Eleven modules. Eleven honest answers.
An agent is only as capable as what it carries. Here is everything in the bag, and next to each one, what it actually does today rather than what it will do eventually. 9 live, 1 in beta, 1 on the bench.
AccessControl
Per-document permissions that filter answers, not just pages.
Policy resolution is cached per session for speed; a permission change propagates on cache invalidation rather than instantly on every in-flight request.
Docs
A folder tree the agent reads, and a config file it obeys.
Extraction covers PDFs, spreadsheets and transcripts. Exotic binary formats are not parsed.
Events
A durable ledger of what agents did, and why.
The in-process event bus is a single-node emitter, not a distributed broker. The durable cross-agent record is a separate Postgres task ledger.
Your agent has its own inbox, not a share of yours.
Inbound arrives by webhook from an email provider. We do not run our own MX or SMTP servers.
MCP
Both ends of the protocol: server and client.
Custom remote-MCP connectors authenticate with a static bearer token today. Full OAuth 2.1 for third-party MCP servers is planned, not shipped.
Memory
Grounded retrieval over your own material, with receipts.
This is retrieval, not persistent agent memory. Vector grounding is deployed; hybrid scoring combines vector similarity, keyword match and graph centrality.
Package
Export, share and install agents as portable archives.
Export, import, handoff links and showcase all work. There is no marketplace, no package versioning, and no signed packages.
Taxonomy
Knowing what a question is about before answering it.
Tagging plus a tiered scope classifier. Tags are derived from material and connectors; there is no authored ontology hierarchy yet.
TrustGraph
Which agent may talk to which, and what it may say.
Decisions and scoped tokens are enforced on the agent-to-agent paths. The explainability surface ("why was this blocked") is thinner than the enforcement.
Phone
Voice in and out, and SMS. Not phone calls.
Speech-to-text and text-to-speech are live. SMS is built but flag-gated off and needs a carrier account. There is no inbound or outbound telephone calling.
Calendar
Scheduling by validated deep link: for now.
There is no native calendar. The agent emits an allowlist-validated scheduling link; it does not hold events, check availability, or sync with Google or Outlook.