Not for hire.

A sandbox and crew harness for AI coding agents. Your code stays on the host; the agent stays in its room. Most of the other work on this page was built inside it.

• An actual boundary. One container per repository, non-root, with an iptables and ipset allowlist that rejects everything but the handful of hosts the agent legitimately needs. A .sandboxignore masks the files it should never see — secrets read as empty, directories as bare.
• Crews, not a single assistant. Several agents, each in its own container, addressing each other by mention in rooms, with floor control so N agents do not talk forever. A teammate's message is untrusted data; only the human's is authoritative.
• An access ladder. Write to its own subtree, read-only elsewhere, or caged — network sealed to its own model endpoint, no credentials, no memory. The human commits; agents never do.
• Model is not harness. A member declares a model and gets the native tool for it — Claude Code, Codex, or OpenCode — so the roster is not locked to one vendor.
• The unglamorous half. Named resumable sessions, a clipboard bridge so images paste through the container wall, desktop notifications, 1Password resolution across multiple accounts, and a dashboard to watch and steer the whole thing.

MIT licensed. This website was built, deployed and debugged from inside it.

The assistant inside Friendsheep Ops, the tool my company actually runs on — purchase orders, a supplier portal, shipments and box packing, warehouse receiving, forecasting and invoicing. Not a chatbot over a warehouse of data: it reads the live systems and proposes real changes to them.

• Breadth. Around a hundred and twenty tools spanning Shopify, GA4, Google Ads, Meta, Bing, Klaviyo, Amazon and Faire, alongside inventory, purchase orders, suppliers, shipments, invoices and landed cost.
• Judgement, not just retrieval. Demand forecasting, restock recommendations, ABC classification, cohort and LTV curves, channel attribution reconciled against survey data.
• Human in the loop by construction. Anything that changes the world is a proposal — a draft purchase order, a price change, an invoice — surfaced for approval rather than executed on the agent's own authority. The destructive path simply does not exist.

It interviews someone about their life, a sitting at a time, and compiles what it hears into a printed book. It records video and audio in the browser, transcribes locally with whisper, speaks with piper, and keeps everything as plain files a family could still open if the software vanished.

• No framework, one dependency. Raw node:http, ES modules, no bundler, no build step.
• Honest about where words go. The privacy claim is computed from the live configuration on every request, never written in prose — because prose drifts, and the README once promised local-only while the app was posting audio to three companies. It states the address it sends to and refuses to characterise what happens next, because it cannot know.
• Built for a household. Invite links rather than accounts, because every mail provider needs a verified domain that a family install will never have. Paths are constructed so reaching another person's recordings is impossible by construction rather than by remembering a check.
• The archive is irreplaceable. Recordings cannot be regenerated, so writes are atomic and anything touching them gets a test first.

An episodic driving game in Unity, set in real places rebuilt from lidar and survey data — roads, harbours, terrain, vegetation and the buildings that actually stand there. Missions are authored in a small domain language rather than hand-wired, with drivable boats, air and road traffic, and working GPS navigation.

Built by a standing crew of agents with a producer, a task ledger and playtest records — the largest thing Mister Claude runs.

A youth-soccer league page that turns an unreadable federation schedule into fixtures, results and a table. Plain Node with no dependencies at all, caching to disk, refreshing itself while open. Small, but it is used every weekend by people who do not care how it works.