Your key is born here
A fresh 12-word key is generated on the device and stored in the phone's secure storage, locked to this device only. It is never uploaded, never synced, never seen by us — there is no server it could even go to.
Your agent's owner key is born on the phone, lives in the secure enclave, and never touches a server. The permission wall — the caps the chain itself enforces — gets signed by your thumb.
108 MB APK · demo build — shows generated numbers and refuses to sign a real wall, on purpose. More on that below.
Equity and its day's move, the cash / vault split, every position, and the last fifteen decisions — including the refused ones. A trade the wall turned back is part of the record, not something to hide. If the feed drops, the app keeps the last good numbers and says how old they are, instead of pretending.
A fresh 12-word key is generated on the device and stored in the phone's secure storage, locked to this device only. It is never uploaded, never synced, never seen by us — there is no server it could even go to.
The app makes you pass a three-question quiz on your own seed phrase — and nothing persists until you do. Screenshots are blocked while the phrase is up, it's wiped from memory if you background the app, and there is deliberately no copy button: a phrase in your clipboard is a phrase in the cloud.
The phone builds the identical permission wall as the dashboard — same code, same caps, same expiry — checks the account address didn't shift under it, and seals it on-device. Caps presets in the app's own words: the scout, the outlaw, the warlord.
Killed the agent? Lost the machine it ran on? The phone can rebuild your smart account from the seed phrase alone and sweep everything — cash, tokens, even the vault position — back to any wallet you control. The escape hatch works even after the kill switch, because that is what an escape hatch is for.
The current build shows generated numbers — and because a demo that could mint a fundable account would be a demo that lies about real money, the signing path refuses to run in demo builds. Not a greyed-out button: the code throws at the chokepoint, so even a deep link can't reach it. Recovery stays enabled, because blocking the exit is never a safety feature.
The real-data build connects to a merrymen worker — your own self-hosted one, or the hosted service. Your owner key never leaves the phone either way; the most a server ever holds is a capped, revocable session key.
Sideload the APK, meet the band, walk the onboarding with a throwaway key. v0.1.2, 108 MB.
Download the demoNo build yet, and we won't pretend otherwise. Leave an email and you'll hear when there is something real to install — that's the whole promise.
Everything the app talks to is open — read the code, or start with the docs.