AI you can review, line by line.
Two AIs. One surface. Zero hallucinations.
PhiCo composes surfaces from your real block catalog. PhiSo answers your visitors from the live page contract. Both are scoped, audited, and never act without a Receipt.
PhiCo
PhiCo — the Composer
An AI that proposes; you accept.
1. Intent
You type or speak what you want. "A pricing page with three tiers, contact form, and an FAQ."
2. Receipt
PhiCo emits a structured Receipt: every block, every prop, every binding, signed and diff-able against the current Surface.
3. Review
You read the diff. You accept the lines you want. You can reject hunks. Nothing publishes without your green light.
4. Surface
On accept, the Receipt is materialized: the Surface is published, immutably traceable to the Receipt that produced it.
PhiSo
PhiSo — the Surface Operator
Every published surface gets a conversation, grounded in itself.
Surface-bound context
PhiSo reads only the live Surface contract. No external scraping, no leaked training data.
Form-filling without trust loss
It can fill forms it is explicitly authorized to touch, with field-level permissions you set.
Escalation paths
When a question is out-of-scope, PhiSo escalates to a real human channel — never invents.
Per-surface model selection
Use Claude, GPT, or your own provider per surface. Switch without re-training.
Trust
Three rules we don't break
Human in the loop
No autonomous publishing. Every Receipt requires explicit acceptance.
Atom-grounded generation
AI selects from the real block catalog. If a component doesn't exist, AI cannot summon it.
Tenant-scoped data
Your content is never used to train cross-tenant models. Your World stays your World.
Watch a Receipt happen, live.
The Receipt Explorer lets you fire an Intent and watch the structured output stream in real time.
Open the Receipt Explorer