Ducens SHEET 02 / 08
Ducens · Sheet 02 / 08 Pillar · Cockpit

One surface for what is happening across your tools right now.

Every tool you pay for, every key it holds, every permission it was given. One sheet, plain language, current as of right now. Nothing on it is hidden from you, because it is yours.

The stack map

SELECT A TOOL · PINK MARKS ITS TOUCHES02·B

Tools you pay for on the left, everything they could reach on the right. The lines between them are the only permissions that exist. Anything not drawn is denied, and denied is the starting state, not a setting you have to go and find.

TOOLS YOU PAY FOR
WHAT THEY TOUCH
FILES READ+WRITE
MAIL DENY
CALENDAR DENY
KEYS READ
USAGE DENY
CODE AGENT · FILES READ+WRITE · KEYS READ · EVERYTHING ELSE DENIED

Gate log · Written by the machine

DENY BY DEFAULT, PERFORMED02·C
09:41:07CODE AGENT → FILES WRITESHOWN · APPROVED BY YOU
09:41:22TRANSCRIBER → MAIL READSHOWN · DENIED, NO GRANT
09:44:03SCHEDULER → CALENDAR WRITESHOWN · APPROVED BY YOU
10:02:56IMAGE MODEL → USAGE RUNSHOWN · APPROVED BY YOU
SPECIMEN LOG · THE SHAPE IS REAL, THE TIMES ARE AN EXAMPLE

The rules of the surface

Deny by default. Every permission is shown and approved before it is used.

The AI Stack Audit maps every tool, key and permission you have, and gives you one shareable report. Seven minutes, one sheet, and your stack stops being a rumour.

Audit specimenR-017
TOOLS FOUND12
KEYS LOCATED9
PERMISSIONS MAPPED31
FLAGS RAISED3
SHAREABLE REPORT1

SPECIMEN SHOWS THE SHAPE OF THE REPORT, NOT LIVE DATA.

Also on the surface

THREE MORE THINGS THE SHEET HOLDS02·D
S-01 The mail hub Your mail connected by OAuth and triaged under rules you write. It drafts, it queues, it never sends: every outgoing message waits in the approvals queue for you.
S-02 The agent room One place to work with the agents you already pay for, with the engine chosen per conversation. Your keys, so your bill and your choice of provider.
S-03 A local model For the things that never leave the machine. Same surface, same receipts, no request to anyone.

Local-first, which is not the same as sealed. A local model keeps its work on the machine; anything you send to a provider goes to the provider you chose, on the key you supplied, and the receipt says so.

One sheet, and your stack stops being a rumour.

Join the waitlist
End of sheet 02 Next: Learn →