Agents that operate real tools, with a hand on the brake
An agent runtime that can read mail, move calendar events, and edit docs on your behalf. It sits behind an approval layer, so nothing irreversible happens without a human saying yes. The interesting part isn't the model call. It's the permission boundary around it.
- TypeScript
- LLM tool use
- Node.js
- Zod schemas


