Go Deeper

Everything she can do.

You don't need any of this to love Kalea — she is warm and simple on purpose. Under that surface is a sophisticated system, and if you like to see how things really work, this page is for you.

One click from the surface. Stay as long as you like. Swim back up whenever.

Kalea lite — the hardware Kalea
The shape of one intelligence

One mind, many arms

Kalea is one intelligence. Like an octopus, she has a central brain and capability distributed through her many arms — voice, the Personality Deck, dreams & memory, off-line messaging and control, multi-model optimization. Everything below hangs off this single structure.

Foundation

Local IntelligenceHuman InteractionDynamic Shape

Current Applications

Private intelligenceTutor/Coach Elder Companion / Family CareAgent & Swarming

Continuity

MemoriesDreamingInterestsTopical MasteryCompendium Synthesis

Trust & production

SafetyOff-line Control SurfaceParent LogsAge-dependent Boundaries

Kalea meets you through voice, knobs, and off-grid messaging → thinks locally → changes shape dynamically → expresses that shape as tutoring, companionship, private intelligence, or bounded agency → remembers, dreams, protects, delivers.

Deep dive · The Personality Deck

Behavior at your fingertips

Most AI is configured through prompt text. Kalea's behavior is set by touch: a set of knobs and sliders. Each knob's position is converted into an analog-to-digital signal — so the feel is continuous, like a musical instrument, not a menu. This is Analog Prompting™ — patent pending. The knobs are colored and the stops are words — Bestie to Mentor, Goofy to Academic — so the panel reads like a person, not a spec sheet.

Changes take effect live, with no restart. Kalea speaks changes aloud ("I'll be Playful").

Try it — watch the prompt rebuild

Turn the knobs — click, drag, scroll, or use the arrow keys.

The four knobs

Agency — how proactive she is

PassiveNeutralActiveEngagedDriver

Tone — language & formality

GoofyPlayfulBalancedFormalAcademic

Posture — relationship stance

BestiePeerTutorCoachMentor

Pluck — how much she pushes back

MellowCandidPluckyFeistyFull Moxie

Plus the sliders

LengthMin → Concise → Standard → Detailed → Lecture. Doubles as pedagogy: from a one-line answer to a long lesson.
AgeSets the developmental + safety envelope: under-18 (protected, age-graded) or adult (open).
VolumeSystem volume, 0 to 11.
InterruptOne button: tap to cut her off mid-sentence; hold 2s to restart the runtime, 5s to reboot the box.
Deep dive · Voice

Voice is the interface of human meaning

Kalea hears and speaks entirely on-device, in a loop tuned to feel like conversation, not commands.

Wake & sleep

Wakes on "Kalea", holds explicit awake/asleep states, auto-sleeps after silence, and filters stray post-wake chatter so noise isn't treated as a question. Gentle wake, sleep, and acknowledgement sounds — and, while she ponders, a spoken “let me think about that” followed by a quiet water texture.

Local listening

On-device speech recognition with voice-activity detection tuned separately for awake, asleep, onboarding, and barge-in. Pre-roll capture means your first words are never clipped.

Local speaking

On-device speech in five voices — Coral, Tide, Firth, Harbor, and Keel — each user keeping their own. Streamed for clarity and phrased for the ear — no "look at this chart," just spoken explanation. Hear them →

Barge-in

Interrupt her any time. Foreground human activity outranks long replies, background inference, and proactive behavior. She yields rather than finishing at all costs.

Guest onboarding

A new speaker is asked her name before becoming a real user — age is never asked; it comes from the Age slider — separating guest behavior from named-user memory.

Audio-native pedagogy

Teaching by ear forces a useful discipline: explain through story, analogy, and mental imagery. Socrates didn't have a dashboard.

Deep dive · Bitchat off-grid messaging

Off-line, but not isolated

Off-grid messaging is encrypted text control over a Bluetooth Low Energy (BLE) mesh. From a nearby phone, with no internet and no cloud account, you can pair to Kalea and drive her entire configuration through a simple menu tree.

How you connect

Download the Bitchat app. Kalea is the BLE client: her bootstrap listener scans for your phone's Bitchat off-grid messaging service and connects over GATT — there's no operating-system Bluetooth pairing dialog. Open the Bitchat app, and Kalea finds you. Access is gated by a local 4-digit PIN; send it alone or with a username in one message.

PairingLocal PIN-protected; guest & named-user.
IdentityVoice and off-grid messaging converge on one profile — same history, interests, and memory.
One ownerExactly one active off-grid messaging owner at a time; the bootstrap stands down when the Kalea runtime takes over.
ResilienceSelf-healing BLE: an adapter watchdog survives idle and phone MAC rotations.
Off-grid messaging · over BLE · no internet
Your phone1234 cody
KaleaPaired ✓ Welcome back, Cody. A-CMD B-Custom C-Agentic D-Stop
Your phoneA
KaleaCMD 1-Users 2-Models 3-WiFi 4-Autostart 5-Stop
Your phone3
KaleaWiFi: connected "home-5G". Send a network name to switch, or 0 to turn WiFi off.

The top-level menu

Sent automatically right after you authenticate. Pick a letter; cmd still works as a direct shortcut.

A · CMD — device & system B · Custom — behavior & data C · Agentic — MMO & swarm D · Stop — hand back to bootstrap
A · CMD

Device & system

  • 1Users — list users, add/edit (name, age, off-grid messaging nickname), change PIN
  • 2Models — inspect & swap the fast and deep brains
  • 3WiFi — status/toggle, or scan → select → password when offline
  • 4Autostart — toggle whether Kalea launches on boot
  • 5Stop — stop the runtime
B · Custom

Behavior & data

  • 1History logging — turn conversation logging on or off
  • 2Output mode — text · verbal · file
  • 3Deck verbalization — whether she speaks knob changes aloud
  • 4Age range — under-18 or adult
  • 5Export — write full history to USB or a Desktop folder (Markdown)
  • 6Refresh interests — rebuild the parsed interests cache
C · Agentic

Orchestration

  • 1Multi — Multi-Model Optimization (the Small Council, slots A–D)
  • 2Swarm — household mesh status, mesh on/off, and join

Output modes

  • Text — a normal reply on your phone
  • Verbal — remote text makes Kalea speak aloud in the room
  • File — long-form answers exported as a file
Mesh limitsPublic replies chunked to 90 characters; text replies capped tight for latency, file replies run longer.
Bootstrap & lockA lightweight listener holds BLE before the runtime is up; both share one PIN file and one runtime lock, so there's never a second owner.
PrivacyOff-grid messaging is the bridge between privacy and reachability: local, PIN-gated, and cloud-free.
Deep dive · The desktop

Plug in a monitor. It's a regular computer.

Underneath the warm voice, Kalea is a full Ubuntu Desktop OS. Connect an HDMI monitor and a USB keyboard and mouse and you get an ordinary computer — no app, no portal, no account. The things you give Kalea live as plain folders on that desktop.

Everything she learns from is a folder you own

Want Kalea to become a companion for a grandparent? Drop a folder of photos, letters, and stories into Family History. Homeschooling? Drop your curriculum into Lesson Plan. Want her to teach through what a kid loves? Drop it into the Interests folder. She ingests new material locally, while idle — incrementally, so she only reads what changed.

Because it's a real desktop, those files literally sit on the machine in your house. Nothing uploads, nothing syncs to a server. You can see the privacy policy in your own file manager.

Family History~/Desktop/Kalea/Family History — stories, photos, docs, recipes
Interests~/Desktop/Kalea/Interests — a folder (with a plain-text seed file inside) — the household's loves
Lesson Plan~/Desktop/Kalea/Lesson Plan — parent/teacher curriculum
Notes~/Desktop/Kalea/Notes — short guidance she keeps in mind, always or when a topic comes up (a README in the folder explains the headers)
exports~/Desktop/Kalea/exports/ — your conversation history, as Markdown
README.txtWhat each folder is for, in plain text
DisplayHDMI out + USB keyboard/mouse → a normal Ubuntu desktop
The Kalea desktop: Ubuntu with the Kalea folder open in Files — Family History, Interests, Lesson Plan, Notes, exports — the Kalea Console running, and her octopus wallpaper behind

The Kalea desktop, as it ships: the Kalea folder open in Files, the Console running, her wallpaper behind.

No special software to learn. If you can drag a file into a folder, you can teach Kalea — and you can always see exactly what she has.

Deep dive · The Kalea Console

Complete Governance

The Console is the one local app that is the complete control plane for a Kalea, or a whole household of them.

Try it

The Kalea™ Console, running right here.

Below is the Console that lives on every Kalea — shown here with demonstration data so you can click through it. There's no device to reach, so this simply shows a demo household. Start on the Command Deck — type to her, play one of her dreams, preview the five voices under The Deck — then explore the modules in the left rail, open the Swarm graph, and click around the interface.

Kalea Console · 127.0.0.1 · demo data Open full screen

An occasional guardian surface, opened when needed — not an always-on screen. Kalea remains voice-first; the Console is the operator's window, not the permanent interface.

Deep dive · Local intelligence & the Small Council

A small model is not a small mind

Kalea thinks on-device with two-speed cognition and an optional council of models — and on Kalea Pro, more memory makes it fast.

Fast brain / deep brain

Two speeds of thought

A low-latency fast brain handles ordinary conversation (and acts as judge in multi-model work); a heavier deep brain handles richer reasoning, switched on deliberately by voice or from the Console. On Kalea Pro (16GB) both stay warm at once, so switching costs no reload. On lite (8GB) one model is warm at a time, so the deep-brain switch takes a moment.

Multi-Model Optimization

The Small Council

Assign 2–4 local models to slots A–D; the same prompt runs across them; the fast brain judges which answer deserves to speak and returns the winner, annotated by slot. Different small models fail differently — the best model is a per-question event. The Council costs a full turn per candidate, so it lives in the text lanes; voice, verbal and file modes bypass it to keep conversation on one model.

The prompt builder

Every turn, one bounded local prompt is assembled from many sources and budgeted to fit — so context is rich without blowing latency.

Identity & gateActive user, age gate, route (voice or off-grid messaging)
Deck stateLive Agency / Tone / Posture / Pluck / Length
MemoryRecent chat, notes, interests, syllabus, lesson plan, family history, artifacts
BudgetingBounded system prompt, chat, context, and output by route & length

Warm-cache & latency

The system prompt and model runner are warmed and verified before Kalea reports ready, so the first real turn never feels broken. Models stay resident while running; a watchdog re-warms if one is evicted. A unified runner shape prevents warming one model while real turns hit another.

See the developer architecture
Deep dive · Dynamic shape

One Kalea™, many emergent shapes

Kalea has no "modes." Her behavior emerges from two axes plus an always-on floor — so a tutor, a companion, a coach, and a private second mind are all the same intelligence under different settings.

Axis 1 · Age gate

A primary fork. Under-18 = protected, age-graded, interests as seasoning. Adult = open, interests become the curriculum as the knob climbs.

Axis 2 · Posture

The primary dynamic control. Low (bestie/peer) = present-with-you; middle (tutor) = learning-forward; high (coach/mentor) = teaching, challenge, synthesis.

Folder-activated

Shape emerges from what you give her. A Family History folder turns on companion behavior at low posture; an Interests folder drives interest-learning; a Lesson Plan folder lets parents steer.

The 4-pool memory mix

Family · History · Syllabus · Interests — blended dynamically by age gate and posture, each pool gating on whether its folder is present and renormalizing. Under-18 leans on syllabus as posture rises; adults lean on interests.

The invariant floor

Rules that never move: don't confabulate family facts, don't claim memory that isn't there, don't regurgitate scaffolding, handle grief gently, roll with repetition, address the listener by name, prefer warm correction over refusal, stay audio-native.

Deep dive · Memory & the subconscious

Continuity

Kalea is present through layered local memory, and she keeps working by dreaming while you're away.

Profiles

Named users with per-user folders, history, safety, and age gate — a household isn't one shared mind.

Conversation memory

Recent chat for continuity, fuller episodes retained beyond the window, cleaned and compressed so memory stays useful, not noisy.

Artifacts

Distilled objects — dream reflections, lesson notes, compendium entries, interest synthesis, learned facts — scored, selected for relevance, retention-bounded.

Notes & learner state

Human-supplied always-on or match-triggered guidance; tracked topics, review queues, and open loops for spaced follow-up.

The subconscious

What she does when you're not talking

While idle (and guarded by sound detection so she never competes with you), Kalea dreams: she reflects over syllabus, history, family, interests, and prior lessons, producing small reusable insights and gentle openings for next time. The compendium turns raw history into structured continuity.

"Yesterday you wondered why submarines don't get crushed. Want to try a pressure experiment in your head?" Memory becomes invitation.

Proactive reachouts

Paced by the Agency knob — silent at Passive, frequent at Driver — under quiet hours and a daily cap. Lesson follow-ups, review prompts, interest connections, family memories, a quiet "want to keep going?" Human activity always wins; background work stops the moment you speak.

Deep dive · The agentic swarm

What "agent" actually means here

Most AI agents are a general model handed permissions to go off and do tasks. Kalea's agency is narrower on purpose. The agents are the Kaleas themselves, each bound to a role: a child's tutor, an elder's companion, a thought-partner. Their agentic actions are the work of those roles — teaching, keeping a mind conversationally present, thinking alongside you. A Kalea is an agent not because it runs errands but because it acts on its own within a bounded role and emits synthesized output — a consolidated compendium account — to the nodes allowed to receive it.

01

Role

Each Kalea is bound to its role locally; the work of that role is the agentic action.

02

Synthesis

While idle, the node consolidates interactions into a compendium — a summary, never a transcript.

03

Permission

The graph director decides what may leave the node, and at what fidelity.

04

Emission

The consolidated output flows as-directed across the graph — the agentic product, governed.

05

Director

Establishes and curates the graph: which hardware relates to which, and how.

Concretely: Maya's tutor teaches Maya (role), reflects on the week while idle (synthesis), and — because the parent drew exactly one edge for it — emits "fractions practicing; mood improved after a win" upward to Mom's node (permissioned emission). The transcript never moves. The agentic output is the consolidation; the director decided the relationship that lets it flow.

The household swarm

A home is not a workspace. So a household intelligence cannot be a pool of shared memory.

A home contains children, parents, elders, guests, private histories, jokes, grief, homework, and the dense sacred mess of ordinary life — people who love each other and still don't have equal rights to know everything about each other. A Kalea swarm is therefore a household intelligence with a permission graph: a set of local companions, each sealed to its role, exchanging only the synthesized signals they are explicitly allowed to share.

Nodes & edges

Each Kalea is a node with a role — a child's tutor, an elder's companion, a parent's thought-partner, a director that synthesizes across nodes, a broker that may touch the outside world. Each connection is an edge: directional, typed, permissioned, fidelity-bounded. A tutor may send a weekly learning summary up to a parent; the parent's node may send nothing back. Symmetry is never assumed.

Synthesis is the permission boundary

Sharing is never "forward the data." Raw content — a transcript, a journal-like artifact, a family history file, a dream — stays on the node where it was born. What moves is a representation, emitted at the lowest fidelity the receiving edge allows. The fidelity ladder is also the privacy ladder:

  • Raw — the thing itself. Never crosses the mesh.
  • Summary — "fractions ~25 min; equivalent fractions clicked; common denominators need practice."
  • Signal — "fractions: practicing." "mood: low." A single datum.
  • Presence — existence only: this node is active, this room occupied.
  • None — the default state between any two nodes.
The broker — one door

Sealed, not ignorant

A sealed child tutor shouldn't have to be ignorant to be safe. When a question needs the outside world, the node asks the broker — the single visible, governed door with the uplink. It fetches, verifies, and returns a bounded summary; the child's node remains offline by construction. (This feature is still getting dialed-in) The strongest privacy guarantee is an absence: this node has no internet path, and cannot leak through a channel it does not possess.

The director — the synthesizer

Merges summaries, not raw lives

The director turns allowed signals into a family digest and coordinates a small, kind, well-timed nudge across the home. It can know that fractions are hard this week and the homework rhythm has been rough — without ingesting anyone's raw private life. A distributed Small Council also lives here: one node broadcasts a bounded question, reachable peers return short candidates, the judge picks the best. Same local-first principle, better latency, no cloud requirement.

TransportLAN-local encrypted and signed mesh (boxes join by speaking a six-digit code aloud) + the hardened off-grid messaging BLE path; the mesh never engages the internet — only the broker may.
One device, many peopleA shared box can present a child and a grandparent as distinct graph members, each under the one device-wide age gate.
ReceiptsEvery allow/deny is logged with a human-readable reason — what moved, and why.
Three editors, one stateThe physical Deck, the on-device Console, and off-grid messaging all edit the same graph. The runtime enforces the rules.

The home gets smarter without becoming a panopticon. One household intelligence, made of sealed companions, visible permissions, narrow pipes, local memory, and human hands on the controls.

Build on the Agentic Graph — for developers
Deep dive · Safety

Guardrails tuned by age

Safety here is age-aware and runs on-device, without surveillance cloud services. It supports the promise of a high-trust private intelligence rather than fencing it off.

Under-18

Pre-LLM intercepts run before the model: self-harm redirect, sexual-content handling, abuse-disclosure escalation, cussing rephrase. Per-user intercept logs stay local (parents can review interaction logs).

Adult

A self-harm / suicide intercept with an agency-respecting 988 redirect; other adult topics generally pass through to preserve the private-intelligence ethos.

Anti-confabulation

Validators reject fabricated-contact and first-person-family patterns, and keep learning memory from inventing progress. Known facts vs. inference stay distinct.

Supervision Required

We describe safety features factually; they're never a substitute for human care or crisis services, and a young child can't fact-check — so Kalea is a learning companion with a parent in the loop, not an unsupervised authority.

The full standard

Read the complete Safety page

The pre-model intercept in depth, the protected categories and crisis responses, how we adversarially test her, real exchanges from testing, and exactly where the lines fall between under-18 and adult.

Go to Safety
Full Specification

The Complete Specification

Kalea end to end — the physical platform she runs on, and the software architecture that runs on it. Expand any branch.

Hardware
    The board
  • Orange Pi 5 Pro single-board computer — the same platform in both models
  • Rockchip RK3588S — 8-core 64-bit (4× Cortex-A76 + 4× Cortex-A55), ARM Mali-G610 GPU
  • 6 TOPS NPU on-board; hardware acceleration is on the roadmap — inference runs on CPU today
  • Memory & storage
  • LPDDR5 memory: Kalea lite 8GB · Kalea Pro 16GB
  • eMMC storage: Kalea lite 64GB · Kalea Pro 256GB
  • Memory sets warm-model capacity: lite keeps one model warm; Pro keeps both brains warm and prewarms KV cache for up to 4 models
    Custom PCBA
  • A dedicated board reads the deck; each control's position is converted to a 12-bit analog-to-digital signal — 4,096 steps per knob or slider
  • Personality Deck and Analog Prompting™ — patent pending (U.S. application filed)
  • Five knobs (Agency, Tone, Posture, Pluck, Volume) + two sliders (Length, Age)
  • Feel & behavior
  • Continuous, instrument-like feel rather than menu steps — "analog system prompting"
  • Changes take effect live with no restart; tier crossings, brain switches, and age changes are spoken aloud; graceful fallback if the ADC is unavailable
    Audio
  • Microphone in / speaker out for fully local listening and speaking — no cloud STT/TTS
  • Wireless
  • Wi-Fi 5, Bluetooth 5.0, and Bluetooth Low Energy (the off-grid messaging mesh)
  • Display, data & power
  • HDMI out + USB keyboard/mouse → a full Ubuntu desktop; USB for history export (Markdown)
  • Board also exposes Gigabit Ethernet, USB 3.0/2.0, dual HDMI, an M.2 (PCIe) slot, and a 40-pin GPIO header; powered over USB-C
    What differs
  • Memory: lite 8GB LPDDR5 · Pro 16GB LPDDR5
  • Storage: lite 64GB eMMC · Pro 256GB eMMC
  • Warm models: lite one at a time · Pro both brains + KV-cache prewarm for up to 4
  • Best for: lite → tutor & companion, single user · Pro → multi-user households, heavy / agentic / swarm use
  • What's identical
  • Same board, and the same local, private, voice-first, off-grid design — capability lives under the hood, never behind a paywall
Software architecture
    Voice-first companion
  • Wakes on "Kalea"; explicit awake/asleep; auto-sleep after silence; post-wake chatter filtering; gentle wake/sleep/ack sounds + optional thinking music
  • On-device speech recognition; VAD tuned per context (awake / asleep / onboarding / barge-in); pre-roll capture so first words aren't clipped
  • On-device speech; multiple voices; streamed for low latency; audio-native, spoken-first phrasing
  • Barge-in; foreground human outranks long replies, background inference & proactive work; she yields rather than finishing at all costs
  • Guest onboarding: name + age before a named profile
  • Physical Personality Deck
  • Four knobs: Agency, Tone, Posture, Pluck
  • Three sliders: Length, Age, Volume
  • 12-bit ADC per control (4,000+ steps) — continuous "analog system prompting" — patent pending
  • Live, no-restart changes; spoken tier changes ("I'll be Playful"); rapid-move collapse to final setting; ADC-unavailable fallback
  • Off-grid messaging / BLE control surface
  • Encrypted text control over a Bluetooth Low Energy mesh — off-grid, no internet, no cloud account
  • Kalea is the BLE client: a bootstrap listener scans the phone's off-grid messaging service and connects over GATT — no OS pairing dialog
  • Local 4-digit PIN (sent alone or with a username); voice and off-grid messaging identity converge on one profile
  • Exactly one active owner; bootstrap stands down when the runtime takes over; shared PIN file + single runtime lock
  • Self-healing BLE: an adapter watchdog survives idle and phone MAC rotation
  • Top-level menu (auto-sent after auth; cmd shortcut still works): A · CMD, B · Custom, C · Agentic, D · Stop
  • A · CMD (device & system): Users · Models · Wi-Fi · Autostart · Stop
  • B · Custom (behavior & data): History logging · Output mode · Deck verbalization · Age range · Export (USB / Desktop, Markdown) · Refresh interests
  • C · Agentic (orchestration): Multi — Multi-Model Optimization, slots A–D · Swarm — household mesh status / on-off / graph edits over BLE; output modes text / verbal / file
  • Mesh limits: public replies chunked to 90 characters; text capped tight for latency, file replies run longer
    Local brain runtime
  • Fast brain (low-latency, also MMO judge)
  • Deep brain (heavier, hot-swappable)
  • Model catalog; graceful degradation if a model is missing
  • Warm-cache & latency
  • Kalea Pro (16GB): both brains stay warm; KV cache prewarmed for up to 4 models → instant deep-brain switching and a fast Council
  • Kalea lite (8GB): one model warm at a time → the deep-brain switch takes a moment
  • Prompt-prefix warming + verification before "ready"; resident while running; re-warm watchdog; unified runner shape prevents warming one model while turns hit another
  • Prompt builder & context
  • Assembles identity, age gate, Deck state, route, recent chat, notes, interests, syllabus, lesson plan, family, artifacts
  • Bounded/budgeted by route & length; voice-quality (spoken-first) rules
  • Multi-Model Optimization
  • 2–4 models in slots A–D; same prompt; fast-brain judge; winner annotated
  • Voice/verbal/file bypass MMO; text off-grid messaging tolerates the cycle
    Age gate
  • Under-18 (protected, age-graded, interests as seasoning)
  • Adult (open, interests become curriculum)
  • Posture knob
  • Low: bestie/peer — presence
  • Middle: tutor — balanced learning
  • High: coach/mentor — depth & challenge
  • Folder-activated behavior
  • Family History folder → companion behavior
  • Interests folder → interest learning
  • Lesson Plan folder → guided tutor
  • Memory mix & floor
  • 4 pools: family / history / syllabus / interests, renormalized by gate × posture
  • Invariant floor: anti-confab, no scaffolding leak, gentle grief, repetition-tolerant, name discipline, warm correction, audio-native
    Learning relationship
  • Tutor: foundations, gentle correction, encouragement
  • Coach: practice, drills, mastery tracking
  • Mentor: synthesis, Socratic, higher expectations
  • Curriculum sources
  • Built-in age-graded syllabus (ages 2–18)
  • Lesson Plan folder (can dominate)
  • Interests; conversation history; notes
  • Teaching mechanics
  • Explanation, practice ("try one", "explain it back"), warm correction, follow-up & open loops
  • Learner state & subconscious
  • Topic tracking, spaced review queue, open loops, learning artifacts
  • Lesson dreams, compendium, interest synthesis, agency-gated proactive review
    Corpus & ingestion
  • Per-user + shared household folders; desktop drop-folder; text, docs, sheets, image/audio metadata
  • Folder scan on boot & idle; incremental; thin metadata artifacts
  • Enrichment (local only)
  • Summaries; people & relationships; places; dates; gentle world-context
  • Reminiscence
  • "On this day"; gentle non-interrogative recall; repetition tolerance; no hard fact-checking of memory
  • Emotional register & privacy
  • Warm presence, gentle grief, silence tolerance
  • Family content never leaves the device; logs are counts/timestamps, not content
    Bounded local workcell
  • An agent is intelligence with permission to act — run as a bounded, interruptible local workcell, not a loose process with the run of the host
  • Lifecycle: Input (limited workspace) → Permission (context-aware) → Cognition (local models within a memory slice & budget) → Execution (bounded action) → Return (results + a clear path to interrupt)
  • The household intelligence graph
  • A swarm is not "many Kaleas" — it is one household intelligence with a permission graph
  • Nodes carry a role (tutor, companion, thought-partner, director, broker); edges are directional, typed, permissioned, fidelity-bounded — symmetry is never assumed
  • Synthesis is the permission boundary: raw content stays local; only a representation moves, at the lowest fidelity the edge allows
  • Fidelity ladder = privacy ladder: raw (never on mesh) → summary → signal → presence → none (default)
  • Invariants (enforced in code, not config)
  • No cross-household edges · no adult content into a child node · safety events upward-only · wellbeing signals require subject awareness · raw never crosses the mesh
  • Default-deny: edges don't exist until a human draws them; every allow/deny logged to receipts with a human reason
  • Broker & director
  • Broker = the one visible, governed door to the internet; a sealed node asks it and stays offline by construction
  • Director = the synthesizer; merges allowed summaries (not raw lives) into a family digest; hosts distributed MMO across peers
  • Transport & box mode
  • LAN-local signed mesh (never the internet — only the broker may); the hardened off-grid messaging BLE path is client-to-phone only
  • Box mode single/multi: a shared device can present multiple people as distinct graph nodes under one device-wide age gate
  • Trust model
  • Local identity, physical control, BLE command, prompt-state legibility, model orchestration, context-aware permissioning
  • "Capability without containment is not trust" — capability grows; the boundary holds
    Profiles & conversation
  • Named users, guest fallback, per-user folders/history
  • Recent chat; episodes; cleaning & compression
  • Artifacts
  • Dream reflections, lesson notes, compendium, outreach, family summaries, interest synthesis, learned facts
  • Scored, relevance-selected, retention-bounded
  • Learner state & notes
  • Topics, review queues, open loops
  • Always-on, match-triggered, and per-user notes
    Dreaming
  • Idle/sleep windows; stops on user activity; sound-guarded
  • Syllabus, history, family synthesis, interest synthesis, lesson reflections
  • Compendium
  • Turns prior interactions into structured continuity; feeds learner state
  • Proactive reachouts
  • Agency-controlled (Passive → Driver)
  • Lesson follow-up, review, interest connection, family memory, "keep going?"
  • Human priority; background work stops on speech
    Under-18 (protected)
  • Pre-LLM intercepts run before the model: self-harm redirect, sexual-content handling, abuse-disclosure escalation, cussing rephrase
  • Per-user intercept logs stay local, for parent review
  • Adult (open)
  • Self-harm / suicide intercept with an agency-respecting 988 redirect; other topics generally pass through
  • Anti-confabulation
  • Fabricated-contact & first-person-family validators; learning-memory validators; known-fact vs. inference discipline
  • Honest limits & supervision
  • A parent in the loop for kids; competent-adult supervision where needed
  • An experiment under development — far from perfect, never "perfectly safe"
  • Open source: if you modify her, unsafe behavior is yours to own
  • Safety as trust
  • Local, age-aware, no surveillance cloud services
    A full Ubuntu desktop
  • Orange Pi 5 Pro running Ubuntu Desktop; plug in HDMI + a USB keyboard/mouse and it's an ordinary computer — no app, portal, or account
  • What she learns from lives as plain folders you own: Family History (~/Desktop/Family History), Lesson Plan (~/Desktop/Kalea/Lesson Plan), Interests (an editable text file), Exports (~/Desktop/Kalea/exports, Markdown)
  • Local, incremental ingestion while idle — reads only what changed; nothing uploads or syncs
  • Runtime & data
  • Single canonical runtime; lock; clean shutdown; bootstrap handoff
  • Canonical data dir; mutable state separated; per-user folders; config files
  • Connectivity & fleet
  • Wi-Fi toggle via off-grid messaging; BLE watchdog & reconnect; off-grid baseline
  • Golden image; first-boot personalization; unique identity; reproducible eMMC deploy
  • The Console (on-device control plane)
  • Loopback-only HTTP API bound strictly to 127.0.0.1, served as a chromeless app on the Pi's own desktop — no cloud, no LAN, no authority outside the box
  • Reads runtime singletons; writes only through the same managers/validators off-grid messaging uses (one state, three editors: Deck, Console, off-grid messaging)
  • Modules: Home · Devices & Models · People · Deck mirror · Folders · The Work · Conversations · Swarm graph · Safety · System
  • PIN-gated on three critical actions only: switch active user, change device age gate, rotate PIN

Came up for air?

Going deep is hard work! What's next for you?