Done is social
A ticket moves because someone dragged it. A pull request merges because a reviewer skimmed a diff at 6pm.
Now inviting design partners
Dagsbryn is a voice chief of staff for engineers. It reads your meetings, tickets, chat and code, briefs you while the kettle boils, and hands work to your coding agent on your own Mac. Nothing ships until every line of the ticket is closed by evidence and you touch the sensor.
Reads the tools your team already uses
The problem
A ticket moves because someone dragged it. A pull request merges because a reviewer skimmed a diff at 6pm.
The real requirement lives in a meeting, a Slack thread and a comment on the ticket. Your agent sees none of it.
An agent says "I checked it". That's a claim, not a proof. You still have to find out what it really did.
06:58 · The morning brief
A two-minute spoken brief of what changed overnight, who is waiting on you, and the one thing to do next. Every sentence links to the item it came from, at the version it read. When Dagsbryn isn't sure, it says so.
Thursday · 7:42
Good morning. Three things need you.
Overnight your Mac proved two of the four lines on mw-shop #6, cart total with VAT. One line needs your eyes: the receipt layout.
run 4f2a · 2 of 4 provenDana is waiting on your review of the checkout pull request. It blocks her release.
PR #41 · head 9c1e0d2Your 10:00 with Priya is about the invoice bug. The reproduction steps are in your prep.
SCRUM-13 · v3 · calendarNext for you: review Dana's pull request. Nothing was shipped without you.
0 unapproved writesAsk anything: "what did Priya promise in Tuesday's standup?"
Promise → Proof → Ship
A piece of work is done when every line of its promise is closed by evidence, and it stays done only while that evidence still holds.
Commitments from meetings, chat and the ticket become lines you can check. Vague lines say they're vague.
Overnight, your coding agent works in a sandbox on your Mac. Each line gets a test that fails before the change and passes after it.
Where a test can't decide, a person looks at the exact version. That look expires the moment the code changes.
One Touch ID, bound to the exact repository, pull request and commit. Then Dagsbryn keeps checking it on main.
One chief of staff
"Who's waiting on me?" "What did we decide about the export?" Answers cite the message, the meeting or the commit they came from.
Your coding agent runs in a macOS sandbox on a private copy, without your git credentials.
Transcribed on your Mac after everyone is told. The audio is never saved.
Before each meeting: the tickets, the threads, what you promised last time.
Every proven line is rerun on later changes. A broken promise is the one red thing on your screen.
Your repository drawn by evidence: where the truth is proven, where it was only seen, and where nobody has looked.
In the lab · not released yet
Soon one task will split into helpers: one digs through the legacy code, one drafts the reply, one collects numbers from a dashboard with no API. Helpers propose and never act. Before any of them touches a real inbox, it rehearses against a private mail server and simulated colleagues, one of whom tries to trick it.
Helpers hold no credentials. Every action they suggest goes through the same registry, policy and approval as everything else.
Two levels deep, a fixed number of helpers, a budget taken from the parent task. Stop the task and every helper stops.
Each skill must pass its rehearsal: no wrong recipient, no unchecked claim, no trick obeyed. Then it graduates to your real tools.
Trust by construction
These aren't settings. They're rules in the code, and each one has an automated test.
Tokens are encrypted with AES-256-GCM and a separate key per customer. They never reach the model, a log line or another customer.
What an action may do is fixed in code, never chosen by a model, a prompt or the text of a ticket.
A pull request body that says "merge me" is read as text. It can't change what happens.
You see the exact change with names resolved. One approval, one action, expired after 15 minutes.
Row-level security on every table. Team admins see usage, never your brief, messages or code.
Disconnect a tool and its token and data are deleted. Delete your account and everything goes.
Pricing
Start with a free trial, no card. Pay for the seat, not the tokens: your AI usage is included, and the brief never stops at a limit.
Questions
No. Coding agents run on your Mac, in a sandbox, on a private copy of the repository. The cloud reads your tickets and pull requests through the providers' APIs and never holds git credentials.
Claude Code today, with your own login. Codex and Copilot CLI are next. The proof rule doesn't care who wrote the code, a person included.
One action, bound to the exact repository, pull request, commit and merge method, rechecked just before the write. If anything changed, nothing happens.
Every sentence must point at evidence at a matching version, or it isn't said. When something wasn't checked, the brief says so. If the model is down, you get a plainer brief from the same facts, never an invented one.
No. On Enterprise your team can send every model call through its own Anthropic, Amazon Bedrock or Google Vertex AI account.
Heavy features like hand-offs pause and you can add a $20 top-up. Your brief, your questions and your approvals never stop.
We're onboarding a small group of engineering teams by hand. Tell us where you work and we'll reply within one business day.