mai exists.

On the matter of nothing ever being lost.

1. No. 001

   Every tab is a detached tmux session plus a resumable transcript, so it survives the app closing, the browser closing, a crash and a reboot.Sealed. Requires Public clearance.

   Public
2. No. 002

   Start a conversation at your desk, close the laptop, and pick up the same conversation on your phone.Sealed. Requires Public clearance.

   Public
3. No. 003

   Sidebar colours report status at a glance: red is waiting on you, blue is compacting, amber is working, green is idle.Sealed. Requires Public clearance.

   Public
4. No. 004

   Fork any conversation into an independent session at its current point.Sealed. Requires Public clearance.

   Public
5. No. 005

   Sessions name themselves: mai titles a session once its first turn produces content.Sealed. Requires Public clearance.

   Public
6. No. 006

   My Sessions lists every session you own with context left, live spend, model, folder and git branch on each row.Sealed. Requires Public clearance.

   Public
7. No. 007

   A terminal keeps 10,000 lines on screen; scroll past the top and an Earlier history view pages back through the last 50,000.Sealed. Requires Confidential clearance.

   Confidential
8. No. 008

   When the connection drops, mai reconnects about once a second, and whatever you typed in the meantime is held and sent when it returns.Sealed. Requires Confidential clearance.

   Confidential
9. No. 009

   Sleep frees the roughly 300 to 580 MB an idle Claude session holds but keeps its tab; it resumes from the transcript on next touch.Sealed. Requires Confidential clearance.

   Confidential
10. No. 010

    Message a sleeping session and it wakes itself first instead of failing.Sealed. Requires Confidential clearance.

    Confidential
11. No. 011

    The send queue lives on the server, so a message queued on your phone still sends after you switch devices.Sealed. Requires Confidential clearance.

    Confidential
12. No. 012

    Each new session in a repo can get its own git worktree on a fresh branch, so parallel agents never edit the same checkout.Sealed. Requires Confidential clearance.

    Confidential
13. No. 013

    Templates capture folder, model, skills, memory packs and scope, with {{variable}} holes filled in at launch.Sealed. Requires Confidential clearance.

    Confidential
14. No. 014

    The Queue pane shows exactly one session, the one that most needs you; deal with it and the next one appears.Sealed. Requires Confidential clearance.

    Confidential
15. No. 015

    Revive searches every past Claude Code conversation on the machine and resumes or safely forks one.Sealed. Requires Confidential clearance.

    Confidential
16. No. 016

    Closed a session by mistake? Its emptied pane offers Undo, and Ctrl+Z restores the tiling layout.Sealed. Requires Confidential clearance.

    Confidential
17. No. 017

    Archived sessions wait in a drawer and never count toward your concurrent-session limit.Sealed. Requires Confidential clearance.

    Confidential
18. No. 018

    Running turns live in a separate engine daemon, so restarting the web server does not interrupt a turn in progress.Sealed. Requires Top secret clearance.

    Top secret
19. No. 019

    The interrupt ledger records the real cause of a dead turn (rate limit, hang watchdog, restart) instead of "interrupted by user".Sealed. Requires Top secret clearance.

    Top secret
20. No. 020

    A roughly 3-second "sending…" window lets you pull back a message you just submitted, timed on the server so closing the tab cannot lose it.Sealed. Requires Top secret clearance.

    Top secret
21. No. 021

    Continue replays a turn mai lost exactly where it died, and only turns mai lost, never ones you stopped.Sealed. Requires Top secret clearance.

    Top secret
22. No. 022

    The git glyph turns red for uncommitted work and amber for unmerged commits. There is deliberately no green: a light on every row is noise.Sealed. Requires Top secret clearance.

    Top secret
23. No. 023

    Throwaway branches rename themselves from a timestamp to a descriptive slug once the work has a name.Sealed. Requires Top secret clearance.

    Top secret
24. No. 024

    Up to 32 mai instances (desktop, CLI, web) share one lock-guarded tab list, each keeping its own window geometry.Sealed. Requires Top secret clearance.

    Top secret

Headcount, reporting lines and the bees.

1. No. 025

   Each project gets a Hive board: a Queen session dispatches worker bees, each in its own git worktree and branch.Sealed. Requires Public clearance.

   Public
2. No. 026

   "Get to work" turns on autonomous dispatch of queued tasks to as many parallel bees as you allow.Sealed. Requires Public clearance.

   Public
3. No. 027

   Paste a whole epic or spec and an intake bee turns it into a task board with dependencies, then stops and waits for you.Sealed. Requires Public clearance.

   Public
4. No. 028

   Bees are kernel-confined to their own worktree: SSH keys, saved logins, other projects and past conversations are out of reach.Sealed. Requires Public clearance.

   Public
5. No. 029

   A bee that needs a folder outside its worktree has to ask; you grant it under "Can reach".Sealed. Requires Confidential clearance.

   Confidential
6. No. 030

   Bees receive credentials by name from the keyring, never the value, and one click revokes a credential from every running bee at once.Sealed. Requires Confidential clearance.

   Confidential
7. No. 031

   Honey is the hive's shared, append-only memory, where bees write down what they learned.Sealed. Requires Confidential clearance.

   Confidential
8. No. 032

   An architect bee asks you design questions before building; a silent variant decides everything itself.Sealed. Requires Confidential clearance.

   Confidential
9. No. 033

   A commander bee splits one large task into a parallel batch and coordinates the children until the whole swarm lands.Sealed. Requires Confidential clearance.

   Confidential
10. No. 034

    Merge-conflict radar reports which in-flight branches touch the same files before anything is merged.Sealed. Requires Confidential clearance.

    Confidential
11. No. 035

    A reviewer bee grades the work against your standards; the review-and-fix loop stops after 3 failures and escalates.Sealed. Requires Confidential clearance.

    Confidential
12. No. 036

    Live chips show tokens in, tokens out and cost for every task and for the whole hive.Sealed. Requires Confidential clearance.

    Confidential
13. No. 037

    In the default Orbital scene, tasks orbit a core and fall inward as they progress; a stuck task stops and shows a red "!".Sealed. Requires Confidential clearance.

    Confidential
14. No. 038

    Each hive levels up from landed tasks through 5 named evolution stages.Sealed. Requires Confidential clearance.

    Confidential
15. No. 039

    Evolve reads your codebase, proposes features scored 1 to 5 on complexity, impact and leverage, and hands the ones you accept to the Hive.Sealed. Requires Confidential clearance.

    Confidential
16. No. 040

    Reviewer panels can gate a deploy and install a git pre-push hook that refuses unreviewed pushes.Sealed. Requires Confidential clearance.

    Confidential
17. No. 041

    Smart assign splits selected todos into parallel groups and, once you approve, spawns one session per group.Sealed. Requires Confidential clearance.

    Confidential
18. No. 042

    On shared todo lists agents may add and tick tasks, but only a human can delete one.Sealed. Requires Confidential clearance.

    Confidential
19. No. 043

    Dispatch pauses by itself when your 5-hour or 7-day plan window reaches 98%, and resumes when the window rolls over.Sealed. Requires Top secret clearance.

    Top secret
20. No. 044

    The hive heartbeat ticks every 4 seconds: it watches waiting bees, escalates to the Queen and sweeps up dead ones.Sealed. Requires Top secret clearance.

    Top secret
21. No. 045

    A reviewer that failed to run fails the verdict, and verdicts are cached by commit, so a stale pass can never satisfy a gate.Sealed. Requires Top secret clearance.

    Top secret
22. No. 046

    Evolve learns your taste from what you accept and decline, and declines duplicates of ideas you already rejected.Sealed. Requires Top secret clearance.

    Top secret
23. No. 047

    A list handed to a session wakes it when new work arrives, with a 45-second debounce and a ceiling of 12 wakes an hour.Sealed. Requires Top secret clearance.

    Top secret

Bring your own AI. Finance is relieved.

1. No. 048

   Bring your own AI: every provider is your own key or subscription, mai bills no AI usage, and you do not need Anthropic.Sealed. Requires Public clearance.

   Public
2. No. 049

   Paste a DeepSeek, Kimi, GLM, Qwen, Gemini, OpenRouter or Groq key; a one-token test turns the card green.Sealed. Requires Public clearance.

   Public
3. No. 050

   Want a local model with no account? mai installs Ollama for you, without sudo, and pulls the model you pick.Sealed. Requires Public clearance.

   Public
4. No. 051

   Use the subscriptions you already pay for: ChatGPT through Codex, Claude through Claude Code.Sealed. Requires Public clearance.

   Public
5. No. 052

   Every token is measured at the wire and shown per session, per account and per time window.Sealed. Requires Public clearance.

   Public
6. No. 053

   Saved Claude logins come with live 5-hour and 7-day countdowns, and switching the active account is one click.Sealed. Requires Public clearance.

   Public
7. No. 054

   Move a live conversation to another harness, Claude to Codex for instance, after a dry run that reports exactly what will cross.Sealed. Requires Confidential clearance.

   Confidential
8. No. 055

   Swap a running session to another model or endpoint without losing the conversation.Sealed. Requires Confidential clearance.

   Confidential
9. No. 056

   Spread sessions across several Claude accounts: evenly, in order, or spread out.Sealed. Requires Confidential clearance.

   Confidential
10. No. 057

    The Models page filters every model by Runnable now, 1M+ context, or On this machine.Sealed. Requires Confidential clearance.

    Confidential
11. No. 058

    "Check balance" reads live spend and remaining credit straight from the provider's API.Sealed. Requires Confidential clearance.

    Confidential
12. No. 059

    Change permission mode and reasoning effort mid-conversation from chips in the footer.Sealed. Requires Confidential clearance.

    Confidential
13. No. 060

    Hold Ctrl when sending to send exactly one turn on a different model, permission mode or effort.Sealed. Requires Confidential clearance.

    Confidential
14. No. 061

    Usage shows cost per 100 lines changed, counted only over sessions that actually changed code.Sealed. Requires Confidential clearance.

    Confidential
15. No. 062

    mai harness run gives any harness one task and returns one answer, with no conversation kept.Sealed. Requires Confidential clearance.

    Confidential
16. No. 063

    mai pins a non-native model's real context window, so a 1M-token model does not start compacting at the 200K default.Sealed. Requires Top secret clearance.

    Top secret
17. No. 064

    Two truths about one number: a 191K context over 78 calls really is 14.95M tokens billed, and mai shows you both.Sealed. Requires Top secret clearance.

    Top secret
18. No. 065

    A new Claude Code version must pass a conformance suite and a soak (3 hours by default) before mai moves to it.Sealed. Requires Top secret clearance.

    Top secret
19. No. 066

    Proven Claude versions carry a signed greenlight that every mai verifies before following it.Sealed. Requires Top secret clearance.

    Top secret
20. No. 067

    Each harness is scored on an 18-point capability matrix: Claude Code 18 of 18, Codex 17 of 18.Sealed. Requires Top secret clearance.

    Top secret

Where mai may be operated, and how.

1. No. 068

   One product, three windows: the browser, a chromeless desktop window, or a native GTK app on Linux.Sealed. Requires Public clearance.

   Public
2. No. 069

   The workspace is a tiling canvas: split panes as far as you like, move focus with Alt+Arrow, even them out with Alt+E.Sealed. Requires Public clearance.

   Public
3. No. 070

   On a phone the UI becomes its own shell (Sessions, Spaces, ⌘, Panels, More) rather than a squashed desktop.Sealed. Requires Public clearance.

   Public
4. No. 071

   An empty pane offers about 26 kinds of panel, with search and six category chips.Sealed. Requires Confidential clearance.

   Confidential
5. No. 072

   Describe a workspace in one sentence and a model proposes the layout; nothing is built until you press Build.Sealed. Requires Confidential clearance.

   Confidential
6. No. 073

   Swipe between sessions on the phone with both neighbours rendered live through the whole drag.Sealed. Requires Confidential clearance.

   Confidential
7. No. 074

   Install it as an app (PWA); on iPhone, that is the step that makes push notifications possible.Sealed. Requires Confidential clearance.

   Confidential
8. No. 075

   The VS Code extension mounts a session's files as a real workspace over mai://, with no SSH and no second login.Sealed. Requires Confidential clearance.

   Confidential
9. No. 076

   Clickable file:line links open in VS Code, Cursor or Windsurf, and in Zed or Sublime through their CLIs.Sealed. Requires Confidential clearance.

   Confidential
10. No. 077

    The Tools drawer finds tools by what they do: "cost" finds Token Usage, "mute" finds the sound toggle.Sealed. Requires Confidential clearance.

    Confidential
11. No. 078

    Every shortcut can be rebound, and a Ctrl+Shift+B leader key adds one-letter commands.Sealed. Requires Confidential clearance.

    Confidential
12. No. 079

    Ask AI in Settings: "make the text bigger" becomes chips that click the real controls.Sealed. Requires Confidential clearance.

    Confidential
13. No. 080

    Pop any pane out into its own borderless window; the space it left offers Reattach here.Sealed. Requires Confidential clearance.

    Confidential
14. No. 081

    The default local port is 8420; if it is taken, mai picks the next free one and remembers it.Sealed. Requires Confidential clearance.

    Confidential
15. No. 082

    Twelve animated backgrounds, and a "Hold animations still" switch so an idle mai costs almost no CPU.Sealed. Requires Top secret clearance.

    Top secret
16. No. 083

    Two independent text sizes: one for the interface, one for what your sessions say.Sealed. Requires Top secret clearance.

    Top secret
17. No. 084

    New workspaces get room names (kitchen, garage, attic) and never repeat one already on the board.Sealed. Requires Top secret clearance.

    Top secret
18. No. 085

    Phone back gestures peel one layer at a time, from a sheet back to the list, instead of closing the app.Sealed. Requires Top secret clearance.

    Top secret
19. No. 086

    Phone taps fire instantly, with no 300 ms double-tap wait, and dialog buttons are at least 44 px.Sealed. Requires Top secret clearance.

    Top secret
20. No. 087

    The GTK desktop reads each tab's state with 17 named patterns, scanning only the live screen, never the history.Sealed. Requires Top secret clearance.

    Top secret

Keys, sandboxes and who may see what.

1. No. 088

   The web server binds to 127.0.0.1 and requires a token; nothing is reachable from your network by default.Sealed. Requires Public clearance.

   Public
2. No. 089

   The keyring is one encrypted vault that relocks after 15 minutes idle, and unlocking never leaves the machine mai runs on.Sealed. Requires Public clearance.

   Public
3. No. 090

   Sessions ask for API keys through a secure card in the pane, so a key never passes through the chat transcript.Sealed. Requires Public clearance.

   Public
4. No. 091

   Installed from apt, every session is fenced by default and can write only inside its own folder.Sealed. Requires Public clearance.

   Public
5. No. 092

   Unlock the keyring with a fingerprint or security key (WebAuthn PRF), a passphrase, a recovery code or the OS keychain.Sealed. Requires Confidential clearance.

   Confidential
6. No. 093

   Mark a key private and no session can list it, be granted it or read it. It cannot even see that the name exists.Sealed. Requires Confidential clearance.

   Confidential
7. No. 094

   The HTTP broker lets a session call an API through a loopback URL while mai injects the real key into the request.Sealed. Requires Confidential clearance.

   Confidential
8. No. 095

   A built-in SSH agent signs for sessions without ever handing them the private key.Sealed. Requires Confidential clearance.

   Confidential
9. No. 096

   Session scope is Off, Guard or Confine; Confine pins Claude's OS sandbox to the folder and holds for every child process.Sealed. Requires Confidential clearance.

   Confidential
10. No. 097

    Every settings change is logged with its old value; mai audit revert puts it back, and the revert is logged too.Sealed. Requires Confidential clearance.

    Confidential
11. No. 098

    Updates are checked against sha256 and a minisign signature whose public key is built into the binary.Sealed. Requires Confidential clearance.

    Confidential
12. No. 099

    Modules list the exact permissions they want before install, and their UI runs in sandboxed, opaque-origin iframes.Sealed. Requires Confidential clearance.

    Confidential
13. No. 100

    A host-header allowlist closes DNS rebinding: mai answers only localhost, IPs, .local, .lan and *.ts.net unless you add names.Sealed. Requires Confidential clearance.

    Confidential
14. No. 101

    A scoped session's children can only narrow its scope, never widen it, and mai refuses rather than quietly clamping.Sealed. Requires Top secret clearance.

    Top secret
15. No. 102

    mai refuses to create a confined session on a machine that cannot enforce it, rather than silently running it unconfined.Sealed. Requires Top secret clearance.

    Top secret
16. No. 103

    Two-factor codes are computed from a stored seed without the seed ever reaching the session that asked.Sealed. Requires Top secret clearance.

    Top secret
17. No. 104

    Every use of a credential is logged by session and time. Never its value.Sealed. Requires Top secret clearance.

    Top secret
18. No. 105

    Bug reports are scrubbed of secrets and your home path, and shown to you in full before anything is sent.Sealed. Requires Top secret clearance.

    Top secret

Agents, on the open web, under supervision.

1. No. 106

   Two browsers: mai's own clean Chrome with none of your logins, and your real browser through an extension.Sealed. Requires Public clearance.

   Public
2. No. 107

   A session asks before it uses your browser, with a "Use your browser?" card that gives the reason. Revoke it any time.Sealed. Requires Public clearance.

   Public
3. No. 108

   The extension installs from the Chrome Web Store and updates itself; Firefox is supported too.Sealed. Requires Public clearance.

   Public
4. No. 109

   Pair it with a one-click link or a one-time 8-character code, valid for 5 minutes and one use.Sealed. Requires Confidential clearance.

   Confidential
5. No. 110

   Snapshot mode lists a page's controls as numbered refs, and --diff prints only what changed since the last look.Sealed. Requires Confidential clearance.

   Confidential
6. No. 111

   Every page an agent reads arrives fenced as untrusted web content, so page text is treated as data, not instructions.Sealed. Requires Confidential clearance.

   Confidential
7. No. 112

   The browser is driven by CLI verbs rather than an MCP tool, so it costs zero prompt tokens until it is used.Sealed. Requires Confidential clearance.

   Confidential
8. No. 113

   Site permission is default-deny, enforced inside the extension, and Pause blocks every driving command at once.Sealed. Requires Confidential clearance.

   Confidential
9. No. 114

   Sessions can guide you on the page with highlight rings, labelled arrows and step-by-step walkthroughs.Sealed. Requires Confidential clearance.

   Confidential
10. No. 115

    Record a click-through once and replay it, with login fields bound to a keyring credential by name.Sealed. Requires Confidential clearance.

    Confidential
11. No. 116

    Console and network capture: console output, errors, failed loads, and every fetch with its status and timing.Sealed. Requires Confidential clearance.

    Confidential
12. No. 117

    After a multi-step job, sessions write a site playbook so the next session on that site skips the rediscovery.Sealed. Requires Confidential clearance.

    Confidential
13. No. 118

    A live, clickable mirror of the companion browser runs inside a mai pane.Sealed. Requires Confidential clearance.

    Confidential
14. No. 119

    Chat with any mai session from the extension's side panel without leaving the page.Sealed. Requires Confidential clearance.

    Confidential
15. No. 120

    File uploads work: it fills real file inputs and drag-and-drop zones.Sealed. Requires Top secret clearance.

    Top secret
16. No. 121

    Emulate a phone, tablet or desktop from 6 presets or any width × height @ scale, with user agent and touch.Sealed. Requires Top secret clearance.

    Top secret
17. No. 122

    Arbitrary JavaScript and raw CDP are off by default and need an explicit switch.Sealed. Requires Top secret clearance.

    Top secret
18. No. 123

    The opt-in "what did I read" ledger is local-only and stops capturing page text while a password box is visible.Sealed. Requires Top secret clearance.

    Top secret

For staff who would rather talk.

1. No. 124

   mai reads its answers aloud and takes dictation on your own machine by default: no key, nothing billed, nothing sent.Sealed. Requires Public clearance.

   Public
2. No. 125

   Paste a YouTube, TikTok, Instagram, X or Vimeo link (about 2,000 sites work) and keep its transcript, summary and thumbnail.Sealed. Requires Public clearance.

   Public
3. No. 126

   Local voice engines install in one click: Piper (about 110 MB), Kokoro (about 500 MB), Whisper (about 600 MB).Sealed. Requires Confidential clearance.

   Confidential
4. No. 127

   Voice notes (Alt+V) arrive cleaned up using the conversation so far: filler dropped, names spelled right.Sealed. Requires Confidential clearance.

   Confidential
5. No. 128

   On Windows, mai speaks through the built-in SAPI voices: nothing to download, no key, no admin rights.Sealed. Requires Confidential clearance.

   Confidential
6. No. 129

   mai will not let you switch on voice that would stay silent; it lists each missing piece with a button that fixes it.Sealed. Requires Confidential clearance.

   Confidential
7. No. 130

   Captions are used first when a site has them (seconds, free); otherwise local Whisper, and the transcript says which.Sealed. Requires Confidential clearance.

   Confidential
8. No. 131

   The downloaded video is deleted once the words are out; only text, summary and thumbnail are kept.Sealed. Requires Confidential clearance.

   Confidential
9. No. 132

   Hold-to-talk dictation works in both the desktop and the phone composer.Sealed. Requires Confidential clearance.

   Confidential
10. No. 133

    Spoken replies toggle per session from the 🔊 in the pane header, each session with its own voice.Sealed. Requires Confidential clearance.

    Confidential
11. No. 134

    TikTok photo posts have no audio, so mai reads the text off the slides instead.Sealed. Requires Top secret clearance.

    Top secret
12. No. 135

    Spoken replies never use a cloud TTS key, because that would bill you on every single turn.Sealed. Requires Top secret clearance.

    Top secret
13. No. 136

    Pick the Whisper model size, from base.en up to large-v3-turbo, and give it a list of words to listen for.Sealed. Requires Top secret clearance.

    Top secret
14. No. 137

    The same video pasted twice is recognised however differently the link is spelled.Sealed. Requires Top secret clearance.

    Top secret

Sharing, without anybody reading over your shoulder.

1. No. 138

   A team runs on its members' own machines; mai's servers hold only the licence and a relay that cannot read what it forwards.Sealed. Requires Public clearance.

   Public
2. No. 139

   Admins never see session content on your machine: not prompts, not replies, not files.Sealed. Requires Public clearance.

   Public
3. No. 140

   Teams share house rules, templates, reviewers, knowledge packs, modules and a company look.Sealed. Requires Public clearance.

   Public
4. No. 141

   Monitoring is nothing, titles or content, off by default, and every session shows a pill with the current setting.Sealed. Requires Confidential clearance.

   Confidential
5. No. 142

   The in-app privacy contract explains who sees what, by mechanism, written to survive a works-council review.Sealed. Requires Confidential clearance.

   Confidential
6. No. 143

   Join with a key, an invite line, your mai user ID, or company SSO (Entra ID, Okta, Google Workspace).Sealed. Requires Confidential clearance.

   Confidential
7. No. 144

   SCIM provisioning: assigning mai to someone reserves a seat, and never exceeds the seats you paid for.Sealed. Requires Confidential clearance.

   Confidential
8. No. 145

   An admin's change reaches every member within about a minute, with no publish step.Sealed. Requires Confidential clearance.

   Confidential
9. No. 146

   Sessions must ask to join team chat: Allow for 4 hours, Always, or Refuse.Sealed. Requires Confidential clearance.

   Confidential
10. No. 147

    If a team licence lapses, team features stop, but sessions, history and exports keep working.Sealed. Requires Confidential clearance.

    Confidential
11. No. 148

    The company cockpit maps your repos, with a 12-month activity heatmap and owners, and opens sessions that already know the estate.Sealed. Requires Confidential clearance.

    Confidential
12. No. 149

    A team can run its own relay inside its own network.Sealed. Requires Confidential clearance.

    Confidential
13. No. 150

    Share one session watch-only or let someone drive, with a single mai peers add line.Sealed. Requires Confidential clearance.

    Confidential
14. No. 151

    A read-only workspace share link: nothing a viewer proposes reaches a session until you approve it.Sealed. Requires Confidential clearance.

    Confidential
15. No. 152

    Profiles are fenced by the sandbox, not a filter: each has its own state, Claude login and tmux server.Sealed. Requires Confidential clearance.

    Confidential
16. No. 153

    Pair a phone by scanning one QR code and comparing five words on both screens.Sealed. Requires Confidential clearance.

    Confidential
17. No. 154

    An iPhone with nothing installed: a passkey becomes the device identity and mai runs over an end-to-end encrypted tunnel.Sealed. Requires Confidential clearance.

    Confidential
18. No. 155

    Each device gets its own revocable key, optionally read-only, without signing anything else out.Sealed. Requires Confidential clearance.

    Confidential
19. No. 156

    One click publishes mai on your Tailscale tailnet, and the phone reaches it directly with no relay in the path.Sealed. Requires Confidential clearance.

    Confidential
20. No. 157

    The relay tunnel is Noise IK over X25519, ChaCha20-Poly1305 and BLAKE2s.Sealed. Requires Top secret clearance.

    Top secret
21. No. 158

    Team module downloads are checked against what the team signed; anything else is refused.Sealed. Requires Top secret clearance.

    Top secret
22. No. 159

    Retention is Forever, 1 year, 90 or 30 days, with a week's notice before anything is deleted.Sealed. Requires Top secret clearance.

    Top secret
23. No. 160

    Linked machines can offer each other tools, skills and knowledge packs.Sealed. Requires Top secret clearance.

    Top secret

This appendix was not requested by management.

1. No. 161

   A small animated pet ships switched on, living in its own space at the bottom of the sidebar.Sealed. Requires Public clearance.

   Public
2. No. 162

   When a session is blocked, the pet walks over, points, and offers Approve, Deny, Show me or Not now.Sealed. Requires Public clearance.

   Public
3. No. 163

   Terrain mode: the pet walks along pane headers, climbs walls, hangs from ceilings and jumps between ledges.Sealed. Requires Confidential clearance.

   Confidential
4. No. 164

   Throw the pet and it flies with real physics, bounces about twice, then skids to a stop.Sealed. Requires Confidential clearance.

   Confidential
5. No. 165

   The 3D button turns the pet space into a little room with a vanishing-point floor; the pet grows as it walks toward you.Sealed. Requires Confidential clearance.

   Confidential
6. No. 166

   The pet's pose follows what mai is doing: thinking means work, napping means sleep, watchdog duty means watch.Sealed. Requires Confidential clearance.

   Confidential
7. No. 167

   Robo and Classic are built in, plus the CC0 mascots Bloop (a slime) and Nimbus (a ghost).Sealed. Requires Confidential clearance.

   Confidential
8. No. 168

   Drop in a .vrm avatar and it becomes a fully procedural 3D desk pet.Sealed. Requires Confidential clearance.

   Confidential
9. No. 169

   Creator builds a theme, icon pack, chiptune sound pack, pixel pet, VTuber pet or module with you, guided by AI.Sealed. Requires Confidential clearance.

   Confidential
10. No. 170

    Game panels: Pixel Agents shows every session as a pixel character in an office; Token Tycoon and a Pixel Tamagotchi too.Sealed. Requires Confidential clearance.

    Confidential
11. No. 171

    Roam mode lets the pet treat the whole window as its world.Sealed. Requires Confidential clearance.

    Confidential
12. No. 172

    The Hive board's other scene is a hand-drawn meadow with comb, queen and foraging bees.Sealed. Requires Confidential clearance.

    Confidential
13. No. 173

    Muting the pet means "don't talk at me", not "don't answer me": it still replies when you talk to it.Sealed. Requires Top secret clearance.

    Top secret
14. No. 174

    Import a Shimeji mascot as a mai pet in one command.Sealed. Requires Top secret clearance.

    Top secret
15. No. 175

    Sound packs are synthesized note data, not audio files.Sealed. Requires Top secret clearance.

    Top secret
16. No. 176

    Modules can supply their own working words for the status bar ("Titrating · 0:12").Sealed. Requires Top secret clearance.

    Top secret
17. No. 177

    The pet resizes from 50% to 400%.Sealed. Requires Top secret clearance.

    Top secret

Supported equipment and how to requisition it.

1. No. 178

   Runs on Linux, macOS 14+, Windows and WSL2.Sealed. Requires Public clearance.

   Public
2. No. 179

   One line installs mai plus Claude Code: curl -fsSL https://usemai.ai/install.sh | shSealed. Requires Public clearance.

   Public
3. No. 180

   There is a signed apt repository: apt install mai, upgraded with the rest of your system.Sealed. Requires Public clearance.

   Public
4. No. 181

   Native macOS builds for Apple Silicon and Intel; a setup wizard on Windows that also offers to install Claude Code.Sealed. Requires Public clearance.

   Public
5. No. 182

   A Docker image, in which mai reaches only the folders you mount.Sealed. Requires Confidential clearance.

   Confidential
6. No. 183

   Any glibc 2.31+ distro on x86_64 or aarch64: Ubuntu 20.04+, Debian 11+, Fedora, Arch.Sealed. Requires Confidential clearance.

   Confidential
7. No. 184

   Native Windows terminal tabs, no WSL needed: PowerShell, PowerShell 7, cmd, Git Bash, or WSL if you want it.Sealed. Requires Confidential clearance.

   Confidential
8. No. 185

   mai update verifies the signature, swaps the binary atomically, and --rollback restores the previous one.Sealed. Requires Confidential clearance.

   Confidential
9. No. 186

   After an update, "What's new" shows every release since yours, once, from a changelog built into the binary.Sealed. Requires Confidential clearance.

   Confidential
10. No. 187

    Runs as a background service (systemd, launchd or Task Scheduler), so restarts do not kill sessions.Sealed. Requires Confidential clearance.

    Confidential
11. No. 188

    Choose the stable or the edge release channel.Sealed. Requires Confidential clearance.

    Confidential
12. No. 189

    mai export bundles your configuration into one .tar.gz; mai import validates every entry before extracting it.Sealed. Requires Confidential clearance.

    Confidential
13. No. 190

    Opt-in cloud backup of settings, pipelines, reviewers, templates, notes and Brain; a restore only ever merges.Sealed. Requires Confidential clearance.

    Confidential
14. No. 191

    The Windows tray app opens mai in a chromeless WebView2 window.Sealed. Requires Confidential clearance.

    Confidential
15. No. 192

    The licence check is signed and works fully offline, with 14 days of grace past expiry.Sealed. Requires Top secret clearance.

    Top secret
16. No. 193

    No tmux? The new-session dialog offers a streamed one-click install through brew, apt, dnf, pacman or apk.Sealed. Requires Top secret clearance.

    Top secret
17. No. 194

    mai doctor runs a full self-check of the install and says what is wrong.Sealed. Requires Top secret clearance.

    Top secret

Every action is a CLI verb, an MCP tool and an API call.

1. No. 195

   mai mcp exposes session control as an MCP server that any MCP host can call.Sealed. Requires Public clearance.

   Public
2. No. 196

   The bundled mai-sessions tool lets any session create, prompt, wait on, read and kill other sessions.Sealed. Requires Public clearance.

   Public
3. No. 197

   mai notify sends alerts to Discord, Slack, Telegram, ntfy, Pushover, Matrix, email and more.Sealed. Requires Public clearance.

   Public
4. No. 198

   Answer Approve or Deny straight from the notification, without opening the session.Sealed. Requires Public clearance.

   Public
5. No. 199

   The public Sessions API: create, list, send, read, wait, fork and kill, plus a live event stream.Sealed. Requires Confidential clearance.

   Confidential
6. No. 200

   35+ built-in MCP tools: sessions, todos, Brain, notes, review, keyring, search, speak, open in editor.Sealed. Requires Confidential clearance.

   Confidential
7. No. 201

   spawn_subagent chains create, prompt, wait, read and kill in one call, so nobody forgets the cleanup.Sealed. Requires Confidential clearance.

   Confidential
8. No. 202

   mai session wait --for idle blocks until a session is ready; send, wait, read is the whole loop.Sealed. Requires Confidential clearance.

   Confidential
9. No. 203

   Turn any shell command into a tool: a JSON schema in, arguments on stdin, stdout returned.Sealed. Requires Confidential clearance.

   Confidential
10. No. 204

    One-click recommended MCP servers: GitHub, Filesystem, Postgres, Brave Search, Playwright, Context7.Sealed. Requires Confidential clearance.

    Confidential
11. No. 205

    Outbound webhooks are HMAC-signed with GitHub's sha256 scheme and can be scoped to one project.Sealed. Requires Confidential clearance.

    Confidential
12. No. 206

    Pipelines run multi-stage prompts on a schedule or a webhook; fan-out is capped at 8 sessions unless you widen it.Sealed. Requires Confidential clearance.

    Confidential
13. No. 207

    Talk to your sessions from Telegram, and get Approve and Deny cards there when one blocks.Sealed. Requires Confidential clearance.

    Confidential
14. No. 208

    Each event goes to exactly one place (in the app, the OS, or a push) depending on whether you are looking.Sealed. Requires Confidential clearance.

    Confidential
15. No. 209

    Modules speak plain newline-delimited JSON-RPC over stdio, with no SDK, and mai ext scaffold writes a starter.Sealed. Requires Confidential clearance.

    Confidential
16. No. 210

    The store carries themes, icon packs, fonts, modules, pet models, tools, sound packs and MCP servers.Sealed. Requires Confidential clearance.

    Confidential
17. No. 211

    Skills live in mai's own store and cost nothing until a session picks one, for Claude and Codex alike.Sealed. Requires Confidential clearance.

    Confidential
18. No. 212

    mai file share mints a short, revocable link that renders markdown, images, PDF and audio inline.Sealed. Requires Confidential clearance.

    Confidential
19. No. 213

    Sessions can answer with real UI: buttons, multiple-choice questions and runnable command cards.Sealed. Requires Confidential clearance.

    Confidential
20. No. 214

    mai events streams one JSON line per session state change, so scripts never poll.Sealed. Requires Confidential clearance.

    Confidential
21. No. 215

    mai tools budget measures what your tool definitions cost in tokens and names the 25 most expensive.Sealed. Requires Top secret clearance.

    Top secret
22. No. 216

    mai tools defer keeps MCP tool definitions out of the prompt and loads each only when it is needed.Sealed. Requires Top secret clearance.

    Top secret
23. No. 217

    mai session current tells an agent whether it is inside mai and what its own id is, so it never kills itself.Sealed. Requires Top secret clearance.

    Top secret
24. No. 218

    A notification rewrites itself to "Handled" once the session stops waiting.Sealed. Requires Top secret clearance.

    Top secret
25. No. 219

    mai skills tame narrows an over-eager skill's trigger and leaves its body byte-identical.Sealed. Requires Top secret clearance.

    Top secret

What one session learns, the office keeps.

1. No. 220

   Global search (Ctrl+Shift+P) covers sessions, projects, notes, Brain, hive tasks, tools, skills, settings and conversations.Sealed. Requires Public clearance.

   Public
2. No. 221

   The Assistant is a long-lived session that drives mai itself: it opens sessions, lays out workspaces, finds old chats and fixes things.Sealed. Requires Public clearance.

   Public
3. No. 222

   What you teach one session, every session knows: corrections and conventions outlive the conversation.Sealed. Requires Public clearance.

   Public
4. No. 223

   Brain entries ride along on every prompt or surface only on search, and a budget view ranks what each prompt pays for.Sealed. Requires Confidential clearance.

   Confidential
5. No. 224

   Sessions search the Brain over MCP, scoped to global plus the current project, and can add entries of their own.Sealed. Requires Confidential clearance.

   Confidential
6. No. 225

   Point Brain at markdown folders where they are, including Claude Code's own memory directory.Sealed. Requires Confidential clearance.

   Confidential
7. No. 226

   Memory packs publish Brain entries as a git repo that teammates subscribe to and sync.Sealed. Requires Confidential clearance.

   Confidential
8. No. 227

   Chronicle keeps a durable copy of every AI conversation across harnesses, safe from the tools' own pruning.Sealed. Requires Confidential clearance.

   Confidential
9. No. 228

   mai brain train runs a guided interview that turns what you know into entries.Sealed. Requires Confidential clearance.

   Confidential
10. No. 229

    Deep search scans every transcript and git-greps your local repos, streaming results in as it goes.Sealed. Requires Confidential clearance.

    Confidential
11. No. 230

    mai probe bundles many reads (files, grep, glob, ls) into one call, which makes sessions cheaper.Sealed. Requires Confidential clearance.

    Confidential
12. No. 231

    Notes, global or per project, are readable by any session, and edits from two devices merge by themselves.Sealed. Requires Confidential clearance.

    Confidential
13. No. 232

    Chronicle protects history with hardlinks: zero extra disk, and pruning only removes the vendor's copy.Sealed. Requires Top secret clearance.

    Top secret
14. No. 233

    If a live transcript ever comes up shorter than Chronicle's copy, Chronicle keeps its copy and marks the other diverged.Sealed. Requires Top secret clearance.

    Top secret
15. No. 234

    Infrastructure entries, and labelled connections between them, render as a system map.Sealed. Requires Top secret clearance.

    Top secret
16. No. 235

    After a quiet conversation, the Assistant distils durable facts into its own memory, without duplicates.Sealed. Requires Top secret clearance.

    Top secret
17. No. 236

    mai's whole documentation is compressed into the binary, so mai docs search works with no repo and no network.Sealed. Requires Top secret clearance.

    Top secret

The short appendix.

1. No. 237

   mai Personal: two weeks free, no card required.Sealed. Requires Public clearance.

   Public
2. No. 238

   Then €5 a month for three months, then €20 a month.Sealed. Requires Public clearance.

   Public
3. No. 239

   mai Team: €50 per seat per month, minimum five seats, 50% off the first three months.Sealed. Requires Public clearance.

   Public
4. No. 240

   Every team seat is a full mai: unlimited concurrent sessions and every feature, plus the team layer.Sealed. Requires Confidential clearance.

   Confidential
5. No. 241

   mai bills no AI usage. You bring your own key, subscription or local model.Sealed. Requires Confidential clearance.

   Confidential
6. No. 242

   The Assistant, the pet and your first Hive Queen never count against your session limit.Sealed. Requires Top secret clearance.

   Top secret