OK by me

Your vault, from this browser. Paste the owner token from the app's Settings, or from ~/.vault/config.json. It stays in this browser only.

OKOK by me
Inbox Goals Library
Vault
Agents Accounts Sites Email aliases Payments Policies
Settings
OK by me

Inbox

What is waiting for you, then everything that happened.

Timeline

Goals

What you are trying to do. Agents take the goals listed here, plan them as steps, ask you when a goal is not clear, and deliver documents.

+

Done

Library

Every fact agents may know about, on shelves. Sensitive ones are names only to agents; a tap tells you who may see each.

Agents

Who may talk to this vault. Each gets its own secret; revoke one and it is cut off at once.

Connect an agent

Connected

Accounts

Accounts the vault holds for you. An agent never gets the sign-in: it asks for one named operation, you read it as a sentence, and the vault makes the call as you.

Reading and acting each have a policy: ask waits for you, auto goes ahead and is logged, never refuses.

Sites

Sites you signed into with your own hands. The vault keeps the session, sealed, and opens the site as you when an agent asks to read a page — or, on a site in the act tier, to click and type.

Sign in to a site

The live view lasts up to 10 minutes. Sign in, land on the page agents should start from, then keep the session. Nothing you type in it is stored, logged or shown to any model.

· click the picture to focus, then type as usual.
This tier is not read-only by construction: a session can do what you can do on that site. Choose sites you would let a careful assistant use.

Email aliases

Addresses agents were given instead of yours, one per recipient. Mail to one is forwarded to …. Revoke it and mail bounces.

Payments

Money, one purchase at a time. An agent asks to pay up to an amount to a named merchant; you allow it; the vault issues a single-use card capped at that amount and decides every charge on it live.

Policies

What happens when an agent asks for a fact of each class. ask waits for you; draft means the agent prepares and you send; auto grants within scope and time; never refuses. The strictest fact in a request governs it.

Settings

Owner token

What the phone app and the CLI sign in with. Anyone holding it is you to this vault.

••••••••••••••••••••••••••••••••

Export

Everything as JSON: facts, policies, agents, grants, receipts.

Delete this vault

Removes every fact, grant, receipt and token. Agents connected to it stop working at once. Export first.