AI Chief of Staff (FounderPilot)
Local-first decision-support prototype with encrypted vault and human-in-the-loop approval gates
Context & Core Problem
Founders lose hours consolidating numbers across disparate spreadsheets and chasing overdue operational tasks. Sending proprietary financial records to public cloud AI assistants introduces severe data privacy risks and hallucination hazards.
Architectural Approach & Decisions
Architected a local-first desktop application. Built an encrypted local vault and a deterministic recipe engine with canonical schemas for receivables aging, revenue trends, and cash at risk. Wrapped all agent interactions in strict human-in-the-loop confirmation gates before any external action or mutation.
Verifiable Evidence & Observable Outcomes
Working prototype with 6 verified core features: interactive revenue dashboard with CSV import, rule-based attention alerts, conversational demo chat with saved notes, human approval queues, task completion tracking, and CSV task-list export. Backed by 630 passing unit/integration tests in local recipe engine milestone benchmarks (51 skipped tests in local suite; not production release proof).
Empirical Result
Proved end-to-end local business data ingestion, deterministic formula evaluation, and human-gated workflow automation without transmitting customer financial data to external servers.
System Architecture & Data Flow
Business Data Ingest
Local CSV parsing into encrypted structured vault
Deterministic Engine
Calculates aging, cash at risk, and pipeline health
Attention Triage
Surfaces rule-based alerts and prioritized action queues
Founder Approval
Explicit human sign-off before task execution or export
Technical Architecture Specifications
Transparent Limitations & Governance Boundaries
Personal product build in active development; Google Calendar connection currently halted on an invalid_client configuration; Gemini Live voice integration paused; automated schema-mapping benchmark scored 16.7% accuracy, confirming that autonomous schema mapping is unsafe without human confirmation. 51 test cases remain skipped in the local milestone suite; not yet packaged or code-signed for production distribution.