CONDUCTOR is the orchestrator that reads your TITAN license, publishes the list of entitled agents, and refuses to spawn any agent outside your tier. Tamper-proof, audit-logged, deterministic. Included free with every paid tier.
CONDUCTOR is what makes the whole platform a single binary that nonetheless honors your tier. It reads the signed license token, validates it locally, publishes the entitled list as an environment variable, and physically refuses to start any agent outside that list.
License tokens are signed at issue and verified at every scan. CONDUCTOR refuses to run on a tampered token. The token is also stored in the audit log on every spawn.
On first run CONDUCTOR probes your Azure credentials. Audit tiers ask for Reader / SecurityAudit / roles/viewer only. Fix tiers add Contributor / PowerUserAccess / roles/editor.
When permissions are missing, CONDUCTOR prints the exact az role assignment create or aws iam attach-role-policy command for the operator. Permissions are never self-granted.
CONDUCTOR enforces the spawn order, restarts crashed agents, and exposes a central command queue for the operator. Cascade auto-recovery is handled by PHOENIX.
Read-only scan. No credit card. Full evidence pack on every finding.