Tool visibility by rights, apps, PHI, risk ceiling, taint, capability and charter
The capability gate caches the router's answer per member (SP04 filter 10 narrows candidates by the member's access policies), keeps a failure to get one for 30...
Pure resolver — suppress/lock, additive, specific, restrictive, goals
Charter policy, approvals, outreach gate and external recipients
The charter policy compiles SP03's resolved approvals and limits (fail closed when unreachable, refused or without a resolved block); approvals are created and ...
The agent runs the AI workstation profile when cloud-init asks for it
The agent loads kamo_hc_ai only for KAMO_HC_PROFILE=AI_WORKSTATION: the AI's paths on 9810 behind the agent bearer, the MCP bridge on 9811, the AI's activity re...
The charter editor: section rail, inherited rows with hide switches, item cards
Drops a hide marker whose target left the chain or has since been locked (SecurityService refuses both), whenever the items or a settled answer for the current ...
Downstream calls with the caller's session, internal client, live refresh
Kamo services are called through the BFF's own door per service (*** or a single-use OTK), with the org's workspace host, the actor/run/key headers and spec 4.1...
AI workstation profile applier, screen guard, software kit and runtime
Usage metering columns, routing preferences and budget alert ledger
Idempotency, limits, run taint, rate limit and OTK minting on Redis
Charter item entities for roles, departments, job titles and members; operating briefs
MCP servers tab for Streamable HTTP servers, masked headers and AI access
Tool descriptors, schema builder and validator, registry
A pattern in a tool's schema is untrusted input: ext_* tools carry their org MCP server's own schema. One Java cannot compile is left to the upstream (and refus...
MCP bridge from the Tool Plane to computer-use-linux
Streamable HTTP on 9811 (JSON answers only, GET 405, Origin 403, per-wake bearer 401, take-over 409) in front of one stdio computer-use-linux child per session....
KamoUniverse launch countdown
Counts down to Monday, September 28 at 12:00 PM Pacific. - Homepage section under the hero: flip-card countdown, warp-speed starfield, the thirteen products ...
Typed section fields, schedule and hours editors, job-description and brief previews
Item DTO, value type and section validation
Validation returns what the columns will hold (ruling SP03-T5): role refs as UUID.toString(), member/note/market ids as plain longs, at most 4 decimal places fo...
AI workstation agent module — renderers, MCP token, lease, VNC passwords
The guest half of SP11's AI profile: the files the profile writes (LightDM autologin at 1280x800, kiosk, x11vnc and ydotoold units, Chrome wrapper and managed p...
Watch, Take over and Hand back controls, and the AI workstation panel
RRULE subset for scheduled responsibilities
The normal form has one spelling per rule (plain decimal numbers, lists without spaces, empty or repeated values), since the stored text feeds the charter stamp...
VNC links, AI state reads and a supervisor-session pause for AI workstations
AI workstation profile, token and take-over columns
HostedComputerProfile {STANDARD, AI_WORKSTATION} (STRING, lenient parse to STANDARD); HostedComputer gains profile, ai_primary, the MCP token triple (cipher @Js...
Charter types, section catalogue, validation mirror, schedule and hours helpers, API client
Client calls for watching, taking over and handing back an AI workstation
Arive's loan_create_failed — the Create Loan Zap now reports a refusal
Arive fires no new_loan for a loan created through its API, so the Create Loan Zap's post-back is the only thing that can link the lead, and a refusal inside th...
The PBX speaks through Kamo Speech — kamo_tts.agi, Piper norman at 8 kHz, key from a secret volume
Mirror GitHub kamouniverse main to Forgejo so a merge deploys
The KamoUniverse marketing site is now edited on GitHub GitHub, and PRs merge there. But the site deploys from Forgejo (kamo/kamouniverse-marketing), whose work...
Dovecot push authoritative for KamoMail; NEW_EMAIL no longer self-raisable
POST /api/notifications/self is removed with SELF_RAISABLE: NEW_EMAIL is raised by NewMailAnnouncer and CHAT_MESSAGE by MediaService, so a browser has nothing l...
Certificate and disruption budget for dev.kamouniverse.com
dev.kamouniverse.com is the new KamoUniverse marketing site (repo kamouniverse-marketing; it carries its own Host() IngressRoute in namespace kamo). The kamouni...
Hire-step owner URLs and sweep tuning in the SecurityService ConfigMap
Dovecot pushes mail events to EmailService (Lua push_notification); stop logging secrets
The task.assigned tone rides the TASK_ASSIGNED notification; TASK_CHANGED is gone
task.assigned now plays while the tab is visible, as every tone the deck rings does: the deck names no surface, so a playsWhenFocused:false tone there was heard...
Audit role and security changes; ARTIFICIAL template and AI floor in model endpoints
An emailed invitation keeps its recurrence, edited and cancelled instances
An invitation to one date of someone else's series stays the event it describes instead of being refused as an orphan instance, and a series whose organiser mov...
Relay notification frames to the phone; voicemail gets its own topic
Every pod relays core-NATS email.notify.<memberId> to /topic/notifications/<memberId> on its own broker, for KamoMobile's notification centre. voip.voicemail.* ...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.