Moneypenny doesn't ask to be trusted — it shows its work. Every completed claim carries a command and its output; every layer stays swappable enough to survive its own vendor. The rest of this page is the receipts.
Every completed claim requires a command and its output. Packet gates, message receipts, and attributed commits mean the system's history can be audited, not just believed.
| Time | Record | Receipt |
|---|---|---|
| 09:14 | TP-424 · email intake → triage UI · in-process · batch importer pending | commit a91f3c2 · attributed · shape ✓ scope ✓ · tests ✓ |
| 11:47 | message → the studio machine · delivery ack | the sender saw it was read · receipt logged both directions |
| 14:38 | TP-429 · cross-machine agent mesh · handled | handshake verified both directions · tests ✓ |
| 16:20 | TP-421 · single sign-on cutover · waits on you | proof green · updated 2h ago · one signature needed |
A completion that can't point to one of these doesn't count as done — it gets reopened.
The engine dispatches to pi, Claude, or Codex agents through one contract. Model economics change monthly; the platform doesn't marry any vendor.
where this sits — the swappable execution engine
Claude is plugged in this run and carries the verified stamp; pi and Codex sit on the same socket, dashed until it's their turn to rotate in.
Three colors carry one meaning everywhere this system draws a diagram — the Switchboard, the Desk, and every schematic on this page.
The color grammar on a real slice of the spine — not an abstraction. How to read these diagrams →
Channel watchers run continuously across every connected surface — classifying, extracting people and dates, and staging tickets before anyone opens a thread to look for them. All of it runs on your own hardware; nothing leaves the mesh.
Nobody opened the thread to make this happen. Classification, entity extraction, and relationship context ran before the notification even cleared the lock screen.
Three lines from the Desk. Every one is a hold or a draft — reversible, waiting on your word. Dry and sharp at the situation, never at you.
Dr. Reyes' office has moved this appointment twice. I've held the 9:40 slot, but they release it to the wait list at noon if nobody confirms.
The 6:40 to Heathrow has one car left before the surge doubles the fare. I put a hold on it — say the word or lose the seat.
The 2019 lease is three storage tiers down by now. I've already filed the retrieval request — deep storage runs on its own clock, so it lands when the archive gets to it.
Honest about what's not here yet: no community around this, a handful of connected channels today. Self-improving is partly real today: a live eval-and-reward ledger measures real work, but the system doesn't yet generate its own skills, and nothing closes that loop on its own. None of that is hidden behind the pitch.