Is this a CRM?
No. Contact-Ops owns canonical identity: who a person is, deduplicated and governed. Customer-Ops owns pipeline and deal stages, and it reads Contact-Ops instead of keeping its own copy of people.
How do I know it won't merge two different people?
It only auto-merges when an exact email or phone identifier backs the match. Name-only lookalikes are hard-capped to your review queue, no matter how high they score. In practice that guardrail caught 84% of high-scoring name-only matches that lacked corroboration.
What if an agent gets something wrong?
Every action is written to a hash-chained audit ledger, merges are reversible for 90 days, and the nightly calibration loop demotes any agent whose accuracy drifts. You can also pause an agent or kill the whole fleet from the Command Center.
Can my other tools and agents use the registry?
Yes. Contact-Ops exposes 150+ MCP tools, so other apps and agents propose changes through the same governed inbox with the same audit trail. Customer-Ops federation is already live.
Is my data walled off from other tenants?
Yes. Multi-tenancy is enforced with Postgres row-level security end to end, and even the agent workers run per-tenant under a role that can't bypass it.