Daemons You approve the exact change.
Sending, posting, updating, or deleting waits for your approval of the exact recipients, message, or fields. A saved routine never approves future changes on its own.
Your approval. Then action.
Nothing leaves Daemons until you approve the exact change. Every run is recorded, and your secrets stay out of the model.
Every run leaves a signed record.
Each run records what it read, what it proposed, your decision, and the outcome. Entries are signed and append-only, so earlier history stays intact.
Secrets never enter the model.
Access tokens stay in Keychain or the connector service’s environment. They never reach model context or the app’s interface.
Local work stays on your Mac.
Local agents use sessions you already hold, and those sessions never leave your device. Cloud steps use only the account access you grant.