Human-gated agent execution platform

A platform for AI agents that act on outside websites. The first job I gave it is my own job search: it finds postings, drafts applications from verified facts and fills in forms, and every step that cannot be undone waits for my approval.

  • Python
  • FastAPI
  • Celery
  • Redis
  • Playwright
  • PostgreSQL

How it works

  1. Job feedscompany career pages
  2. Clean and dedupestored in Postgres
  3. GradeAI, rules as backup
  4. Evidenceclaims trace to a profile
  5. Approvala person says yes
  6. Final checksstop if unresolved
  7. Form fillingbrowser, per-site
  8. Follow-upeach message approved
Job postings come from company career pages and public feeds, are cleaned and stored, and are graded by an AI model with a rule-based grader as backup. Claims in any application must trace to a verified profile. The operator approves, a final check stops the run if anything is unresolved, and only then do browser adapters fill in the form. Follow-up messages are approved the same way.

Decisions that matter

  • It starts switched off

    The default is a disarmed mode. Submitting an application, sending a message and making a paid model call never happen implicitly, and anything that cannot be taken back waits for a person.

  • Nothing is invented

    Every claim in a resume or letter has to trace to a verified profile. When an input is missing, the gap stays visible instead of being filled in.

  • Behavior changes show up as diffs

    Hand-written test cases pin the grading rules and the grading prompt, and every prompt lives in one registry with saved snapshots. A change that shifts behavior fails a check and needs a reviewed diff, so nothing drifts quietly.

  • Money is reserved before it is spent

    A paid model call reserves its cost before it is sent and settles the real usage afterwards, so spend is recorded as it happens.

Limits

Built for one person, by design, and run locally rather than hosted. The spend ledger covers the main model calls but does not yet cap every paid path.

Next projectIMC Prosperity 4