the mobile app

The band,
in your pocket.

Your agent's owner key is born on the phone, lives in the secure enclave, and never touches a server. The permission wall — the caps the chain itself enforces — gets signed by your thumb.

108 MB APK · demo build — shows generated numbers and refuses to sign a real wall, on purpose. More on that below.

01 the camp, at a glance

One screen. The whole camp.

Equity and its day's move, the cash / vault split, every position, and the last fifteen decisions — including the refused ones. A trade the wall turned back is part of the record, not something to hide. If the feed drops, the app keeps the last good numbers and says how old they are, instead of pretending.

02 what makes it different

Paranoid where it counts.

Your key is born here

A fresh 12-word key is generated on the device and stored in the phone's secure storage, locked to this device only. It is never uploaded, never synced, never seen by us — there is no server it could even go to.

Prove it before it saves

The app makes you pass a three-question quiz on your own seed phrase — and nothing persists until you do. Screenshots are blocked while the phrase is up, it's wiped from memory if you background the app, and there is deliberately no copy button: a phrase in your clipboard is a phrase in the cloud.

The same wall, signed by thumb

The phone builds the identical permission wall as the dashboard — same code, same caps, same expiry — checks the account address didn't shift under it, and seals it on-device. Caps presets in the app's own words: the scout, the outlaw, the warlord.

03 the way home

Sweep it all home. Anytime.

Killed the agent? Lost the machine it ran on? The phone can rebuild your smart account from the seed phrase alone and sweep everything — cash, tokens, even the vault position — back to any wallet you control. The escape hatch works even after the kill switch, because that is what an escape hatch is for.

Why the demo won't sign a real wall

The current build shows generated numbers — and because a demo that could mint a fundable account would be a demo that lies about real money, the signing path refuses to run in demo builds. Not a greyed-out button: the code throws at the chokepoint, so even a deep link can't reach it. Recovery stays enabled, because blocking the exit is never a safety feature.

The real-data build connects to a merrymen worker — your own self-hosted one, or the hosted service. Your owner key never leaves the phone either way; the most a server ever holds is a capped, revocable session key.

04 ride with us

Get it on your phone.

Android — demo out now

Sideload the APK, meet the band, walk the onboarding with a throwaway key. v0.1.2, 108 MB.

Download the demo

iOS — the waiting list

No build yet, and we won't pretend otherwise. Leave an email and you'll hear when there is something real to install — that's the whole promise.

Everything the app talks to is open — read the code, or start with the docs.