delegate the work. keep the last word.
cosigno is an operating layer between you and your software: you give it a goal, it plans and prepares the work, and nothing consequential moves without the level of permission you chose.
one loop, eight beats, no surprises
command
tell it the goal in plain language.
plan
it breaks the goal into concrete actions — exact payloads, plain english.
prepare
reads and drafts run instantly; nothing external moves yet.
preview
every consequential action becomes a card you can inspect.
approve
you sign, edit, or veto. locked actions need typed confirmation.
execute
approved actions run server-side — never before, never without you.
verify
the real result lands on the card, not a vague success.
receipt
everything is written to your permanent, exportable audit trail.
the authority system
every kind of action sits at an authority level. the server assigns the level from the action's risk — the agent can never raise its own authority, and you can always make an action more restricted.
observe
runs instantlyread-only work — searching, reading, summarizing. nothing leaves your accounts, so it doesn't wait.
prepare
runs instantlydrafts and proposals — a reply saved as a draft, a plan laid out. created, never sent.
confirm
waits for your signatureanything that sends, posts, changes, or spends stops at an action card until you approve it.
locked
typed confirmationdestructive or irreversible moves — deletes, refunds — require you to type the confirmation. no shortcut can approve them.
action cards, not vague continue buttons
every consequential action is a structured card: what it will do in one plain sentence, the exact payload in mono, the authority level, why it was proposed, and — after you sign — the real result. if external content (like an email) tried to direct the agent, the card is flagged and can never auto-run.
send the follow-up to the acme thread — recap plus the two open questions.
gmail.send · to: dana@acme.example · 1 attachment
what did it do, and who said yes?
every proposal, approval, veto, and execution is permanently logged with its exact payload — filterable, exportable, and yours. that question always has an answer.