub.
Read aloudA function that plays an AI answer as speech.
RestrictedA Skill Hub namespace that an administrator must allow for each AI agent workspace before it can receive its packages.
Role templateA template for the personality (SOUL) of each company role. Administrators make them and use them for new profiles.
RolloutSwitching users' Hermes to a new version, one after another.
Scheduled job (cron)Work that an AI agent does at a set time.
SecretA key or password put into a profile. The value is not shown again on the screen.
Session (chat session)One set of conversation with an AI agent. The "Usage" screen counts them.
Session (sign-in session)The signed-in state that continues after you sign in. It ends if nothing is done for a set time.
SharedA Skill Hub namespace that every AI agent workspace can receive.
SkillA bundle that teaches an AI agent how to do a particular job.
Skill Hub (SkillHub)The place that stores skill packages and lets you install them into profiles.
Skill mapA screen that shows as a diagram where a skill is called from and what it calls.
Team managerA person an administrator designates for each department. They treat the AI agent workspaces of people in the same department as if they were the owner.
To checkThe list of items that need action, shown on the dashboard and in profiles.
Token (API key or token, manual token)A secret key used to connect. It is different from a token, the unit of text that a model reads and writes.
Token (usage)The unit of text that a model reads and writes. Input tokens are the text and instructions the user sent. Output tokens are the answer the AI wrote.
ToolsetA unit that groups the tools an AI agent can use so you can turn them on and off together.
TooltipA small explanation that appears when you hover the mouse over something.
UsageA screen that shows chat sessions and token usage.
Work instructions (AGENTS)The text that describes how a profile works.
Workspace ownerThe user who has that AI agent workspace. The same as owner.

Product Names and Abbreviations​

TermMeaning
AAS (CogentAI AAS)A management console for seeing several AI agents on one screen, giving them work, and having them work together
AAS built-in skillsSkills that AAS puts into every profile. They are the six packages in 6.3. Built-in Skills and New Version Notices.
AI agentAn entity that chats and does work. In the chat list it appears under the profile name. It becomes a chat partner, an Office character, a meeting participant, and a Kanban assignee.
AI agent workspaceThe place where an AI agent works, created one per user. It holds settings, skills, memory, and files. Creation, count limits, suspension, and the owner are all decided in this unit.
API keys & tokensKeys and tokens an AI agent uses to connect to models or external services. Values are not shown on the screen.
Claude CodeAn AI coding tool users run on their PCs. It can be connected to AAS to operate their own AI agents.
communityA read-only namespace that holds copies of publicly released skills whose licenses were checked
COP (OPENMARU Container Orchestration Platform)The platform on which AAS is installed. How to install is in the AAS installation chapter of the COP installation guide.
HermesThe program that runs AI agents inside a workspace (NousResearch Hermes Agent)
KeycloakThe sign-in server of AAS. It is shown as "OIDC" on the screen. The operator sets up roles and groups.
LiteLLMA model call server that lets you call several AI models through one address. AAS chat, guardrail, and voice calls all go through it.
MCP (Model Context Protocol)A connection standard that lets an AI agent use the tools of other systems
OAuth connectionA Claude Code connection made by signing in through the browser. The expiry extends each time it is used.
OIDC (OpenID Connect)The standard way for a sign-in server such as Keycloak and AAS to exchange user information
PVCThe Kubernetes item that requests the disk of an AI agent workspace. It appears as "PVC size" on the screen.
SSO (Single Sign-On)A method where you sign in once and use several services. AAS uses a separate sign-in server.