What’s wrong with it, first.

What is not done yet

• An application you can install

  Not yet. The test build goes out October 10.

  missing

  There is no finished application to download and double-click, and signing up today does not hand anybody an app. The test build on the Download page is an installer kit for invited offices: it builds the app on your own Mac, and it has not yet been run on one. Everyone who signs up by October 4 gets it on October 10.

• A notarized Developer ID build

  Not yet. The signed installer does not exist.

  missing

  Reading the accessibility tree cannot be sandboxed, so the Mac App Store is closed to it and Developer ID with notarization is the only route onto an employee’s Mac. That needs a paid Apple Developer account. It is not an engineering problem and it is not solved.

• The hands still waiting for a signature

  4 of 5. The registry refuses to load a hand no human has approved.

  missing

  A person read desk.collect on 13 September 2026, typed its id back and signed it, so it runs: it is the safest of them, reversible, asks nothing, and sends nothing off this Mac. The other 4 have not been read by anybody, so the registry refuses to load them and they print the field they refused on. That is the gate working in both directions rather than only in the one that flatters us — and the remaining 4 are a reading job nobody has been staffed for, not a feature nobody has built.

• A model that reasons about the day

  No. It counts. Switches, returns, minutes — then it names one.

  missing

  No model is in any of these paths. Classification is a heuristic scoring 25 right and 3 wrong on a 28-row labelled fixture, and where it is not sure the task type reads unclassified at confidence zero on purpose. That is deliberate — a frontier model got 118 of 270 rows wrong on the sibling project’s labelled set where the heuristic got 13 — but it means the reasoning tier is specified, priced and unbuilt.

• An administrator’s console

  No. There is no account and no team view.

  missing

  There is no fleet deployment, no MDM profile, no seat assignment screen and no billing portal, so the honest description of a sale is still a spreadsheet. Two of the promises underneath it did stop being contracts: an administrator cannot put somebody on a seat — enrolment turns on who is asking, and the database refuses an enrolled seat whose invitation was never spent — and an administrator can neither grant nor cancel the confirmation an employee gives before anything acts. Those are mechanisms. The console is not.

• A measurement that the hours are there

  No. That is what the fourteen-day audit is for.

  missing

  The case for it is 1.7 hours a month of somebody's time, and nobody has measured whether a thing that watches all day finds them. Not on one person, not for one month. The number has never been observed. Nobody should count on those hours before somebody has run it for a month.

• An independent privacy review

  Not yet.

  missing

  Nobody outside the project has read the probe, the redactor or the serializer. Everything in the trust section is a mechanism you can make us run in front of you, not a review somebody else has signed.

• Live payments

  Off. It is free on your own Claude or ChatGPT plan.

  missing

  Checkout is not connected on this deployment — no Stripe key is set, so the deposit button opens no payment page and asks for no card. Taking real money needs an account this project does not have yet. The switch is one environment variable and it has not been thrown.