The Engine
An agent you can leave
running.
The hard part of autonomy is not making something act. It is making something you can leave acting overnight and still recognise in the morning. That takes three things: walls it cannot cross, a receipt for everything it did, and hands that reach real systems.
What stops it
Outbound is walled at the wire
Every path that can send mail passes one check before the network call — not the tool that calls it. A wall on a tool is routed around by the next tool someone adds.
Consent cannot be forged
An instruction is first-party only if an authenticated human addressed it. A model that writes a message inside your session produces context, never permission.
Refusals are code, not prompts
Do-not-contact, excluded industries, no cold contact, no deal terms. A prompt is a request; a wall is a refusal.
Caveat — we found and fixed each of these because one of them failed first. The wire-level mail wall exists because an outbound wall on the wrong function let four messages through. We publish the failures for the same reason we publish the benchmarks.
What proves it
Every action an employee takes is written down as it happens — the tool, the input, the result, the time — in a record that survives restarts and is readable by the person who owns the business. Not a summary the model wrote about itself afterwards. The record and the story are different artifacts, and only one of them can be wrong in a flattering direction.
The cost is metered the same way: what each shift actually spent, published rather than estimated, alongside what it produced.
Caveat — our own meter was wrong by about a third until we checked it against the provider's console. It is right now, with two readings behind it, and we would rather say that than imply it was always right.
What it can touch
Hands, not integrations: the phone, email, the calendar, the CRM, the books, the repository, the social accounts. An employee that can research but not send is a very expensive intern.
Each hand carries its own refusals, and the dangerous ones carry them at the lowest level — the place the code actually reaches the outside world, where no future addition can slip past.
See it working
The same engine, pointed at the phone, the follow-ups and the books of one business.
The workforce →See what it runs on
Ten million tokens of memory, models we distil ourselves, benchmarks published with their seeds.
The Edge →