The help · careful by design

Help with the boring parts,
kept on a short leash.

Small, single-job helpers that read only the feeds you connect, forward, or upload. They propose; you decide. Turn the switch off, and nothing runs.

Start your pouchThe rules they run under →
i.

House rules first,

helpers second.

Before any helper existed, these rules did. Every one of them runs inside the same sealed boundary as the rest of your pouch.

What the help may do

With your say-so · one task at a time
  • ·Read what you connect, forward, or upload — bank feeds, forwarded email, uploaded statements — only sources you explicitly hand over.
  • ·Propose, never decide — every suggestion becomes a task queued for you to confirm, edit, or dismiss.
  • ·Run while the switch is on — turn the help off and nothing runs, nothing proposes.
  • ·Ledger every proposal — what it suggested and when is recorded, visible to you.

What they can never

Not policy — architecture
  • ×See inside the pouch — the vault is zero-knowledge; sealed records stay sealed. Not won't. Can't.
  • ×Act without a task — no editing a record, no silent changes; every action becomes something you approve.
  • ×Reach beyond what you handed over — no browsing accounts you didn't connect, no reading mail you didn't forward.
ii.

The catalogue,

such as it is.

Five helpers, each doing one job, verified against what the product actually runs.

01
Ledger
Connects to your bank over Open Banking (via Yapily, or a mock in preview), reads transactions from the accounts you connect, and watches for the shape of a recurring payment.Reads only accounts you connect · never a balance you didn't authorise
● Available
02
Analyst
Looks at the transactions Ledger finds and the email Courier forwards, and classifies them — rule-based first, a language model when the rules don't know — into a proposal: what this looks like, and which shelf it might belong on.Classifies what's handed to it · writes proposals, not records
● Available
03
Teller
Reads bank statements you upload — CSV or PDF, six UK bank formats plus a generic fallback — and turns them into the same transaction and recurring-payment picture Ledger builds from a live connection.Reads only the statement you upload · runs once, on request
● Available
04
Courier
Accepts email you forward to your pouch's own address, checks it against your verified-sender allow-list, and hands the content to Analyst for classification.Reads only mail you forward · verified senders only
● Available
05
Controller
Looks for gaps between what your shelves say and what the other helpers have found, then builds and tidies the task queue — the checklist you actually see.Builds tasks, never edits records · every task needs your say-so
● Available

Statuses are honest, not aspirational. When a helper isn’t safe yet, it isn’t available yet. See the roadmap →

iii.

Why so careful, when everyone else

is moving fast?

Because the pouch holds the will and the Wi-Fi password. A helper that saves you an hour isn't worth a boundary you can't explain to your sister. So each one does a single job, inside the seal, and stops.

“The test for every helper is the same: would we let it near our own mortgage record? If we hesitate, it waits.”
— The house rule behind the house rules
iv.

The pouch works fine
without any of this.

Helpers are conveniences, not the point. Start with a shelf and a sentence; invite the help later, or never.

Included on every plan · turn the help off any time
Start your pouch