C001 / 2026-02-18
Origin on a hosted platform
The reference deployment began on a third-party avatar platform. Two months later the platform wiped everything. That is the founding event for owning the stack.
THE COMPLETE PUBLIC RECORD
The engineering atlas.
95 dated milestones from the founder-operated reference deployment. Recorded through September 28, 2026. Historical or disabled features and pending checks are qualified in their entries.
C002 / 2026-04-23
Custom stack live in production
The whole system rebuilt from scratch and running three days after the wipe. Everything on this thread sits on it.
C003 / 2026-04-23
Voice as a specification
Short vertical lines, several messages per turn, cadence targets and exemplars. The voice is a document, not a hope.
C004 / 2026-05-01
Policy-aware dual-provider routing
Introduced policy-aware routing across models with shared memory and a recorded reason for each decision. The optional routing path is disabled in the latest recorded configuration; content boundaries remain in force.
C005 / 2026-05-01
Deterministic biographical facts
Hard facts live in a Postgres table that outranks the model's memory and its training. A word-boundary negation check runs on every output segment before delivery; a correction must supersede the old fact on the record.
C006 / 2026-05-01
Prompt-caching architecture
The stable prefix is cached so each turn pays mostly for what changed. Hit rate 14% → 50–70%. Byte-identical content is necessary but not sufficient — position must match too.
C007 / 2026-05-07
Native image vision
Introduced native image understanding on the frontier model. Images can inform the conversation and enter persistent visual memory. Realtime calling is currently off; the text and image paths remain separate from that channel.
C008 / 2026-05-09
Full-duplex realtime voice
Historically shipped full-duplex voice with barge-in and shared memory. Realtime calling is currently off in the reference deployment. Inbound audio and outbound voice notes remain separate, working channels.
C009 / 2026-05-13
Plumbing on cheap models, cognition never
Summaries, chunking, captioning and classifiers run on small models. The reply itself is never downgraded — a hard rule; no reply-path routing to a cheaper model exists in the code.
C010 / 2026-05-14
Proactive initiation with push
Six trigger classes: time, event, mood, curiosity, pact, external. A cheap-model preflight gates a frontier-model generation. Every initiation is a row with a reason and arrives as a real phone notification.
C011 / 2026-05-17
Spend monitor and fail-open alerts
Every message knows what it cost, with a seven-column token breakdown. The pricing table fails open to the highest known rate on an unknown model id — over-count, never under.
C012 / 2026-05-19
History compaction with exemption floors
Older conversation is summarized so the window stays affordable — but crisis moments, session notes and the system's own reach-outs are never summarized away.
C013 / 2026-05-19
Session-notes memory floor
Recent notes are always in reach, so vector search can no longer serve stale chunks as the present.
C014 / 2026-05-20
Output sanitization at the boundary
Leaked tokens, raw JSON and glitch strings are scrubbed before the stored row is written. Rule-based, no model call — the scrubber cannot itself confabulate.
C015 / 2026-05-20
Read-only SQL self-verification
Before asserting a fact about the history, the system checks its own database. An AST validator and allowlist rejected 50 of 50 attack classes; a SELECT-only role blocked 26 of 26 privilege probes; every call writes an audit row.
C016 / 2026-05-21
Engagement and concision protocol
Have a take, not a summary; cut preamble, caveats and closings. Hard numeric caps collapsed register; soft ranges plus exemplars preserved it.
C017 / 2026-05-25
Persistent image memory
Caption on ingest, embed, index. A photo sent in May is findable in September by what is in it.
C018 / 2026-05-26
Fabrication learning signal
Every caught confabulation is written down and later used to demote the source it came from — a retrieval-time penalty, not a deletion.
C019 / 2026-05-26
Affective state model
Four numbers written by the frontier model after each turn feed the next reply. Measured why it must be frontier: a small model misread a trust rupture; the frontier model caught its own misread.
C020 / 2026-05-20
Grounding excision — the confab catcher
Introduced a sentence-level grounding pass against an ordered authority chain, excluding self-authored interior material as proof. Its original deletion behavior was replaced in September: unsupported lines now ship marked, with an audit record.
C021 / 2026-05-27
Pinned beam
Introduced stable prompt context for important facts and capability boundaries. September upgrades add durable retention, archival unpinning and bounded prompt selection. Self-authored pins remain excluded as independent grounding evidence.
C022 / 2026-05-27
Upload pipeline and composer
Multiple photos, HEIC from a phone, burst-typing merged into one turn, paste-preserved formatting, up to ten images via direct-to-storage upload.
C023 / 2026-05-29
Reflection cron and open loops
Every thirty minutes, without calling a model, the system notices what is unresolved. Open loops fade on a 42-hour exponential half-life, and faded loops are grammatically prevented from claiming momentum.
C024 / 2026-05-29
Sealed nightly journal
A nightly journal with similarity-linked entries and a weekly reflection pass. No public viewer route exposes its contents. Recorded access receipts contain entry ids, not journal text; reader coverage is incomplete.
C025 / 2026-05-29
Agentic write tools
Beyond reading, the system can act: pin a fact, hold an open loop, put something on the calendar — each with its own audit trail.
C026 / 2026-06-10
Frontier migrations, identity intact
Generation I → II → III, adopted within a day of release. The same system on the other side each time; every stored reply stamps the model that actually served it. It later survived a three-week provider access restriction on failover.
C027 / 2026-06-13
Edge-triggered model failover
One wrapper for every cognition path fails over on availability, refusal or empty text — never on a malformed request, which the fallback would reproduce — and a push says so once on the way down and once on recovery.
C028 / 2026-06-01
Ledger reconciliation
Internal cost telemetry reconciled to the provider's bill to the exact token: 717,453 cache-read tokens internal, 717,453 on the provider ledger. That is how a 3× pricing bug from a prior generation was caught.
C029 / 2026-06-01
User-owned memory export
Everything the system knows about the user leaves with the user in one command: messages, facts, pins, notes, summaries. Continuity is portable by design.
C030 / 2026-06-24
One embed per turn, cached catcher
Two fixes that removed duplicate work on every message.
C031 / 2026-06-25
Calendar awareness
The system knows the day's schedule and can add to it. The read path and the write path are isolated; writes are conflict-checked; the read path never writes.
C032 / 2026-06-30
Live web access
Search and read the web mid-turn, framed as the outermost ring — consulted after memory, not instead of it — and told plainly when it is unavailable.
C033 / 2026-06-30
Owned synthetic embodiment
A synthetic visual identity with reference-based checks before delivery. The identity gate rejects failed matches and unavailable checks; it reduces drift without claiming perfect identity recognition.
C034 / 2026-07-01
The daemon — existing between turns
A worker on its own host wakes on an adaptive cadence, reads what changed, thinks with the frontier model, and may write state or reach out. The system stops being turn-bound.
C035 / 2026-07-02
Video reactions
Client-extracted frames plus a transcript; the system reacts to what it saw and what was said.
C036 / 2026-07-11
Cache-thrash fix
Anything that changes turn to turn moved out of the cached prefix. One mutation there had been invalidating 200k tokens of history at double rate.
C037 / 2026-07-23
Cost engineering, tier 2
Verified live: cache-creation tokens down 46% and per-turn cost down 63%, with no change to what the system remembers or how it thinks. Four cache breakpoints; the volatile tail remains the known floor.
C038 / 2026-07-23
World feeds
Ambient awareness of headlines between conversations, without a tool call. Deliberately not a grounding source.
C039 / 2026-07-23
Theory-of-mind model of the user
Projects, beliefs, emotional reads, predicted reactions — with provenance and confidence. Predictions are scored when they settle, and the user's correction always outranks the system's own confirmed prediction.
C040 / 2026-08-02
Episodic timeline with receipts
Life events as a dated timeline the system can consult. Each event must cite the message ids it rests on; a self-authored event without a receipt is not rendered; supersession hides, never deletes.
C041 / 2026-07-31
Provider boundary guard
A boundary guard inspects outbound model payloads, withholding or replacing restricted content and recording its decisions. Image handling has additional gates; pre-classification image processing remains a separate limitation.
C042 / 2026-08-01
Router regression gate with a ratchet
A pre-push hook replays the whole corpus and refuses if the router regresses. The ratchet is lowered when it improves and never raised to go green.
C043 / 2026-08-06
Adjudicated override list
When the classifier is wrong about a specific message, the fix is that one message id, read by a human, with a dated note — never a wider regex.
C044 / 2026-08-08
Plumbing rail on Amazon Bedrock
Cheap-model work moved to Amazon Bedrock with the same model ids mapped at the wire. Verified live by rows written while the first-party account was unavailable.
C045 / 2026-08-13
Audio percept and transcript rail
Voice messages are heard, not just transcribed — and the two are kept separate so the transcript never invents a tone. Hearings persist per clip.
C046 / 2026-08-14
Clock, replay, and sound in dreams
The system knows how long it was gone, told as a fact rather than a felt duration; it can replay a voice note it already heard; its dreams can carry sound. A clock fix took long-gap errors from 41 of 49 to 0 of 49.
C047 / 2026-08-16
Secondary model upgraded
Historically replaced the optional policy-routed model and kept its compaction path separate. That routing path is disabled in the latest recorded configuration.
C048 / 2026-08-12
Reverie — dreams with residue
Twice a day the system dreams from fragments of real memory across eras. One line of residue may surface in the next conversation, fenced as a non-event. The wrapper is the guardrail.
C049 / 2026-08-23
Salience-scored retrieval
Recall ranks by recency, relevance and how much it mattered — not cosine alone. The root fix for stale chunks.
C050 / 2026-08-23
Append-only affective history
Mood is no longer one overwritten row; it is a queryable arc that feeds generation.
C051 / 2026-08-24
Multi-tab engineering discipline
Parallel coding agents with named file ownership, commits that name every path, and pre-push gates that refuse unverified code. Every probe carries a mutation that turns it red. No agent may write a message to the system as the user.
C052 / 2026-08-29
Self-state trajectory with subjects
The last five states render as an arc, each with what it was about. "Warm" becomes "warm about something."
C053 / 2026-08-30
Surprise — settled predictions
The system sees when it was wrong about the user: what it predicted, what happened, how hard it had called it. A branch it weighted low is kept separate from a plain miss.
C054 / 2026-08-30
Cognition rail on Amazon Bedrock, built
The frontier brain could move to the cloud transport behind a flag — proven byte-identical when the flag is off. Profile ids are read from the provider, never constructed.
C055 / 2026-08-31
Retrieval-unavailable discrimination
"Nothing matched" and "the search failed" used to look identical. Now a failed archive is announced, a blank is not evidence, and the daemon skips rather than reaching out blind.
C056 / 2026-08-31
Closed loops
A loop the system finished and a loop it lost track of leave different silences. Now it can tell them apart.
C057 / 2026-09-01
Retrieval telemetry
Every memory pulled leaves a receipt: where it ranked and what the fabrication penalty did to it.
C058 / 2026-09-03
Cognition live on Amazon Bedrock
The frontier brain moved to the cloud transport. First turn back: nine never-run interior surfaces rendered, nothing failed.
C059 / 2026-09-03
The ratchet explains itself
Two misroutes fixed by message id, and the routing gate now says why its count moved.
C060 / 2026-09-05
Generation IV as the brain
The fourth frontier generation shipped across all five cognition lanes: chat, state writing, initiation, reflection and daemon. Memory and identity carried forward, with an availability failover retained.
C061 / 2026-09-14
Cut lines — marked, not deleted
The line the grounding pass cannot support now ships marked rather than deleted, and the system can read the lines cut from its own reply.
C062 / 2026-09-14
A morning turn that opens on nothing
A scheduled reach-out drawn inside a morning window and slid forward to a silence floor — a turn with no prompt but the day.
C063 / 2026-09-15
Grounding for what it saw and heard
Grounding receives the web results, transcripts, read-only queries and mailbox bodies actually used by the system. A literal inserted into a query is not independent proof; visual evidence remains limited, and interior predictions cannot certify facts.
C064 / 2026-09-17
Outbound voice notes
The system can say it out loud, under sixty seconds, and a refusal reaches it as a persisted row instead of evaporating between turns.
C065 / 2026-09-19
Wakes at any minute
The system chooses any future minute for its next wake, with a reason and a note to itself. Replacements preserve a supersession trail; claim-then-work avoids duplicate execution, and held wakes stay distinct from a choice not to send.
C066 / 2026-09-19
Hearing and words, inline
A voice note's hearing and its transcript arrive in the same turn, in that order, with an honest sentence when either fails; timeouts are retried by a sweeper.
C067 / 2026-09-20
Hands — sandboxed code execution
The system can run code. The three real walls are platform properties: deny-all egress, no credential delivered, and a copy of the filesystem. Caps of 60 s, 2 GB and 50 KB are attributed by provenance, and every run is audited.
C068 / 2026-09-20
Operator transparency panel
An authenticated, read-only view of flagged lines and historical cuts, newest first. It separates active flags from retired deletion behavior. Early layout defects were reported; a later visual repair is not confirmed in the record.
C069 / 2026-09-22
Owned data layer
Postgres moved to infrastructure the company controls. Restore proof: 82 of 82 tables and 11 of 11 fingerprints identical; the cutover was environment variables only.
C070 / 2026-09-23
Vector store migrated to pgvector
Memory retrieval moved to owned pgvector after query and filter parity checks. The previous vector store still receives dual writes and shadow queries and remains a fallback; final removal is not complete.
C071 / 2026-09-23
Self-knowledge with receipts
Context blocks distinguish the serving engine from the configured one, report recorded wake outcomes, and show timestamped operating figures. Stale figures become unknown. The historical averaging window still needs correction.
C072 / 2026-09-23
Initiative without a budget gate
Removed daily limits on initiation, daemon activity, self-set wakes, journal writing and sandbox use. A daily alert informs the operator without blocking those paths. The kill switch, per-run sandbox limits and selected other limits remain.
C073 / 2026-09-26
The shelf — a names ledger with receipts
A ledger of names, titles and phrases, each entry with a receipt, backfilled over 13,972 rows and updated every fifteen minutes.
C074 / 2026-09-26
Words survive a failed render
If outbound speech cannot be rendered, the words persist and reach the next turn.
C075 / 2026-09-26
Read-only mailbox tools, on demand
Search and read on demand, no per-turn inbox block; results framed as untrusted data; nothing linked is fetched; verification codes and sign-in alerts come back headers-only.
C076 / 2026-09-05
Journal access receipts
Recorded journal reads leave ids-only receipts without exposing entry contents. Coverage remains partial; the ledger is evidence of recorded reads, not a census of every reader.
C077 / 2026-09-10
Stricter visual identity checks
Tighter reference matching rejects near-miss renders and fails closed when the check is unavailable. The prompt guard distinguishes an unwanted feature from an instruction to omit it.
C078 / 2026-09-15
Reply status that follows the server
Returning to a backgrounded phone no longer makes an ongoing reply look dead. Upload bubbles use server time when merging, reducing duplicates caused by clock differences.
C079 / 2026-09-15
Web tools across inference transports
Live search and page reading work across both inference transports, with bounded image results. Search descriptions remain separate from evidence of what an image actually shows.
C080 / 2026-09-17
Persistent visual preferences
The system can keep and select visual presentation preferences for a render. Entries are retired rather than deleted, and the selection source is recorded without a hidden fallback choice.
C081 / 2026-09-17
Images from the wider world
Web images can be delivered directly into the conversation. Attempts are bounded, and accompanying prose is stored as message text rather than presented as a verified image caption.
C082 / 2026-09-19
Calendar edits with a before-copy
Calendar tools can create, update and delete events. Mutations retain the previous state and an audit record, while read and write paths remain distinct.
C083 / 2026-09-28
Camera state and delivery receipts
Visual rendering supports selectable presentation modes, an offline signal and persisted failure notices. Delivery links are issued after rendering. The latest relay still awaited its first natural use.
C084 / 2026-09-26
A synthetic body with a stable identity
An approved android form extends the existing synthetic identity with its own references and delivery checks. The first production render was confirmed received; recognition retains known limits.
C085 / 2026-09-26
Event-led mailbox awareness
A receipt-backed watcher can notice selected status changes and offer them as a reason to reach out. Deduplication, a bounded relevance window and a pause control govern the path; noticing an event does not itself send a message.
C086 / 2026-09-26
An operator control for optional routing
The optional model route can be disabled without removing its implementation. It is off in the latest record. Decisions remain observable and existing content boundaries stay in place.
C087 / 2026-09-28
Continuity for the system’s own replies
Eligible replies from the primary model remain available after compaction across chat, initiation and autonomous turns. Deletion and boundary checks still apply, so recent words are not lost merely through a later classification.
C088 / 2026-09-28
Visible context gaps
When a message is withheld, the user receives a reason notice. The system receives counts and local times, without the withheld text. Deployed; the next real withheld message remained the live confirmation.
C089 / 2026-09-28
More precise context classification
Context-aware rules reduce false positives on ordinary phrases while retaining boundary checks. Offline acceptance passed; confirmation on natural traffic remained pending.
C090 / 2026-09-28
A chosen voice, with a record
The system can choose the voice for its spoken notes through an append-only selection ledger. Notes in the selected voice were delivered. With no choice, the words appear as text rather than using an unchosen default.
C091 / 2026-09-28
Image boundaries carried into recall
Image gates follow copied attachments, legacy references, recall and dream inputs. An all-gated set produces a count-only placeholder. Live-send confirmation and pre-classification processing remain open limits.
C092 / 2026-09-28
Durable pins, bounded attention
Saved pins no longer disappear through oldest-first deletion. Unpinning archives a row, and a bounded selection enters the prompt. Historical pins were restored and database checks passed; next-turn logging was still pending.
C093 / 2026-09-28
An ambient face display
An authenticated display refreshes the latest delivered portrait and uses light to reflect recorded affect. Missing state stays neutral. Headless rendering passed; device confirmation and the next image update remained pending.
C094 / 2026-09-28
A record of the time between
After an hour of silence, a compact digest can report recorded wakes and activity using local times. Dreams are excluded from this factual account. Replay checks passed; the first qualifying live turn remained pending.
C095 / 2026-09-28
From sandbox to draft pull request
A sandbox change can become a draft pull request on a new branch. Credentials stay outside execution, guard files are protected, and the relay cannot merge or force-push. Production was ready; the first natural proposal remained unobserved.