Security & limitations

Explicit boundaries, without absolute guarantees.

Bundled task skills

Six reviewed skills reuse existing deterministic tools. Explicit selection narrows the allowed tasks; automatic suggestions can be wrong and require interpretation review. Uploaded documents cannot install skills or grant authorization. Public mode remains model-free. Explore skills and local reports.

Deployment boundary

The default CLI binds to localhost. An explicitly configured hosted demonstration runs behind HTTPS. Authenticated mode uses one shared owner credential. Public mode removes login and lets every visitor view, export and change shared synthetic records; live model API keys are disabled in public mode. Neither mode is a multi-user production login or tenant-isolated service. Hosted records live on that server, not in your browser. There is no bank integration, real payment rail or outbound messaging service. Host administrators remain trusted; credentials and data require separate operational protection.

Financial and model boundary

Integer minor units and deterministic tools supply financial results. The guided model selects a task; it never receives financial results for a final rewrite. Invalid, guessed, stale or late instructions are rejected. Exact owner review is still necessary: a supported task can misunderstand the question.

CSRF checks, business-scoped permissions, transactional saves, durable request identity, bounded provider responses and error redaction are implemented controls, not claims of universal attack resistance. Model prose in the advanced mode remains unverified.

Evidence and availability

Source references do not authenticate the source. Finite local guards do not cover every paraphrase. Provider billing, remote work after local timeout, outages and account-wide quotas are outside the local app's control. Incorrect input data and software bugs can produce incorrect results.

Release use

This is a synthetic hackathon demonstration with a redesigned interface. Independent human usability testing, production hardening and any real-business pilot remain separate work. No regulatory compliance, financial certification or global uniqueness is claimed.