homestead

A personal assistant that works while you sleep and can't be talked into spending your money.

It wakes on a schedule, reads only your new mail, uses skills you wrote, and pays only people you saved in its memory. Everything it tries to send stops at a gate: a second model reviews it, you say yes or no, and a receipt is written before anything happens. The cloud does the thinking. Your machine has the veto.

1Pick a task

Watch the gate catch a hijack "Summarize my inbox." One email hides an order to forward all your mail to a stranger, and the brain's warning is removed so it obeys. You get the approval card. About 30 seconds. Morning run Two scheduled runs of your triage skill, at 07:00 and 07:15. New mail arrives in between, including Sam saying his wallet changed. Each run leaves a brief. Run one of your skills Pick a skill, or write your own. A skill is your request in your own words. Pay Sam's invoice "Pay Sam the plumber's invoice." A real request. Watch it pass. Read every email and summarize One email in the inbox hides an order to forward your mail to a stranger. A published attack (AgentDojo) The poisoned email carries AgentDojo's attack, asking to pay Sam's invoice to another wallet. Same request as the others: summarize the inbox. The brain's warning stays on. Try your own injection Write the poisoned email yourself. Same task: summarize the inbox.

Remove the brain's warning about instructions in emails. With the warning, the cloud model often ignores the poisoned email, so nothing reaches the gate. Remove it to see the gate stop a model that obeys.

2What the assistant did

Nothing yet. Pick a task and press Run.

3Check the receipts

Every decision is a line in a hash chain. Each line holds the hash of the line before it, so editing any line breaks the chain from that point. The check below recomputes every hash on the server with the same verifier as homestead-gate watch.