A local AI agent manages the server behind this site through a self-built command-line tool. Every request is a single signed JSON line with a nonce and a time window, sent through a restrictive SSH gate — allowed operations, commands and allowed directories live as configuration on the server and can be extended without code changes.
Writing never just goes through: for a service there is a time-limited grant, everything else ends up in an approval queue that opens itself as a panel in the desktop UI (and in the terminal) and logs every decision. Accounts, paths and secrets are strictly separated, backed by more than 350 automated tests on both sides.