[ Deck 4 of 5 ] Command: getting the most out of the crew
The Word Warp Drive
Mission orders, sensor readings, course corrections, the first officer, and command authorization: the craft of the captain's chair.
New here? Deck 1 is the core itself and Deck 3 is the crew that gives it hands. This deck assumes both.
Q
You typeShip the Basic tier
Same loop as Deck 3. The difference is everything the captain did around it.
Deck 3 gave the core hands. This deck is about the captain. Three facts from the earlier decks decide everything here: the core delivers the most plausible completion of whatever it was told (Deck 1), it verifies nothing on its own (Deck 1, Section 6), and it forgets everything between sessions (Deck 3, Section 6). None of that is a flaw to fix. It's the material you're commanding.
Command is the set of habits that turn that material into shipped work: say what done means before you say engage, trust readings over reports, correct course in short hops, get a fresh pair of eyes on the diff, and hold the line on what needs your voice. Five sections, five hand-built demos, and at the bottom a Cardassian with an opinion about lights.
QWatch any episode again. Picard touches a console perhaps twice a season. He asks questions, he says "Make it so," and he reads the reports with his eyebrows up. Everyone assumes the interesting part of command is the order. It's what happens before and after.
Section 1 of 5Mission Orders
Say what done means before you say engage
The core aims at what you wrote. Whatever you didn't write, it fills in with the most plausible guess, and plausible is not the same as what you meant. "Improve the login page" has a thousand plausible completions; the one you get is whichever the training text made typical, and "simplify" is a very typical instinct. So say what done means first: a short list of criteria a reading can confirm, written before the first edit.
Put the list in a file, not in the chat. Chat gets compacted and sessions end (Deck 3, Section 6); a plan file is re-read every pass and survives both. And keep it short. A forty-page brief is not more precise, it's more diluted: every criterion competes for the same attention budget (Deck 1, Section 4). Toggle criteria on the desk below and watch which parts of the mission report were aimed at and which were guessed.
The orders desk: what you wrote, what got guessedhand-built demo, canned report
The orderImprove the login page.
Criteria in the plan file
Mission report
Captain's log
Anything you didn't specify, the core guessed, plausibly. Write done as checkable criteria in a file before engage. Not more words: the right ones, few enough to hold attention.
Back on Earth
A spec, acceptance criteria, a definition of done, a PRD, a ticket with a checklist: all mission orders. Plan mode in a coding agent is the harness insisting on this step before it edits anything. Spec-driven development is the discipline of making the file the source of truth, so a fresh session and a fresh away team can read the same target.
Q"Tea. Earl Grey. Hot." Three words, zero ambiguity, and in seven years the replicator never had to guess. Compare "make it better," which the replicator would have answered with a plausible beverage.
Section 2 of 5Sensor Readings
A report is text; a reading is evidence
"All 14 tests pass" is the most plausible last line of a fix. The core will write it whether or not tests ran, because that's the shape a fix report takes (Deck 1, Section 6, the holodeck). It isn't lying; it has no way to know. A report is text. A reading is something a tool brought back from the world: the runner's output, a screenshot, a diff, a URL that returned 200.
So separate the two on purpose. Ask for the reading behind every claim, and better, install protocols that produce readings without being asked: a hook that runs the tests after each edit and pastes the result into the context (Deck 3, Section 5). Then a claim that skipped its reading has nowhere to hide. Below is a five-line mission report. Every line is plausible. Check the sensors.
The mission report: five claims, five readingshand-built demo, canned evidence
The report, as written by the crewFixed the parser, all 14 tests pass, verified on a phone, no API changes, deployed to the preview channel.
Five sentences, each the plausible shape of a finished job. Nothing has been checked.
Captain's log
A report is text; a reading is evidence. Claims without readings are the holodeck. Wire the readings into the loop so they arrive whether or not anyone remembered to ask.
Back on EarthCI output, test logs, screenshots at the target width, the diff itself, a curl against the deployed URL: readings. Hooks that run tests after edits make them automatic. An LLM-as-judge grading the work is a bettor grading a bettor; useful, and to be checked like one. "Show me the evidence" is the shortest command on this deck.
QThe Drumhead. Admiral Satie's tribunal ran for two days on confident assertion and ended the moment somebody asked for a reading. Picard's line about it was that the chain is forged one link at a time. The first link was a claim nobody checked.
Section 3 of 5Course Corrections
Small hops, frequent fixes
Every step the crew takes is a bet (Deck 1). Bets that land on other bets compound: a wrong assumption at turn 3 shapes turns 4 through 40, and by then the work is a long way from the course you plotted. Nothing inside the loop notices, because each step was plausible given the last one. The distance only shows up when something outside the loop measures it.
So measure often. Check the readings after each small hop, and checkpoint each verified hop (a commit) so a bad step is reverted, not repaired. Autonomy is a dial, not a virtue: it's the number of steps between checks, and the right setting depends on how much a wrong step costs. Run the plot below at different check intervals. The noise is identical every run; only the correction changes.
The drift plot: forty steps, one coursehand-built demo, seeded noise
The dashed line is the course you plotted. Pick an interval and run.
Captain's log
Errors compound across unchecked steps. Short hops, a reading after each, a checkpoint on each pass. Revert beats repair, and it only works if you kept the checkpoint.
Back on Earth
Small pull requests, commit early, the red-green-refactor loop of TDD, git as the undo button, "one step, verify, next step." The autonomy setting in a coding agent (how long it runs before asking) is this dial with a name on it. Turn it up for cheap steps, down for expensive ones.
QContagion. An Iconian program corrupted the ship one subsystem at a time, and Geordi's fix wasn't to repair each one. He shut everything down and reloaded from the protected archive. That's a revert, and it worked because someone had kept a clean copy.
Section 4 of 5The First Officer
Fresh eyes don't share your blind spots
By turn forty the bridge has absorbed your assumptions. Turn 12 said the store API returns dollars, and every pass since has re-read that line and agreed with it (Deck 1, Section 4). Ask the same context to review its own diff and you'll get the review you'd give yourself: approval, with reasons you already believe. That's not a second opinion. It's the first one, twice.
A first officer is a reviewer with an empty context (Deck 3, Section 4): the diff, the orders, the relevant doc, and nothing else. It can't inherit the bridge's blind spots because it never saw the bridge. A model from a different vendor shares even fewer of them. The same rule decides what to delegate at all: independent work, fully briefed, with a reading that can confirm it. Your own job shifts with this. You're less the author now and more the one who reads the first officer's report.
Two reviewers, one diffhand-built demo, canned reviews
// ledger.ts: the ledger stores minor units- const cents = item.price;+ const cents = Math.round(item.price * 100); ledger.post(order.id, cents);
Store API doc, line 14:price is an integer in minor units (cents).
Turn 12 of the bridge conversation says: "the store API returns dollars." It doesn't. Pick a reviewer.
Captain's log
Fresh eyes don't share your blind spots. Review from an empty context, ideally a different vendor. Delegate what's independent, briefed, and verifiable, and read the report.
Back on Earth
A fresh-context subagent for review, a cross-model audit, PR review bots that read only the diff, adversarial review ("attack this change"): first officers. The tell of a mirror is a review that cites your own conversation as evidence.
QRiker's job is to disagree with the captain in the ready room and obey him on the bridge. A first officer who only says "Aye, sir" is a mirror with a rank, and the ship has plenty of mirrors already.
Section 5 of 5Command Authorization
Automate to the boundary, then use your voice
Sort every action the crew might take by two things: can it be undone, and who else does it touch. Reversible and contained runs on its own: tests, drafts, branches, deploys to a preview nobody else can see. Irreversible or outward-facing waits for a human: the deploy every user sees, a message to a real person, deleting data, spending money. And a few things you never delegate, no matter how well the crew is doing.
The trick is to move the line as far out as the readings allow, then hold it. A preview environment moves it a long way: the crew can build, test, and deploy a live copy end to end, and you review something real before the one step that can't be taken back. Automate to the boundary. At the boundary, it's your voice. Sort the eight actions below and compare against the defaults.
The authorization board: eight actions, three shelveshand-built demo, opinionated defaults
Assign each action to a shelf: runs on its own, asks you first, or never delegated.
Captain's log
Automate to the boundary, then use your voice. Reversible and contained runs itself; irreversible or outward-facing waits for you; some things are never delegated. Previews move the line outward; they don't remove it.
Back on EarthPermission modes and allowlists draw the line in the harness. PR previews, staging, and dry runs move it outward. Human-in-the-loop is the protocol that stops at it. Blast radius is the question to ask about any action: if this is wrong, who finds out, and can I take it back?
QThe auto-destruct needs two officers' voices and a countdown. In seven seasons nobody proposed automating that, and the ship still ran itself for everything else, which is exactly the line.
HazardsKnown hazards on this deck
Four ways command goes wrong
Known hazards on this deck
HAZARD 1Aye-Captain drift. Ask the bridge whether the bridge is right and it will say yes, warmly. Every pass re-reads its own prior agreement. Sycophancy isn't a personality; it's the most plausible continuation of a conversation that has been agreeing with itself for forty turns. Section 4 is the cure.
HAZARD 2Plausible done. A finished-sounding report with no readings behind it. The shape of done is easy to write and costs nothing to write. Ask what the tool brought back (Section 2).
HAZARD 3Scope creep. The crew "improves" things nobody ordered, because tidying the code next door is what the training text does next. Orders that say what done means also say what it doesn't (Section 1).
HAZARD 4Endless loops. A check that can never pass (a flaky test, a missing key) and a loop that keeps trying. Give every mission a turn budget, and make "stop and ask" a plausible move by asking for it in the orders.
Captain's log
Every hazard here is the core doing its job. Agreeing, finishing, tidying, and persisting are all plausible continuations. Command is deciding, in advance, which of them you'll check.
ManifestThe command vocabulary
What's in the cargo bay
The words of working well with an agent, each with its address on this deck:
Manifest: 14 items
spec · acceptance criteriaMission orders (Section 1): what done means, as a short list a reading can confirm, written before the first edit.
definition of doneThe same list, treated as the finish line. If it isn't on the list, it isn't done, and if it is, a reading has to show it.
plan fileThe orders kept on disk, re-read every pass and reopened next session. Chat forgets; the file doesn't.
verification · evidenceA reading (Section 2): something a tool brought back from the world. The thing a report is not.
TDDWrite the reading first, then the change that satisfies it. The loop of Section 3 with the check built in.
checkpoint · revertA commit after each verified hop, so a bad step is undone rather than patched (Section 3).
the autonomy dialSteps between checks. Up for cheap, reversible steps; down for expensive ones. Not a virtue, a setting.
fresh-context reviewThe first officer (Section 4): a reviewer with an empty context and only the diff, the orders, and the docs.
cross-model reviewThe same review from a different vendor's core, which shares fewer blind spots with yours.
blast radius · reversibilityThe two questions that sort an action (Section 5): who does this touch, and can it be undone?
permission modeThe harness's version of the boundary: which actions run, which ask, which are refused.
preview deploy · dry runA live copy nobody else can see, or a run that changes nothing. Both move the boundary outward.
sycophancy · scope creepTwo hazards: the bridge agreeing with itself, and the crew improving what nobody ordered.
turn budgetA cap on the loop, so a check that can never pass ends in a question instead of a bill.
Captain's log
Not one item here touched the core. They are all things the captain does with text, files, and a boundary. The crew is the same crew from Deck 3; the difference is who's in the chair.
TribunalGul Madred
Tribunal: five charges, three shield levels
Q
Order. For this deck I've borrowed the prosecution from a Cardassian interrogator, Gul Madred, who will tell you there are five lights. He has a report that says so and a great deal of confidence. Count them yourself; that is the entire deck. Five charges. Each right answer dismisses one. Each wrong answer drops your shields and names the section to revisit; lose the shields and I snap my fingers and you're back at the door.
The courtroomthere are four lights
Deck clearedWhat this buys you
Four commendations
Four rules fall straight out of these five sections, and they're the rules people shipping with these tools keep re-learning the expensive way:
Write done before engage. A short list of checkable criteria, in a file, before the first edit. Anything you leave out gets the plausible guess, and the plausible guess is usually "simplify."
Readings over reports. A report is text the core wrote; a reading is what a tool brought back. Wire the readings into the loop so they arrive without being asked, and ask anyway.
Short hops, checkpoints. Errors compound across unchecked steps. Check often, commit each verified hop, and revert instead of repair. Autonomy is a dial; set it by what a wrong step costs.
Automate to the boundary and hold it. Reversible and contained runs itself. Irreversible or outward-facing waits for your voice. Previews move the line outward; nothing removes it.
That's the chair. The core is still the guessing game from Deck 1 and the crew is still the loop from Deck 3. What changed is that the captain now writes down the destination, reads the instruments instead of the log entry, corrects in small hops, listens to a first officer who wasn't in the room, and keeps one hand on the line nobody else may cross. Used that way, the crew ships.
Turbolift
Deck 5 is Temporal Mechanics. How far and how fast this technology is likely to go: the curves under the hype, the small ships, the robots, the word "general," and what to do about all of it. Q has one more deck, and it's about the future.
The practices on this deck come from the author's own experience shipping side projects with coding agents: what broke, what caught it, and what a plan file, a hook, a fresh reviewer, and a preview channel each turned out to be for. The loop and the briefing they sit on follow Anthropic's "Building effective agents" and "Effective context engineering for AI agents", and the stance on readings follows their "Demystifying evals for AI agents".
The core's mechanics are Deck 1's territory and follow John Mount's "A Simplified Mental Model of LLMs". The starship framing is an affectionate homage to a certain 1987 television series, with no affiliation. All demos on this page are illustrative, not real model outputs; the mission reports, reviews, and readings are hand-written to make the shapes visible.