Glossary

Local AI agent

Software on your computer that does tasks in your browser, apps, and files. Passwords stay on the device. If you choose a cloud model, secrets are not part of what is sent.

Human-in-the-loop

You approve sensitive work. Delete always asks again.

Autonomy tiers

Everyday reading and navigation can run without a stop when you have allowed that. Send, pay, buy, and submit need your approval for that task. Related later steps do not each ask again. Delete requires a clear delete, remove, or trash request and a separate confirmation of the exact files. Organizing never means deleting. The model cannot approve its own delete.

OTP relay

You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.

Compiled procedure

It remembers steps whose results were real, such as a file landing on disk. The next similar run may reuse those steps. If a button moved or the page changed, it reads the live page again. Memory stays on the PC, not in the password store or as a procedure sent to a BackBrain server. Reasoning calls may still be needed.

Watch-and-learn

You demonstrate. It summarizes. It saves when you say save. It does not store secret text you typed.

MCP

An open way to attach tools. BackBrain can use MCP servers you add. You can add MCP servers you choose.

Helper agents

Extra reasoning inside a run. They do not bypass the vault or the approval rules.

Routine

A task you schedule. It still stops for approval on sensitive steps and can be switched off.

Sentinel trigger

A rule you set, such as a new file, that may start a task. Sensitive steps still need approval.

Vault

The Windows-encrypted password store on your PC, used at sign-in. Passwords are not written into transcripts.

Session-only credentials

A password held in memory for one task, then cleared.

Redaction

Removing secrets from transcripts and from text sent to a chosen cloud model.

Local-only mode

A setting that blocks cloud model calls instead of quietly falling back to the cloud.

Audit ledger

A hash-chained record on your PC. Links between entries make later edits detectable.

Purchase mandate

A limit you set before a purchase: merchant, maximum amount, and expiry. Approval is also required.

Tool pinning

If a connector’s tools change after approval, they wait for your review again.

Kill-switch

A control that stops background work.

Prompt injection

Untrusted page text is not allowed to skip approval or delete.