A hatcher.ltd product

Institutional software for organizations that were never supposed to afford it.

orgware gives a tribe, a nation, or a member organization the software a large institution has — a secure member portal, an authoritative record, transparent operations — built on the edge, running for a few dollars a month, with no servers to babysit.

901
Members enrolled
on the live roll
32 yrs
On the record
tribal governance since 1994
$0
This month's cloud bill
within Cloudflare's free tier
~20×
Headroom
before it costs a cent

Live from the waccamaw.org instance · updating…

What it is

Four small services. One member platform.

orgware is composed of small, independent pieces — each a single Cloudflare Worker — so any one can fail or be replaced without taking down the rest. The public, visitor-facing site stays exactly where it is; orgware only takes over the moment someone signs in.

members-service

The member portal & record

Passwordless sign-in, the verifiable knowledge library, per-member API keys, the roll book, and a live cost console.

contact-service

Directory & outreach

A role-scoped contact directory for leadership and the public contact forms — stateful, no third-party form service.

meetings-service

Meeting archive & podcast

Recovered and ongoing minutes and transcripts, members-only until reviewed, with an Apple-compatible podcast feed.

corpus-mcp

The record, for AI

The same authoritative record exposed to AI assistants over a standard MCP endpoint — under the exact same access rules.

The rings of access
PUBLIC MEMBER LEADERSHIP

Gated by who you are, not which page you're on.

The same address shows different things to different people.

  • Public

    Anyone on the internet

    The visitor site, the museum, public records and minutes.

  • Member

    A signed-in member

    Adds the portal, the cleared record library, and a personal API key.

  • Leadership

    Elected leaders

    Adds the full record, the roll book, the directory, and the cost console.

The guarantee: nothing gated is ever sent to someone who hasn't signed in. Private pages aren't hidden with CSS — they're rendered by an authenticated Worker that returns nothing until it has verified your session.

◆ The first instance · in production

The Waccamaw Indian People run one of the most advanced digital operations of any tribe in the Carolinas — on waccamaw.org.

901 enrolled members with self-service records. A governing record reaching back to 1994 — 108 resolutions, the constitution, offices, and decisions, each traceable to a primary-source scan. A recovered meeting archive. A record that answers to AI assistants. All of it edge-hosted, and this month it cost $0 to run.

It is a working proof that a small nation can hold institutional-grade software — a member portal, a verifiable record, honest books — without an institutional budget, a server room, or a vendor contract that owns the door.

How it's built

The whole platform, on the edge.

orgware runs entirely on Cloudflare's edge. No servers to patch, no virtual machines, no monthly hosting bill beyond usage. Each part runs close to whoever's asking, backed by Cloudflare's own database, storage, and key-value store.

edge
Cloudflare Workers — every service is a single Worker; independent repo, deploy, and database binding.
data
D1 · R2 · KV — SQLite at the edge, object storage for source scans, key-value for rate limits.
access
One principal function — session cookie, API key, or JWT resolve to a ring; every page and query enforces it identically.
record
Provenance by default — an idempotent ingest turns a private git repo of documents into records with checksums and source scans.
backups
Three layers — 30-day point-in-time, nightly encrypted exports, and an off-site mirror to cold storage.
cost
Metered, in the open — leadership sees live usage against every free-tier limit. Nothing is hidden from the people who own it.
Run by the people who own it

Self-service, all the way down.

Owning your software usually still means filing tickets and waiting on a vendor. orgware closes that gap: the people who own the data operate and extend the platform by describing what they need — in plain language, in their own Slack. A resident agent is already in the room.

J Jennifer · the tribe's recordkeeper — doesn't write code
"The core true/false box isn't showing on the Roll Book."
the same day

The message lands in Slack, where Ember — the tribe's resident agent — triages it against the live code the moment it's posted. Within the day the gap is traced across three repositories, a database migration is applied to production, and both the backend and the website ship — a new "core member" flag with a checkbox, a filter, and a roster badge, live on waccamaw.org.

Her reply: "I see it now."
the agent

An agent in the room

Ember reads the same repositories and services the platform runs on. It answers questions, makes the safe fixes itself, and files the rest — as itself, in the open, never on anyone's behalf.

the boundary

A human ships the deploy

The agent layer does the legwork — always-on agents (OpenClaw) and Claude for the building — but it never merges, force-pushes, or deploys on its own. A person signs off. Nothing reaches production unsupervised.

the interface

No tickets, no training

No separate admin console to learn, no queue to wait in. If you can describe it in a sentence, you can ask for it. The conversation is the interface.

For builders & implementation teams

A delivery model, proven in production — not a slide.

orgware is what the composable, edge-native, agentically-built stack produces when you take it all the way to a shipped product. For teams moving real workloads off monolithic platforms, it's a working reference for a different way to deliver.

The monolith
  • One platform owns every concern; changing one thing risks all of it
  • Per-seat licensing and hosting that scales against you
  • Customization fights the framework and its upgrade cycle
  • Vendor holds the front door and the data model
The orgware model
  • Small independent services; replace or rebuild one in isolation
  • Commodity edge infra — free-tier capable, a few dollars at scale
  • Deep customization is the default; the code is yours to shape
  • Agentic workflows compress build-and-iterate to days, not quarters

The pitch is the proof. Everything on this page — the portal, the record, the AI endpoint, the live numbers above, this page itself — runs on the stack it describes. It's a template for rapid, deeply-customized delivery on infrastructure that doesn't bill you for existing.

The model

hatcher.ltd owns the software.
You own your record.

orgware is a product. Your organization's data, decisions, and history are yours — held in your own repositories, under your own clearance, on infrastructure in your name. The platform doesn't belong to any officer, any term, or any faction, and it doesn't wobble when leadership changes. It's software with an owner and a record with a home, kept deliberately apart.

Talk to us

Bring institutional software to your organization.

Another nation, a member association, or an implementation team looking for a better stack — start a conversation.

doug@hatcher.ltd →