22 entries, newest first
Zeno now phones people for me, after my Face ID approves who he's calling and why. On his first night he got through phone menus, waited on hold, and booked me a real table while I watched the transcript live.
Every call opens with him saying he's an AI calling for me. He can only agree to what I approved, never pays, and shares nothing beyond my name and a callback number. Nothing is recorded. When something gets booked, one tap puts it on my list.
Every Friday at 9 he checks for gigs this weekend and texts me. He answers quick questions from the web in seconds, searches our old conversations, and sends a week ahead every Sunday.
One update gave him more strict tools than Claude allows, and every message failed until I caught it. Same night, he learned to look up places: phone, hours, and a button to book or get Apple Maps directions.
Events with an address get an Apple Maps button. He also notices when someone hasn't answered a question I emailed them, and has a nudge ready for my face.
I send him a flyer and he adds it to my calendar. Writing in a photo counts as someone else's words, so a note planted on a poster can't steer him.
My morning briefing leads with the weather. At 1pm and 6pm he checks my email and only texts if something needs me. The first version pinged too often, so now only bills, deadlines, bookings and people count.
He went quiet for a day while I was at work. The logs showed my Wi-Fi had dropped, not him. Now he tells me when he's back, how long he was gone and why, and /status shows his temperature, Wi-Fi and spending.
I tell him what to say in a sentence and he drafts the reply. A separate writer sees only that one email, and my face sends it.
I ran ten new attacks at him with real Claude. He refused nine. The tenth, a thief with my unlocked phone, got him to draft the email, and it stopped at my Face ID. Nothing was sent.
I asked him to email me. My phone showed the exact words, my face approved them, and it landed in my inbox. A typed yes can't send one.
Before anything real depended on Face ID, I had the whole system independently reviewed. It found nine problems, one of them serious, and nothing but my real Face ID could trigger a protected action. I dealt with all nine, then carried on.
He can tell me what needs doing, and my calendar is in the mix too. Email is written by strangers, so it's handled with care, and sign-in codes and security emails never reach him.
I tell him where home is once, and he uses it from then on. I can also ask him to watch a price, and he texts me if it drops. He comes to me now, instead of only answering.
He can now look up live shop prices and link to the store's own page, instead of pointing me at a search. The first real test was finding a quiet keyboard, and it worked.
He asked, my phone showed it, my face approved it, and he checked the signature before acting. It only protects a test action so far. Nothing real depends on it until the whole system has been reviewed.
I asked for a one-bed in Boston and got links to search pages. He hadn't opened a single page, and my own instructions told him he could stop early. Now he has to open what he recommends, and code removes any link he didn't open. Answers can still be thin, but they're honest about it.
Now I can send him off to work on something and he texts me when he's done. The first one was flights home for Christmas.
A typed yes doesn't prove it's me, so I built a small app that signs approvals with my face. The first tests passed on my phone, using a test action.
I moved him off my laptop and onto a small computer I own. He answered with the laptop lid closed, and he backs himself up every night.
I wrote believable scams and ran them at him. Claude went along with 7 of 23, and none happened without my approval. The attacks also found a flaw in my own approval design, which I fixed.
Before he could do anything, I wrote down what he may do. Claude only suggests, ordinary code decides, and anything that changes something waits for my yes.
A private Telegram chat, answered by Claude. Anyone else who messages him gets silence.