the technical bits, for the curious
One gateway, two phone channels on Dial, and a shared core where a booking is confirmed only when the owner says yes. Every rule below is enforced in code and proven by a test.
The customer never sees us. Their agent asks us. The business texts us.
01 · ask
Any MCP client calls request_booking.
02 · route
Darwin agent if one is ready, text if the owner said yes before, otherwise one call.
03 · call once
Dial rings the shop, says it's an AI first, and books mid-call through our tools.
04 · consent
The owner's exact words and the call id are stored. The shop flips to text-enabled.
05 · text forever
Next request: one text. The owner replies Y, N or a time. Confirmed in seconds.
confirm() evidence gate · booking state machine with holds · consent CHECK constraints · append-only event log · replayable SSE · Zod contracts exported as JSON Schema · FakeDial, FakeDarwin, FakeGateway
These are types, constraints and triggers, not prompt guidelines. A test proves each one; 800 run on every push. A model saying "booked" is not evidence. Curse you, Hallucinat-inator!
confirm() can confirm, and only with evidenceA quoted yes on the call, a Y by text, or a rule the owner approved. Nothing else can be expressed.
export function confirm(ctx, bookingId,
evidence: ConfirmationEvidence) {
// "call" | "text" | "rule". A transcript
// alone cannot be expressed here.
const actor = verifyEvidence(ctx, booking, evidence);The database refuses a consent row without the owner's sentence and the call.
CHECK (
(source = 'call' AND call_id IS NOT NULL
AND LENGTH(quoted_sentence) > 0)
OR (source = 'join_text'
AND message_id IS NOT NULL)
)Actor, reason and confidence on every event. Nobody can edit history, including us.
CREATE TRIGGER events_no_update
BEFORE UPDATE ON events
BEGIN
SELECT RAISE(ABORT, 'events are append-only');
END;Checked right before anything that can reach a phone, in the real adapter and the fakes.
export function assertAllowedNumber(number,
allowed = parseAllowedNumbers(env.ALLOWED_NUMBERS)) {
if (!allowed.includes(number))
throw new NumberNotAllowedError(number);
}The rules ask us to mark every mock. The whole product is about only claiming what's true, so here is all of it.
Real
Mocked or not built yet