Eleven modules. Eleven honest answers.
An agent is only as capable as what it carries. Here is everything in the bag, and next to each one, what it actually does today rather than what it will do eventually. 7 live, 3 in beta, 1 on the bench.
Your agent has its own inbox, not a share of yours.
Inbound arrives by webhook from an email provider. We do not run our own MX or SMTP servers.
Package
Export, share and install agents as portable archives.
Export, import, handoff links and showcase all work. There is no marketplace, no package versioning, and no signed packages.
Memory
Grounded retrieval over your own material, with receipts.
This is retrieval, not persistent agent memory. Vector grounding is code-complete; the vector deployment is still pending.
Calendar
Scheduling by validated deep link: for now.
There is no native calendar. The agent emits an allowlist-validated scheduling link; it does not hold events, check availability, or sync with Google or Outlook.
Docs
A folder tree the agent reads, and a config file it obeys.
Extraction covers PDFs, spreadsheets and transcripts. Exotic binary formats are not parsed.
MCP
Both ends of the protocol: server and client.
Custom remote-MCP connectors authenticate with a static bearer token today. Full OAuth 2.1 for third-party MCP servers is planned, not shipped.
Events
A durable ledger of what agents did, and why.
The in-process event bus is a single-node emitter, not a distributed broker. The durable cross-agent record is a separate Postgres task ledger.
Phone
Voice in and out, and SMS. Not phone calls.
Speech-to-text and text-to-speech are live. SMS is built but flag-gated off and needs a carrier account. There is no inbound or outbound telephone calling.
TrustGraph
Which agent may talk to which, and what it may say.
Decisions and scoped tokens are enforced on the agent-to-agent paths. The explainability surface ("why was this blocked") is thinner than the enforcement.
AccessControl
Per-document permissions that filter answers, not just pages.
Policy resolution is cached per session for speed; a permission change propagates on cache invalidation rather than instantly on every in-flight request.
Taxonomy
Knowing what a question is about before answering it.
This is tagging plus a scope classifier. It is not an ontology: there is no hierarchical scheme you author and maintain.