Easter eggs settings tab, wake-up calls first (TPWAKEUP)
Owner order 2026-10-28: /settings/ai?tab=easter-eggs (menu entry + landing card; SI workforce + VIEW/MANAGE_AI_WORKFORCE): every easter egg of the registry with...
OnBehalfOf — an SI acts through its higher-up's own account on their authenticated request
TPONBEHALF (owner 2026-10-28): Sage asked Luna how many notifications HE got today and she could only read her own. On an authenticated request from anyone up t...
Voice quiet hours have their own on/off flag
**************** (applied by hand, nullable, null = on), so switching voice quiet hours off and on keeps the member's own start and end.
An SI may act through its higher-up's own account on their authenticated order
TPONBEHALF (owner 2026-10-28), the NO INSUBORDINATION RULE extended: on an authenticated direct order, the SI may use everything the requester can do under thei...
SiOnBehalfAction, the append-only log of what an SI did through a member's own account
TPONBEHALF (owner 2026-10-28): on an authenticated direct order from anyone up its chain of command, an SI may act through the ordering member's own account; ev...
A short member session for the member speaking on an Alexa link, and voice turns as order references
Voice Assistant R3: POST **************** {orgId, memberId, linkId, grantId} -> {***, expiresAt} (X-Internal-Auth = IOT_INTERNAL_AUTH_SECRET). Minted only for a...
Status tabs with counts, Terminate/Activate instead of Delete, and an SI terminated like anyone
- /account?tab=team-members: tabs by employment status with counts (All Statuses first, Active the default), from SecurityService's grouped count, narrowed ...
A Speaches sentence is said clause by clause, so its first audio comes after its first clause
Luna), but Speaches' Kokoro/Piper make each request whole before the first byte (~0.6 s + 25 ms a character on k3m1), so an SI with an in-cluster voice (sp00ver...
SI mortgage reads take View Own Mortgage Loans
Every MLOS staff right now implies View Own Mortgage Loans, and SecurityService narrows a member without View Mortgage Pipeline to the loans they are assigned l...
Own-loan members see their pipeline; HMDA and reassignment stay with all-loans
The pipeline hides the HMDA LAR button and loan-officer assignment from members who hold only View Own Mortgage Loans. The rights mirror puts the mortgage right...
Enforce own-loan access; Team Members default to their own loans
MLOS endpoints now tell apart members who see all of the organization's loans (View Mortgage Pipeline, or god mode) from members who hold only View Own Mortgage...
View Own Mortgage Loans right; loan reports scope to the member's own loans
MLOS_VIEW_OWN_LOANS (660) is the new root of the mortgage rights: it lets a member see and work the loans they are the assigned loan officer on. View Mortgage P...
Phone_schedule_wakeup, phone_cancel_wakeup, phone_list_wakeups (TPWAKEUP)
Owner order 2026-10-28, the first SI easter egg: anyone, signed in or not, on any channel, may ask an SI for a wake-up call (or cancel the ones for any number)....
Alexa consent asks whose link it is, which place, and what Alexa can use
Voice Assistant program (P1-6, P2-8, P5-3): "Just me" or "The organization" cards, the place whose devices an organization link sees, "What can Alexa use?" (pre...
The Alexa consent carries whose link it is, the place and "What can Alexa use?" to IoTService
Voice Assistant program (P1-6, P2-8, P5-3): LinkChoice gains ownerKind (ORG | MEMBER), siteId and grantChoice, shape-checked here and judged by IoTService; the ...
Every card opens the thing it is about
A new-email notification opened /messages and left the member to find the mail. It now opens that message in the reading pane, scrolls the list to it with a bri...
Alexa link status in plain words, Try it, Choose devices, org voice assistant settings, my voice assistants and PIN, per-channel notifications, SI_ASSISTANT_REPLY
Voice Assistant program P1-9, P2-4, P2-5, P3-5, P4-5 (web). Each new call renders nothing until its backend answers (404), so this ships ahead of iot-service an...
Make or remove administrators and owners on the member profile; edit another member's own photos
Membership card: Administrator and Organization owner sit beside Membership type, each with its status and, only when SecurityService would accept it (GET .../l...
Owner and administrator changes follow one set of rules; another member's avatars are theirs
Leadership (OrgLeadershipService): - GET/PATCH **************** for the profile page. - PATCH .../access owner changes go through the same rules (an administrat...
Owners and administrators, with one leader always kept; administrators always keep CONFIGURE_SYSTEM
OrgLeadershipService holds every rule for making or unmaking an organization owner or administrator: only an owner or administrator (or an open god window) may;...
Easter egg settings and wake-up call entities (TPWAKEUP)
Declares ai_easter_egg_settings, ai_wakeup_calls and ai_wakeup_optouts (kamoai-service **************** so KamoInitializer can recreate them.
The SI Assistant's voice turn for Alexa
Voice Assistant program (2026-10-27) P3-1, P3-5. POST **************** (internal, X-Internal-Auth): the member's own assistant conversation through the same syn...
Per-kind phone and voice channels, the voice mirror, and SI_ASSISTANT_REPLY
Voice Assistant program (2026-10-27) P3-5, P4-1, P4-2, P4-4. - GET/PUT /api/notifications/channels and PUT **************** per-kind PHONE/VOICE choices (BELL...
Terminate an SI from its status, status counts, no deletes on /account
- An SI's Terminated status runs the SI retire lifecycle after the rest of the save (runs stopped, phone line, seat and licence released, credential and ses...
Per-kind channel choices, voice quiet hours and cap, SI_ASSISTANT_REPLY, voice activity kinds
Voice Assistant program (2026-10-27) P3-5, P3-6, P4-1. Declares what was applied by hand: member_notification_channels (member, kind, PHONE|VOICE, enabled), ***...
Alias domain DNS records, a colleague's default alias, the real send-as address
Settings -> Email -> Domains -> Alias domains: each domain shows whether it is ready or waiting for DNS, and a DNS records dialog lists the MX, SPF and DKIM rec...
Declare the voice-assistant link columns and tables (personal links, last error, PINs, voice profiles)
Columns on iot_alexa_links (last_error_code/at, pending_grant_choice, owner_kind, owner_member_id, site_id, notifications_enabled) and the tables iot_voice_org_...
Meetings_join_external, **************** meetings_cancel_external (TPEXTMEET)
An SI joins an outside meeting (Zoom, Teams, Meet, Webex, GoTo, any provider) from the details a teammate gave it, now or at the invitation's start, by phone. J...
Mortgage Lending reports reachable from every MLOS screen, opened already filtered
- Report links can now pre-fill parameters: **************** (date presets or start..end ranges, comma lists for multi-selects). Only parameters the report ...
Administrators can edit the Administrator role, with its lock-out right pinned on
The Administrator (Full Access) role showed as Protected and could not be opened. When the server sends lockedRights (the caller holds that role), the role open...
Postfix learns alias domains from the mail database
An organization's alias domains (Settings -> Email -> Domains) used to need virtual_alias_domains and a hand-written map edited here. EmailService now keeps an ...
Members holding the Administrator role can edit its rights
PUT /api/security/roles/{id} routes the Administrator role's rights through **************** BEFORE any other write so a refused save writes nothing. Only a cal...
Administrators may edit the Administrator role's rights, never switching off CONFIGURE_SYSTEM
The Administrator (Full Access) role is stored isAllowEditSecurity=false, so no one could change its rights. **************** is the one door in: it accepts onl...
Alias domains receive and sign on their own; colleague and self defaults
The mail server now learns an org's alias domains from EmailService instead of hand-edited postfix config. KamoMailAliasDomains keeps an alias_domains table in ...
Loan officer and investor pickers for the Mortgage Lending reports, proven on the fleet's Hibernate
- mortgageLoanOfficers: members assigned as loan officer on at least one of the organization's deals (narrower than every member, so the picker lists names th...
A Mortgage Lending shelf of eighteen audit, compliance and operations reports
Report Studio had no mortgage reports; the MLOS had one real compliance report (the HMDA LAR page) and a set of work screens that could not filter, export or sc...
AiExternalMeeting entity for SI joins of third-party meetings (TPEXTMEET)
Declares ai_external_meeting (kamoai-service **************** applied) so KamoInitializer can recreate it.
GPT-Live sessions through the relay (LIVE_AUDIO tickets), probed with a live session
TPGPTLIVE (owner 2026-10-27, pilot). GPT-Live's primary WebSocket takes the project key only, so a LIVE_AUDIO ticket routes the org's REALTIME_AUDIO order, keep...
Seed the ten Mortgage calculator rights from CALC_SIMPLE
Whoever can open the calculator today finds Calculator -> Mortgage on the boot that adds CALC_MORTGAGE_* (shared-lib 1ae01ae8); each is then granted or withdraw...
Alias domains in Settings, and on the member's mailbox tab
Settings -> Email -> Domains gains an Alias domains card: add a verified domain, remove one, choose the default or none. The member's Email & Mailbox tab now s...
Manage the org's alias domains, and allow aliases on them
org_alias_domains only ever existed by hand-written SQL. New /api/email/alias-domains lists them (any member of the org) and adds, removes and sets the default ...
Ten Mortgage calculators under Calculator → Mortgage
Monthly Payment, Purchase Affordability, Loan Amount from Payment, Down Payment, Closing Costs Estimator, Cash to Close, DTI, LTV (with CLTV and HCLTV), Extra P...
Ten Mortgage calculator rights under Calculator (650-659)
CALC_MORTGAGE_PAYMENT, _AFFORDABILITY, _LOAN_FROM_PAYMENT, _DOWN_PAYMENT, _CLOSING_COSTS, _CASH_TO_CLOSE, _DTI, _LTV, _EXTRA_PAYMENT and _AMORTIZATION: one per ...
Every meeting occupant's identity is its own verified session's (mod_kamo_presence_identity)
TPMEETAUTH (owner order 2026-10-26): the SI's ear reads who each endpoint is from its presence identity. The stock presence_identity strips a client's own <iden...
In a meeting, the line's own speaker decides authority (signed-in supervisor orders, teammate asks, guest is anyone)
TPMEETAUTH (owner order 2026-10-26). kamoai-voice names the meeting line a call answers (X-Kamo-Meeting-Turn, never the model); MeetingTurns asks kamoai-service...
A meeting line a signed-in supervisor said is an order the Tool Plane may lend on (meet:<turn id>)
TPMEETAUTH (owner order 2026-10-26): in Kamo Meet a signed-in supervisor's request is their direct order (No Insubordination union). The Tool Plane verifies the...
Show an alias's addresses on the org's alias domains
Under each alias on the member's Email & Mailbox tab, list the same alias on the org's alias domains, and under the default sender chip, the address it actually...
An alias works on every alias domain, like the primary mailbox
The org's alias domains (org_alias_domains) already mirrored the member's primary mailbox into the composer (erik@kamocrm.com also offered as erik@kamouniverse....
Anti-impersonation guard — an unverified conversation gets only what anyone may ask until the member confirms in Kamo
Owner 2026-10-26 (TPCALLTOOLS B): someone who only CLAIMS to be a member, a supervisor or someone in authority must not get the SI to do anything harmful or tha...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.