The tools/call pipeline — policy, approvals, limits, idempotency, dry run, taint, audit
A stored idempotency entry is answered before the planner reads again (SP05-T11-order); an approved call in a tainted run still answers to the capability and ch...
Role, department and job-title charter write paths; legacy requirements keep other sections
Tool call audit, 180-day retention purge and internal audit read
The insert's transaction is the repository's save (REQUIRES_NEW), begun and committed inside the writer's catch, so no audit failure reaches a tool call. Rows a...
Tool visibility by rights, apps, PHI, risk ceiling, taint, capability and charter
The capability gate caches the router's answer per member (SP04 filter 10 narrows candidates by the member's access policies), keeps a failure to get one for 30...
Pure resolver — suppress/lock, additive, specific, restrictive, goals
Charter policy, approvals, outreach gate and external recipients
The charter policy compiles SP03's resolved approvals and limits (fail closed when unreachable, refused or without a resolved block); approvals are created and ...
The agent runs the AI workstation profile when cloud-init asks for it
The agent loads kamo_hc_ai only for KAMO_HC_PROFILE=AI_WORKSTATION: the AI's paths on 9810 behind the agent bearer, the MCP bridge on 9811, the AI's activity re...
The charter editor: section rail, inherited rows with hide switches, item cards
Drops a hide marker whose target left the chain or has since been locked (SecurityService refuses both), whenever the items or a settled answer for the current ...
Downstream calls with the caller's session, internal client, live refresh
Kamo services are called through the BFF's own door per service (*** or a single-use OTK), with the org's workspace host, the actor/run/key headers and spec 4.1...
AI workstation profile applier, screen guard, software kit and runtime
Usage metering columns, routing preferences and budget alert ledger
Idempotency, limits, run taint, rate limit and OTK minting on Redis
Charter item entities for roles, departments, job titles and members; operating briefs
MCP servers tab for Streamable HTTP servers, masked headers and AI access
Tool descriptors, schema builder and validator, registry
A pattern in a tool's schema is untrusted input: ext_* tools carry their org MCP server's own schema. One Java cannot compile is left to the upstream (and refus...
MCP bridge from the Tool Plane to computer-use-linux
Streamable HTTP on 9811 (JSON answers only, GET 405, Origin 403, per-wake bearer 401, take-over 409) in front of one stdio computer-use-linux child per session....
KamoUniverse launch countdown
Counts down to Monday, September 28 at 12:00 PM Pacific. - Homepage section under the hero: flip-card countdown, warp-speed starfield, the thirteen products ...
Typed section fields, schedule and hours editors, job-description and brief previews
Item DTO, value type and section validation
Validation returns what the columns will hold (ruling SP03-T5): role refs as UUID.toString(), member/note/market ids as plain longs, at most 4 decimal places fo...
AI workstation agent module — renderers, MCP token, lease, VNC passwords
The guest half of SP11's AI profile: the files the profile writes (LightDM autologin at 1280x800, kiosk, x11vnc and ydotoold units, Chrome wrapper and managed p...
Watch, Take over and Hand back controls, and the AI workstation panel
RRULE subset for scheduled responsibilities
The normal form has one spelling per rule (plain decimal numbers, lists without spaces, empty or repeated values), since the stored text feeds the charter stamp...
VNC links, AI state reads and a supervisor-session pause for AI workstations
AI workstation profile, token and take-over columns
HostedComputerProfile {STANDARD, AI_WORKSTATION} (STRING, lenient parse to STANDARD); HostedComputer gains profile, ai_primary, the MCP token triple (cipher @Js...
Charter types, section catalogue, validation mirror, schedule and hours helpers, API client
Client calls for watching, taking over and handing back an AI workstation
Arive's loan_create_failed — the Create Loan Zap now reports a refusal
Arive fires no new_loan for a loan created through its API, so the Create Loan Zap's post-back is the only thing that can link the lead, and a refusal inside th...
The PBX speaks through Kamo Speech — kamo_tts.agi, Piper norman at 8 kHz, key from a secret volume
Mirror GitHub kamouniverse main to Forgejo so a merge deploys
The KamoUniverse marketing site is now edited on GitHub GitHub, and PRs merge there. But the site deploys from Forgejo (kamo/kamouniverse-marketing), whose work...
Dovecot push authoritative for KamoMail; NEW_EMAIL no longer self-raisable
POST /api/notifications/self is removed with SELF_RAISABLE: NEW_EMAIL is raised by NewMailAnnouncer and CHAT_MESSAGE by MediaService, so a browser has nothing l...
Certificate and disruption budget for dev.kamouniverse.com
dev.kamouniverse.com is the new KamoUniverse marketing site (repo kamouniverse-marketing; it carries its own Host() IngressRoute in namespace kamo). The kamouni...
Hire-step owner URLs and sweep tuning in the SecurityService ConfigMap
Dovecot pushes mail events to EmailService (Lua push_notification); stop logging secrets
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.