Platform overview

Government in Service.

Infrastructure for the Agentic State

This is not a technology proposal. It is an operating model for how citizens interact with government in an age of AI agents.
01

The problem today

Government has over 1,500 services across dozens of departments. When something significant happens in your life, it is your job to find them, understand them, and deal with each one separately.

Today With an agent
You search GOV.UK, guess which service you need, and hope you find the right one You describe your situation in plain language and the agent identifies every relevant service
You fill in the same details on every form — name, address, NI number, again and again Your verified data is used once — the agent fills in forms across departments for you
Nobody tells you about services you are entitled to but did not know existed The agent proactively surfaces services you are eligible for but would never have found
If your situation crosses departments, you navigate each one alone One conversation spans every department involved in your life event
There is no record of what you were told, why, or what happened next Every action is recorded: what was done, by whom, why, and with your explicit consent
02

Two products, one platform

For agents to work on behalf of citizens, two things must be true.

1

The citizen needs a trustworthy agent

2

Government services need to be understandable by that agent

Citizen app

For citizens and the people who help them

  • Tell your agent what is happening in your life, in your own words
  • Review a plan of every service you need, across every department
  • Give consent for each service individually — nothing happens without your approval
  • Delegate to the agent or act yourself — you choose, service by service
  • Get a receipt for everything — what was submitted, when, and to whom

Legibility Studio

For departments and service teams

  • Describe your services in structured descriptions that any agent can read
  • See which of your services are agent-ready and which have gaps
  • Audit every agent interaction with your services — full evidence trail
  • Replay any citizen journey step by step for complaints or oversight
  • Track case volumes and completion rates across your service portfolio

The citizen side consumes what the department side publishes. Neither works without the other.

03

How services become legible

For a service to work through an agent, the department will need to publish a structured service description — a machine-readable expression of policy decisions they already make. Every service description has four dimensions.

Identity

What the service is. Department ownership, SLA, fees, redress routes.

"This service exists, it costs £14, takes 10 working days, and complaints go to the Parliamentary Ombudsman."

Eligibility

Who qualifies. Evaluable conditions published by the department.

"Check these 3 rules. If rule 2 fails, suggest alternative Y."

Journey

The valid sequence of steps. What must happen before what.

"Verify identity before checking eligibility, and do not submit before consent."

Data sharing

What data is shared, from where, with whom, and for what purpose.

"Ask permission to share these fields, from this source, for this purpose."

Together, these four dimensions form the complete contract between a department and any agent acting for a citizen — structured records in a service registry, versioned, governed, and published automatically to every channel.

See the full field-level specifications →

04

The citizen experience

One conversation that spans every department. You describe what is happening in your life; the agent takes care of the rest.

1

You describe what's happening

"My husband died three weeks ago." The agent understands your situation and identifies every service you need — across every department, not just one.

2

The agent shows you a plan

All the services laid out together — what needs to happen, in what order, and which departments are involved.

3

You review and give consent

Before anything is shared, you see exactly what data will be sent, to whom, and why. You approve each one individually. Nothing happens without your say-so.

4

The agent handles the paperwork

Forms are pre-filled from your verified details. The agent submits on your behalf, service by service, so you are not re-entering the same information six times over.

5

You get a receipt for everything

Every submission is confirmed — what was sent, to which department, when, and with a reference number. You have a permanent record. So does the department.

05

The Legibility Studio

The Legibility Studio is where departments make their services ready for agents. It is an authoring, auditing, and measurement platform — one place where service teams describe what their services do, and then see how agents are using them.

Author

Describe your services using the four-dimension model. The editor guides service teams through identity, eligibility, journey, and data sharing — with LLM-assisted generation for teams starting from scratch.

Audit

Every agent interaction with your services is recorded. The evidence explorer lets you replay any citizen journey step by step, see exactly what data was shared and why, and investigate complaints with full context.

Measure

See which of your services are agent-ready and which have gaps. Coverage cards show completion status. Priority sorting helps teams focus on the services that matter most.

06

The deterministic boundary

The most common concern about AI in government: what if it gets things wrong? The answer is an architecture where the AI is never the one making decisions.

The AI handles language. Code handles rules.

What the AI does

  • Interprets "my mum just died" as a bereavement life event
  • Explains eligibility results in plain English
  • Adjusts tone for sensitive situations
  • Asks follow-up questions when the situation is ambiguous

What code does

  • Evaluates eligibility from department-published rules
  • Enforces the valid sequence of steps
  • Blocks data sharing without consent
  • Submits data through audited gateways
  • Records every action in an immutable evidence store

If the AI suggests something that contradicts the service description, the runtime blocks it. The AI is a communicator, not a decision-maker.

Principle 1: Eligibility is code, not AI Policy rules are evaluated deterministically. The AI cannot override, reinterpret, or relax an eligibility condition.
Principle 2: Consent cannot be bypassed The consent gate sits outside the AI entirely. No prompt, no edge case, no system error can cause data to be shared without approval.
Principle 3: Every action is traced The evidence plane records independently. Receipts are issued. Full replay is possible for audit.
07

Strategic context

This is evolution, not revolution. The operating model builds on foundations government has already laid.

GOV.UK One Login

Identity verification is reused, not rebuilt. The agent authenticates citizens through One Login, the same infrastructure departments already trust.

Tell Us Once, extended

The Tell Us Once principle — notify government once, not repeatedly — currently applies to death notifications. This model extends it to every life event.

GDS service standards

The four dimensions complement GDS's existing service register and design standards. They add machine-readable descriptions alongside the human-readable guidance departments already publish.

Departmental systems unchanged

This does not replace departmental back-end systems. It makes them accessible through a new channel — one where citizens are guided rather than left to navigate alone.

Risks and inclusion

The most common objections, and how the architecture addresses each one.

What if the AI hallucinates?
Eligibility and consent are deterministic code. The AI writes sentences; code makes decisions.
What about accountability?
Full evidence trail. Every action is receipted and replayable.
What about safeguarding?
Automatic detection with immediate escalation. The agent provides full context to the human handler.
What about data protection?
Granular, informed, revocable consent per data-sharing event. Each consent is scoped to a specific purpose, recipient, and data fields.
Digital inclusion?
This does not replace existing channels — GOV.UK, phone lines, and face-to-face services remain. Assisted digital support means a caseworker can use the agent on behalf of a citizen, with full audit trail. This is an additional channel, not a replacement.