What AI costs a company, counted from one dated price table: the monthly bill of a mix of seats, API work and own machines with the price of one accepted task; the week's spend from Claude Code's logs, the Team spend report and OpenTelemetry, with idle seats; budget alarms at 50, 80 and 100 per cent; Team against Enterprise; contract rates as a modelPricing block for managed settings; an own GPU machine against renting. It counts and compares - it buys nothing and never asks for a card.
Hand Claude Code something nobody is answering - a refund, a booking, an unanswered request. It keeps the task between sessions, writes the next letter, counts the attempts, and tells you when the call is yours to make.
A decision layer for a company: a repeated small decision (which team gets this message, approve or send back, is it urgent) walks cache, rules, a local model, a cheap cloud model, a strong model and a person, and stops at the first link sure enough (confidence 0.95 by default; two links that agree settle a less sure answer). A person's answer goes into the cache, so it is never asked twice; promote turns decisions the models kept agreeing on into cache entries and suggests rules; bench measures accuracy, what each link decided, how honest the confidences were and the price of one decision against sending everything to one model. Model links are programs the company installs (strands-decider, OpenJev, ollama, claude -p), checked against an output schema; the company policy keeps red data local, admits only zero-retention vendors when asked and stops paid links at the daily budget. It decides and counts - it buys nothing.
A second opinion from a DIFFERENT company's AI, and an honest account of where the two disagreed - because two AIs agreeing is not proof. Works through a free browser chat when no second program is installed.
What may leave the company, and where it may go. Its hooks stop a message, a command, a web request or a tool call that carries a key, a card number (Luhn-checked), an IBAN (mod-97), a national ID number with its check digit, or a list of people's addresses or phone numbers - with the reason in the person's language. Red folders are read only by a model on this computer; profiles for any company, the EU and US defence contractors (no DeepSeek); kimi only in a training folder, grok only on a cleaned copy, agy never with a permission for everything; a permissions.deny block with absolute //paths; a journal that keeps kinds and fingerprints, never the values.
An agent that reads your mailbox: a morning summary of what matters and who waits for your answer, and your Google Alerts and newsletters boiled down by the words you watch. Gmail connector of your Claude subscription, or read-only IMAP with an app password kept in the system keychain. Drafts only - nothing is sent without your yes.