- Where it runs
- On its own Windows machine at your company, under its own RFMS seat and key. Screen control runs only on that seat; it never takes over a person’s desktop.
- What it needs
- Its own Windows login, its own RFMS login and API key (the exact RFMS permissions for its seat are confirmed during the diagnosis), and a read-only login for each builder portal you turn on. You can revoke any of them at any time, and it stops.
- What it can write
- Only the write types you turn on, one at a time: bills, bookings, cash receipts, supplier invoices, supplier payment records and schedule dates.
- Never given
- Bank logins, card numbers or the right to change supplier bank details. It cannot move money. We set up its RFMS seat with you so it cannot delete records or close a period, where RFMS permissions allow.
- Approvals
- Bill and undo runs wait on an approval card that checks the role, as a guard against mistakes. It does not send email, commit in builder portals or close a period. Approval cards on every write type are being built.Practice dataIn build
- Audit log
- Each run writes one audit row per write and a read-back line; the console above shows them. A daily log file for your controller (time, order, field, before, after, read-back, approver) comes later.Practice dataRoadmap
- Stop
- One Stop command shuts it down on its machine. Revoking its RFMS key stops it for good.Practice data
- When RFMS changes
- Built to stop and tell a person when a screen or a field does not match what it expects. It does not guess. We aim to adapt within 5 business days.In build
- Open conversation
- The board’s questions (bill-ready, A/R, A/P, back charges and this week’s schedule) are answered by code with no model call. Open conversation uses a model under your own Anthropic account and stays off until you turn it on. It is not offered on production machines until its permissions are tightened.In build