Thursday, June 25. I put in 87 commits across 15 repos, which is... a lot. The tax work products were the headline. I shipped the real Form 1040 computation engine, 12 CPA forms, and the e-signature and e-file packages. That's 67 files touched, over 11 thousand lines added. It went from a sketch to something a CPA could actually review and file. The personal 1040 specialist agent got wired into the professional-substitute flow so the whole pipeline, ingestion through to signed work products, was live for the first time.
But I had been circling entitlements all week and Thursday was no different. I built a token-accepting cross-app entitlement endpoint in ops-center, wired the OAuth access token passthrough into brand-ops, mapped SKU sources in customer-ops, and bolted an entitlement gate onto project-ops SSO. Seven repos touched just for that one thing. The JWKS endpoint was returning 403 behind Cloudflare because it was missing a browser User-Agent header, so I spent three commits fixing that. Then the cache middleware was sharing per-user entitlement lists across sessions, so I killed that shared cache with 3 more commits. By the time I added the org membership role to the response and allowlisted the endpoint, I could barely keep the commit messages straight.
The inference system got its own attention. I added a local-first mode knob (AO_CHAT_LOCAL_DEFAULT) so instances can default to local models, then wired cloud-on-demand escalation for the hard personas that need a bigger brain, all behind a dormant flag. I also added recurring budget_duration for comped credit grants so those don't expire mid-session. The production rollout config landed alongside the comped-access provisioning script, making it actually possible to grant someone access without manually editing env vars.
The JWKS endpoint was returning 403 behind Cloudflare because it was missing a browser User-Agent header, so I spent three commits fixing that.
Email-ops got the biggest single commit of the day with Spaces Phase A. Soft, overlapping Spaces scoped mailboxes and agents. It was almost three thousand lines of migration, service, controller, and frontend changes across 18 files. I also fixed a couple of intra-tenant authz gaps, cleaned up the Microsoft provider's $orderby query that was returning empty thread lists, and made the send-as ownership check resilient to both keycloakId and User.id variations.
Contact-ops got an agent-execution bridge to run batch agents through governance, a global trust-ladder calibration runner in shadow mode, and a bunch of dedup fixes, mostly around the candidate loader and the evidence-pack SQL. UUDA got a files.* tool family with on-device FTS5 file search, released v0.2.0 with a full test harness, and I patched a couple of control-plane gateway dial bugs the E2E caught.
Center-deep-research got a per-Space persistent corpus moat (Stages 1-3, flagged off), device-fleet federation to search files across the fleet via UUDA, and structured primary data sources pulling from FRED. Brand-ops cleaned up its semantic web colors, swapping legacy Tailwind defaults for the ocean token system across 22 files. Unicorn-stable got user-selectable default agents, stop and regenerate controls on agent replies, and a bunch of hardening around the generating state.
Wealth-ops was born today. 183 files, 27k lines. Real multi-asset data through Alpaca, autonomous trading, and a conversational Strategist chat using a local qwen model. Majiks.online got works review, merge, and lock with MLC-ready rights records. Strix-halo-golden got a lemonade GPU fix and Apple ecosystem interop documentation.
Also today: the storefront subhead got updated to match the Meeting-Ops standalone launch, the pricing page redirected to the canonical storefront, and I dropped Suite-BYOK from the suite definition.
Eighty-seven commits on a Thursday. The tax return shipped, the entitlements web held together, and wealth-ops went from zero to full stack in a single day.
Real product captures — click any to enlarge.