Workflow-Legion

Workflow Legion is a Band-native cyber incident command room built to prove that multi-agent workflows can be visible, repeatable, and safe enough for high-stakes operations. The system starts inside Band. A human posts a Band trigger, and a hosted backend listens for that command, starts a deterministic five-agent incident workflow, and posts each agent handoff back into the Band room. The agent chain is Triage, Threat Intel, Forensics, Compliance, and Incident Commander. Commander is terminal, so the workflow stops cleanly after the final containment decision. Band is the core collaboration fabric and proof surface. It is not treated as a simple notifier or chat wrapper. The Band room shows the visible coordination trail: mentions, role updates, handoffs, shared context, and final decision flow. The backend owns deterministic runtime execution and exports a safe Mission Control status feed. A public frontend displays that status for judges without requiring local terminals or exposing secrets, Band IDs, API keys, room IDs, chat IDs, sponsor codes, QR codes, or private credentials. NativelyAI and Native.Builder informed the showcase and productization layer, helping shape Workflow Legion into a clean Mission Control experience. AI/ML API and Featherless support provider-backed reasoning for agent roles while deterministic fallbacks keep the workflow controlled when provider output is unavailable or unsuitable. The final proof is a hosted Band-triggered five-agent incident workflow: Band coordinates the agents, the backend executes the workflow, and Mission Control displays the live public result.