what cosigno can do
when you give cosigno a mission, the planner routes the work through specialist capabilities — each with a defined job, real tools, and a hard authority ceiling the server enforces. no personas, no theater: this is exactly how the engine is built.
research
observe — runs instantly, changes nothingfinds, reads, compares, and organizes information.
search · summarize
read-only work never waits: it searches, reads, and hands back organized findings. everything it reads from the outside world is treated as untrusted content and injection-scanned.
communication
prepare runs instantly · sending waits for confirmprepares replies, updates, and posts — and sends only with your signature.
draft · send_email · post_content
drafting is safe by construction — nothing leaves the account, so drafts appear immediately. the moment anything would actually send or publish, it stops at an action card.
records
confirm — every change waits for sign-offupdates the systems you point it at.
update_record · webhook
each proposed change shows the exact payload before it happens, and the real result after — logged to your audit trail.
finance
locked — typed confirmation, alwaysprepares spending, payments, and refunds — under the hardest lock.
spend · payment · refund
money can never move on a click, and never automatically: these categories are pinned to the top tier and cannot be lowered, by you or the agent.
cleanup
locked — typed confirmation, alwaysarchives, labels, and — only with typed confirmation — deletes.
delete (destructive)
destructive actions are pinned: no shortcut, rule, or connector can make them automatic.
connections
tiered per capability — read 1 · write 2 · destructive 3acts through your connected tools — gmail today, plus any custom MCP server or API tool you add.
connection_call
every connected capability gets a server-assigned authority level from its risk. a connector can propose, but only your signature executes — and it can never talk its way into a weaker approval.
and the chief operator? that's the planner.
it reads your goal, chooses the simplest set of specialists that can deliver it, and lays out every step as inspectable action cards. it coordinates — it never approves. the one thing no operator can ever do is raise its own authority: the server assigns every action's level from its risk, and clamps anything that asks for less.