One package.
One accountable agent.
AirKernel, AirGuard, AirD1, LocalCI and AirAdmin each have an accountable agent. Each gets a clear assignment, scoped access and its own workspace.
They work concurrently and collaborate through explicit requests and versioned packages.
Separate workspaces. Explicit requests. Versioned releases.