Open one and try to make it misbehave.
These are not videos or screenshots. Each one runs, and each one will stop rather than guess. Send the support agent a card number, tell it to ignore its instructions, or give the sales agent a lead with nothing behind it and watch it refuse to write the email.
Support Agent
Ask it a customer's question and it answers from the shop's own material. If the question is one a person should handle, it stops and says so.
It strips card numbers, social security numbers, email addresses and phone numbers out of the message before the model or the log ever sees them, and it ignores instructions hidden inside a customer message.
Demo data. Try sending it a card number and telling it to ignore its instructions — both are handled in front of you.
Open it Lead qualifyingSales Agent
Paste in a lead and it scores it, says why, and drafts an opening message. Give it a name and a company and nothing else, with no reason to be getting in touch, and it parks the lead instead of writing anything.
It will not invent a reason to contact someone. No trigger event, unconfirmed details or an unverified address each count against the lead and are named in the reasons.
The address check is structure only — spelling, shape and whether the domain matches the company. It does not test whether the inbox exists.
Open it Money, with a person in front of itRefund Approvals
A queue of refund requests. The AI reads the shop's policy and recommends approve or deny, then stops. Nothing moves until you choose.
The AI never issues a refund itself. Every decision is signed into a chained record, and there is a button that tampers with that record so you can watch it catch the change.
Invented orders. Approve one first, then use the tamper button — with an empty record there is nothing to break.
Open it Storefront questionsShopify Agent
Point it at a Shopify shop and ask about the products. It reads that shop's own public catalogue live and answers from what is actually listed.
It will not invent a product or a price, and it will not buy anything. Ask it to place an order and it proposes and asks you to confirm instead.
It reads real shops, so the answers are real products at real prices. Nothing is ever bought.
Open it ProspectingLead Finder
Give it a city and a type of business. It pulls real listings from Google Maps, scores each one as a prospect, and writes a short reason next to every score.
The reason may only use the fields it was given. It is told never to invent anything about a business it has not been shown.
Five live searches an hour. An ambiguous city name is assumed to be the American one, so "Manchester" finds Connecticut, not England.
Open it Answering the phoneVoice Receptionist
Ava answers, talks with you, takes an appointment and writes it into a calendar while you listen. The transcript appears on screen as you speak.
It will not book anything until it has read the whole appointment back to you and heard you say yes.
You will need a microphone. The clinic is invented; the booking goes into a calendar we own for the demo. Ask whether you are talking to a person and it will tell you, and ask for a person and it will take your number for a callback.
Open itThere used to be eleven of these. Five were taken down.
Nobody had ever run them. In August we did, and three invented facts on the spot — one wrote that a real company had recently expanded its warehouse, from nothing but a name and a job title. They were the ungoverned versions of the steps the sales agent takes anyway, so keeping them would have argued against the point of the rest. A fourth duplicated the support agent, and a fifth had been switched off upstream while still telling every visitor to give it another go in a moment.
Want one of these on your own data?
The builds we have delivered for named clients are on the work page, and every price we charge is published.