A missed call gets a text back from your number within a minute, and the job is booked.

Actions run on always-on cloud servers, your Mac, your iPhone, a browser signed in to your accounts, or rented Android phones.

A website or app with no way to connect to it can be recorded once — the steps a person clicks — and saved as a new action in the Directory that can be run again at any time. The browser uses your own signed-in sessions, not fake accounts.

Executors: Cloudflare Workers and containers, a Mac bridge program, iPhone Shortcuts and App Intents, persistent browser profiles, cloud Android phones and Mac virtual machines. Recording steps and compiling them turns any website into a Directory row callable through dispatch.

Your staff, a spreadsheet, a Shortcut or an AI model all send requests to the same address. It checks your permissions, runs the action and records the result.

Because every request goes through the same address, the same permissions apply whether a request comes from a text message, a link, a spreadsheet cell, a Shortcut, the command line or an AI model, and every request is recorded the same way. One action can be switched off in one place.

Every action is invoked as an HTTP POST of {"key": "<action name>", "args": {…}}. REST, MCP, spreadsheet formulas, text tags and webhooks are different ways of making that same request. Actions run on Cloudflare servers, a Mac, an iPhone, a browser, a virtual machine or a phone.

The webhook is one way in. A text, a spreadsheet cell and an AI model’s tool call are others; each becomes the same request:

{ key, args }

Each row is one thing it can do for you: text from your number, book a slot, create an ad, read a web page. If it is not in the table, it cannot happen.

Each row stores everything needed to run that action: where it runs, what inputs it needs, what it returns, and every way to call it. Changing a setting is typing in a cell. Files added to the system’s folder are added to the table automatically.

One row per action. Each row has one column per way of calling it, and each of those cells holds the complete request (method, address, headers and body) that runs it, followed by the full response from the last run.

Anything outside those limits is refused, and the refusal is recorded.

The limits for this job: read Messages on this number only; approved prices only; book only into open hours. Anything outside them is refused and recorded in the Ledger.

The action runs with a permission issued for this one task: this number, these hours, this price list. It expires when the task is done. Without a permission nothing runs, and the refusal is recorded like any other Ledger entry.

It appears in the conversation the caller already has with you. Your own phone is not touched.

iPhones receive it as iMessage (blue bubbles); other phones receive RCS or SMS. The Ledger entry records which one was used.

One action, one request. The same request can be sent from a link, a spreadsheet cell or an AI model’s tool call, and it writes the same Ledger entry:

{ "key": "IMSG_SEND",
  "args": ["the caller’s number", "Hi, thanks for calling…", "auto"] }

The calendar accepts only hours you marked as open.

Reading the reply, offering times, writing the calendar entry and sending the confirmation are separate actions. Each one is checked against the permissions and each one is recorded.

Each is its own { key, args } request through the same dispatch address. The calendar write carries its limit: open hours only.

Every message, action, AI answer and refusal is recorded and never overwritten. To see what happened, you read it.

Each entry stores the full request and the full response. A later change to any entry shows up. Refusals are recorded like completed requests.

Every payload in or out is a Ledger row. Each action appends one row containing a SHA-256 hash of the previous row; nothing is updated in place. An action counts as working only when the declared surface itself ran and five things are stored for that run: why it ran, the exact request written before it ran, the confirmation, the exact response, and the record.

Nobody types into it. It fills in from the record.

Reports are spreadsheet cells, one row per day, not screenshots. The spreadsheet is yours; if you stop using the system, it stays with you.

Each day’s row is recalculated from that day’s Ledger entries. The spreadsheet is one more way to read the same records; nothing in it is typed by hand.

The Console app on iPhone, iPad and Mac shows every action, the record and your AI agents, and lets you message them.

The Ledger opens in tabs: conversations, sessions, changes, events, tasks, traffic, AI models, actions and analysis. Every entry opens to its full content.

The app is a view of the same data: the Directory, the Ledger, the connected agents and the terminals. It reads the system; it does not keep a separate copy.