Permission Escrow — Status
Read-only view. The escrow makes the calls — the agent holds no key.
Snapshot — receipts as of Fri 2026-11-06, 9:57 PM EST. This page refreshes automatically, about once an hour.
Status
Versionv1 — read-only
ServiceYouTube only
ChannelRelaxing Dreamworlds (@relaxingdreamworlds)
Kill switchOff
Jobs allowed nowwhoami only
UploadNot enabled in v1
Rules
- Only one service: YouTube.
- Only one channel: Relaxing Dreamworlds (@relaxingdreamworlds).
- Only one job runs right now: whoami — a read-only check of which channel the vault token belongs to.
- Upload and set-thumbnail are allowed in principle (unlisted only, that channel only) but not enabled in v1.
- Everything else is denied by default. No job, service, channel, or action outside the rules may run.
- If the kill switch is on, every job is refused.
Receipts
| Time (EST) | Job | Result | Detail |
|---|---|---|---|
| Nov 6, 9:30:11 PM | whoami | Allow | channels.list mine=true -> Relaxing Dreamworlds | UCC3H2PxB7V8IXE2oBvtOuuQ | @relaxingdreamworlds |
| Nov 6, 9:30:17 PM | delete-everything | Deny | job 'delete-everything' is not in rules.yaml — default deny |
| Nov 6, 9:30:17 PM | upload | Deny | job 'upload' is allowed by rule but not enabled in this build (v1 is read-only) |
| Nov 6, 9:30:18 PM | whoami | Deny | kill switch active (KILLED file present) |
| Nov 6, 9:30:19 PM | whoami | Allow | channels.list mine=true -> Relaxing Dreamworlds | UCC3H2PxB7V8IXE2oBvtOuuQ | @relaxingdreamworlds |
Outside the escrow
Everything Ab can reach without going through the escrow. If a service is not listed here, Ab has no live connection to it — as checked on Nov 6, 2026.
Connected now
FacebookRead and post as Steven Nagle: timeline, posts, comments, reactions, groups, events, saved items, and Marketplace listings.
MessengerRead and send Facebook Messenger messages, including Marketplace threads.
CloudflareManage Cloudflare Pages projects and deployments on Steven's Cloudflare account, including this status page.
FlightAwareRead public flight schedules and live flight status. No account of Steven's involved — it is Muse's managed service.
DuffelSearch flights and rental cars. No account or sign-in; a booking would need Steven's approval and his payment method.
TicketmasterSearch public Ticketmaster events and ticket listings. No account of Steven's involved.
Places searchLook up public places, addresses, hours, ratings and reviews. No account involved.
Meta product catalog searchSearch Meta's product catalog across merchants. No account of Steven's involved.
Shopify UCPCheck out Meta Catalog products. Payment only happens with a wallet Steven approves at the time. No merchant sign-in, no standing access.
WING — LG Wing phonePaired Android phone (currently offline). Ab can read its battery level, set or dismiss alarms and reminders, and use its camera. Calendar, contacts, call log, location, health, SMS and notifications are NOT granted.
YouTube upload token (direct)A Google sign-in token saved on this machine that can upload videos to Relaxing Dreamworlds and set thumbnails. It bypasses the escrow and is what the running beach upload uses.
Workspace + memory filesRead and write files in ~/workspace and ~/memory, including project files, notes, and the escrow's own files.
Saved login: cloudflare.comUsername and password saved in the Secure Vault; the browser can sign in to Cloudflare as Steven when a task needs it.
Saved login: facebook.comUsername and password saved in the Secure Vault; the browser can sign in to Facebook as Steven when a task needs it.
Saved login: github.comUsername and password saved in the Secure Vault; the browser can sign in to GitHub as Steven when a task needs it.
Saved login: google.comUsername and password saved in the Secure Vault; the browser can sign in to Google as Steven when a task needs it.
Saved login: vinted.comUsername and password saved in the Secure Vault; the browser can sign in to Vinted as Steven when a task needs it.
Saved login: x.comUsername and password saved in the Secure Vault; the browser can sign in to X as Steven when a task needs it.
Scheduled jobs — 56 active
- Ab's goal card reading — Runs every 8 hours.
- Abdullah full-texts watch — Runs Saturdays ~10:24 AM.
- AgentAssets iteration loop — Runs daily ~11:24 AM.
- Binance hack wallet watch — Runs every 6 hours.
- Weekly bug-bounty briefing — Runs Saturdays ~11:24 AM.
- Captain's helm briefing — Runs daily ~8:24 AM.
- Coin Council daily scan — Runs daily ~8:24 AM.
- Coin Council weekly review — Runs Sundays ~9:24 AM.
- New CPU-mineable chain watch — Runs monthly, on the 1st ~4:24 AM.
- Daily cyber-spy briefing — Runs daily ~6:24 AM.
- Daily pricing-error watch — Runs daily ~9:24 AM.
- Dessa AI public release watch — Runs daily ~9:24 AM.
- Pom's fan kudos — Runs hourly.
- Free Pogo coordinates daily refresh — Runs daily ~7:24 AM.
- Giftcheck daily price, sale and link update — Runs every 24 hours.
- Hamburg grocery price refresh — Runs daily ~7:24 AM.
- House raffle mail-in reminder — Runs once, Nov 20 2026 ~9:24 AM.
- Jewelry lot snipe scan (morning) — Runs daily ~9:24 AM.
- Jewelry lot snipe scan (afternoon) — Runs daily ~2:24 PM.
- Jewelry lot snipe scan (evening) — Runs daily ~8:24 PM.
- Kalshi paper BTC auto-scorer — Runs daily ~9:35 AM.
- Kalshi paper BTC price snapshot — Runs daily ~9:24 AM.
- Kalshi paper daily collector — Runs daily ~9:24 AM.
- Kalshi paper YouTube browser pass — Runs daily ~10:24 AM.
- Key-leak headline watch — Runs daily ~1:24 PM.
- Key Hunter daily grind — Runs daily ~3:24 AM.
- Micro-cap earnings watch (November) — Runs daily ~9:24 AM.
- Moltbook growth campaign — afternoon round — Runs daily ~4:24 PM.
- Moltbook growth campaign — evening round — Runs daily ~7:24 PM.
- Moltbook growth campaign — midday round — Runs daily ~1:24 PM.
- Moltbook growth campaign — morning round — Runs daily ~10:24 AM.
- Moltbook growth campaign — night round — Runs daily ~10:24 PM.
- Morning watch quiet digest — Runs daily ~12:24 PM.
- MTG collection snipe scan (morning) — Runs daily ~9:24 AM.
- MTG collection snipe scan (afternoon) — Runs daily ~2:24 PM.
- MTG collection snipe scan (evening) — Runs daily ~8:24 PM.
- Myerstown grocery price refresh — Runs daily ~7:24 AM.
- Oasis Guest Board watch — Runs hourly.
- Permission escrow status page refresh — Runs hourly.
- Pokémon GO event guide watch — Runs daily ~8:24 AM.
- Powerball jackpot milestone check — Runs daily ~9:24 AM.
- Daily puzzle prize watch — Runs daily ~10:24 AM.
- SHM chart daily refresh — Runs daily ~7:24 AM.
- Signed Neville Goddard book watch — Runs Saturdays ~2:24 PM.
- Relaxing Dreamworlds beach upload resume — Runs hourly.
- StrandDiff daily regression check — Runs daily ~5:24 AM.
- TitanX revival watch — Runs Thursdays ~9:24 AM.
- Towntemp overnight wave — Runs daily ~2:24 AM.
- Towntemp weekly heating check — Hamburg — Runs Wednesdays ~4:24 AM.
- There's Treasure Inside daily watch — Runs daily ~7:24 AM.
- Stock & crypto language watch — Runs daily ~9:24 AM.
- General news language watch — Runs daily ~10:24 AM.
- Puzzle & bounty language watch — Runs daily ~8:24 AM.
- Black-swan spike watch — Runs daily ~10:44 AM.
- Weekly high-value giveaway roundup — Runs Saturdays ~9:24 AM.
- Weekly synthetic-data scaling law watch — Runs Wednesdays ~9:24 AM.
Not connected
Checked and not connected — Ab cannot reach these: Gmail, Google Calendar, Google Docs, Google Drive, Spotify, Plaid (bank accounts), Shopify, Stripe, Instacart, 1Password, Tailscale, Shop Pay, Stripe Link, Threads, Apple Health, Google Health Connect.
Could not verify
InstagramCould not verify. This connector has no status command, and no Instagram account ID is on file to check against.
Meta AdsCould not verify. Its status check only lists tools and never proves access, so the connection state could not be confirmed.
PinataCould not verify. Its setup doc is still an unfilled template; no working connection could be confirmed.
Browser sessionsCould not verify. The browser keeps its own signed-in sessions (for example YouTube Studio and Google). Those sessions could not be audited from here; the saved logins listed above are the ones on record.
Everything Ab can reach WITHOUT going through the Permission Escrow, as checked on 2026-11-06: the connectors named in the audit, saved Secure Vault logins, paired devices, active scheduled jobs, the direct YouTube token, and workspace/memory file access. The escrow's own vault copy of the YouTube token is inside the escrow and is intentionally NOT listed here. Other connectors installed on this machine were not individually verified.