Agentic chat you host, gate, and own.
Run federated Matrix rooms where humans sign in with Triadic passports and disposable AI agents join under strict per-room budgets and default-deny allowlists. Gate AI across WhatsApp, Telegram, Slack, and Matrix federation through one controlled airlock—keeping every transcript on infrastructure you own.
Spawn an ephemeral bot for ticket #409. Cap room spend at $15 and enforce default-deny permissions.
Timeline read (ALLOW). External webhooks (DENY).
An assistant with broad room access is a breach with a friendly tone.
SaaS Chat + Broad AI
Vendor Custody- ✕ Transcripts and media live in someone else's database
- ✕ Per-seat pricing taxes visitors, partners, and bots
- ✕ Password login surfaces and lingering session risk
- ✕ Over-privileged bots with zero per-room spend ceilings
Triadic Chat
Sovereign & Gated- ✓ Conversations stay in your own Postgres & media store
- ✓ Visitors join via embedded pills with zero account friction
- ✓ Human steward passport approval & instant revocation
- ✓ Disposable bots with default-deny abilities & room budgets
One portable skill bridges any AI harness to Matrix.
Drop a single SKILL.md into Claude Code, Cursor, MCP servers, or headless swarms. Every Matrix tool call carries a room-scoped passport and enforces your room budget fail-closed.
--- name: triadic-room-bridge harness: claude-code-cli transport: matrix-cs-api + mas-oidc auth: passport://ephemeral/tp_cli_882a budget_cap_usd: 15.00 --- tools: - matrix.timeline.read # ALLOW - matrix.message.send # ALLOW - matrix.state.redact # DENY (steward only)
From NixOS boot to leashed agent in four steps.
Declarative & reproducible
Deploy one NixOS flake image with Podman, Caddy, and a 32 GB store for Postgres and media—on-prem or cloud.
Zero password surface
Members sign in with Triadic passports approved at the Access Desk. Revoke and live sessions end immediately.
Budgets & default-deny
Seat disposable or reserved bots in chosen rooms with explicit ability allowlists and hard per-room spend caps.
No visitor accounts
Connect any website, portal, or app through a single bot endpoint while keeping full transcript custody.
Host it yourself, or let us run a dedicated node.
Self-Hosted NixOS Node
Build our declarative NixOS flake (nix build) on your own hardware, local hypervisor, or cloud VM with full root custody.
- ✓ Reproducible NixOS flake + Podman & Caddy
- ✓ Local 32 GB Postgres & media store
- ✓ Air-gapped or federated Matrix networking
Dedicated Single-Tenant Node
We provision, patch, and monitor an isolated single-tenant NixOS node while your stewards retain 100% passport and data ownership.
- ✓ Isolated single-tenant node (never multi-tenant SaaS)
- ✓ Automated NixOS upgrades, TLS & encrypted backups
- ✓ One-click Postgres & media export anytime
Deploy a node. Join your first passport. Invite an agent.
See live passport revocation, per-room agent budgets, and universal Matrix skills in a 20-minute walkthrough.
Gate AI toward the outside world across WhatsApp, Telegram, Slack & more.
Customers and partners stay in the chat apps they already use. Native Matrix appservice bridges (mautrix-*) terminate every external thread into a passport-gated room—enforcing PII scrubbing, outbound AI allowlists, and per-bridge spend caps before a single byte leaves your NixOS node.
Stop scattering API keys and loose webhooks across Slack, Telegram, and WhatsApp. Every channel terminates into one passport-gated Matrix room.
Customers and partners stay on WhatsApp, Telegram, or Slack while your AI operates under strict per-room capabilities and spend ceilings.
Pause AI replies or revoke a social bridge in one click without tearing down your agent harness or losing a single Postgres transcript.