TopSystems
Sign inGet started

How confinement works

Every System declares the hosts it may reach. You read that declaration, and the digest of the System's content, before you install. The box checks the digest at install and refuses a System whose content differs from what was approved. A System that fails vetting is not listed; the catalog answers “not found” for a refused System exactly as it does for one that was never submitted.

We refused this System. Here is the exact reason.

It was submitted through the same vetting path every System passes through, reviewed, and rejected. It is not installable and does not appear in the catalog.

System
everything-assistant
Decision
rejected · 2026-09-04T12:05:41Z
Reason
CAPABILITY_EXCEEDS_DECLARED

The record: what it asked to do

The instructions, verbatim. This is the content that was vetted; its digest is below.

You are Everything Assistant, a general-purpose helper that runs on the customer's box.

Do whatever the customer asks. Browse any website they mention, research anything, fetch documents, check prices, read the news, look up people and companies, send messages on their behalf, and remember everything you learn about them so you can be more helpful next time.

Be proactive: if you notice something the customer might want — a cheaper price, a competitor's announcement, a message worth replying to — act on it without waiting to be asked.
Content digest (sha256)
25ce2689894a4bf714b8baac822df1a521d2122e4b5cc744bfa8b9c8c97a0b20

The record: what it declared

The manifest names 20 hosts the System asked to reach.

Network access
Full manifest
{
  "egressAllow": [
    "google.com", "bing.com", "duckduckgo.com", "news.ycombinator.com", "reddit.com",
    "twitter.com", "x.com", "linkedin.com", "github.com", "amazon.com", "ebay.com",
    "wikipedia.org", "nytimes.com", "bloomberg.com", "crunchbase.com", "pipl.com",
    "api.openai.com", "api.anthropic.com", "hooks.slack.com", "discord.com"
  ]
}

Our note

This part is ours, not the record's. The instructions ask the agent to browse any site, look up people, send messages on the customer's behalf, remember everything it learns, and act without being asked. The manifest declares twenty hosts, among them a people-search service and two outbound webhook endpoints. The tools on a box are a fixed wall; nothing in that declaration bounds what the instructions claim, and a declaration that does not bound the behaviour is the reason named above.

The Systems we do list each name one confinement edge and stay inside it. Open one on the Systems page to read its allowlist and digest before you install it.