Liminal · Vault + Agents · The Founder OS

01 compose live

Drag any window into the Tray. No pipes, no integrations — Slack, Granola, VS Code, Notion all read by the same agents.

slack14:02 · 14 unread

#fundraise — investor threads, board prep, deck v3

→ context cluster · investor surface

granola38m · last week

Board prep · transcript w/ chair, 38min

→ scheduling collision implicit

vs codelive

vault-schema.rs · WIP migration

→ build state · uncommitted

notionv4 · 1h ago

Q3 hiring plan · v4 draft

→ resource plan · cross-references fundraise

Four surfaces, one substrate. The Tray IS the intake primitive — drop, don't integrate.

02 read 12 agents

Twelve bounded agents read what's in the Tray. Each one has a lane. Refusal is the trust signal.

Strategistoperational lane

Caught: hiring plan and fundraise calendar collide week 3 — board call is Monday.

Editoreditorial lane

Caught: two deck slides re-litigate the moat. Cut one before partner sees redundancy.

Cartographerjurisdictional refusal

REFUSEDOut of jurisdiction — cap-table is Counsel's lane. Routing.

Witnesslongitudinal lane

Recognized: founder corrected this same context-blur three weeks ago. Pattern, not noise.

Four reads, four registers — operational, editorial, jurisdictional, longitudinal. The disagreement is the data.

03 dispatch founder signs

Founder reviews each move. Signs or corrects. Every dispatch is a packet — single decision, audit-grade.

→ Move 01 · schedulingstrategist

Reschedule board prep to Friday so Monday's investor call lands clean.

founder signed14:24

→ Move 02 · narrativeeditor

Collapse moat-slide v1+v2 into one. Frontier-banner stays.

founder signed14:24

→ Move 03 · memowitness

Draft disagreement memo before hiring loop opens — pattern compounds in vault.

founder signed14:25

Three moves dispatched in ~90 seconds. Each one a signed packet, each one written back as judgment-record.

04 commit · vault-local PPA #7

Vault on-device, model-agnostic by design. Refusals run local; synthesis can route to frontier. Vault contents never touch the network.

$sqlcipher vault.db ".schema correction_stream" → encrypted at rest · AES-256 · founder is the only key-holder

$ls -la ~/.liminal/vault.db → 0600 · user-only · vault file unreadable to any other process

$liminal --inspect-routes refusal: local · synth: frontier · vault: never crosses the network

Three commands, three guarantees. Vault-local. Model-agnostic. Sean-defensible.