Real hands, real software.
Shell and editor. Terminal and editor inside the machine — install, build, run, debug, all in the session.
Browse and operate. A real browser session: sign-ins, forms, dashboards, the same tools you use.
Watch and take over. Stream the run, pause it, take the cursor — every action recorded as it happens.
Contained by design.
Every session runs in its own miniature server with nothing shared, so the worst case is one disposable machine rather than your laptop.
Its own disk, its own browser profile, its own network namespace. Destroyed when the run ends — nothing survives into the next job.
Each connection carries the narrowest scope that completes the task, granted by you and revocable one tool at a time. The agent never escalates its own permissions.
Sending, paying, publishing, cancelling and merging all stop and wait for a person, with the full action attached. You choose what else joins that list.
Every action and every approval is timestamped and attributable. Export it, or query it from your own systems.
Give your agent hands.
Spin up a computer session from any chat — watch it work, approve the risky parts.
