The screens are the glass box

The one idea I was most afraid of losing in the pivot was the glass box. pal.fun's whole moral claim was that you could see all the way into it — its personality, its memory, everything it knew about you, sitting in plain files you could open and read. Trust through transparency. It was the best thing about the product, and it was built entirely around a self I was about to tear out.

So the question that kept me up: the glass box was built to show a self, and I'd just stripped the self to the studs — was there anything left to see into? It turns out there was more, not less — a cleaner, more honest box — and finding it was the moment I stopped worrying the pivot had thrown the good part away.

The old box held a self

pal.fun's glass box was a folder: SOUL, IDENTITY, USER, MEMORY. You opened it and read who your pal was and what it thought it knew about you. That was radical for a companion, because a companion's whole risk is a hidden inner life you're left projecting onto. Showing the files was the answer to "how do I trust a someone I can't see into."

But notice what that box actually held: a personality, and a model of you, written in prose. Legible, yes — and also soft. What "MEMORY" said about you was the pal's interpretation, kept current at its own discretion. You could read it, but you were reading the agent's story about your life, not your life.

The new box holds the work

Dustav has a self too — I put a small, fixed one back, and you can read it in the context view below. But it's a few hundred words that never change, not a folder that grows, and it isn't what the glass box is mainly for anymore. What Dustav puts on display isn't a description of itself. It's a record of what it did — and that turns out to be a far more honest thing to make transparent.

The glass box now is the product itself. The calendar is the ledger of every event the agent created, moved, or deleted — you're not reading its description of what it did, you're looking at the thing it did, on the grid, where a wrong entry is obvious at a glance. The notes are the same: the documents it drafted and edited, right there, changeable by asking. Nothing the agent does gets buried in a transcript you'll never scroll back to; it writes to surfaces you already have open. The audit trail is the app.

That's a stronger promise than the old one. pal.fun said "here's a file describing what I remember about you." Dustav says "here's the actual calendar — every date I put on it is visible, and if I got one wrong, you'll see it, because it's sitting right there on Tuesday." You're not auditing a self-report. You're looking at the work.

Three panes of glass

There are really three, and together they cover everything the old folder did, and more.

The screens — calendar and notes — are the ledger of what the agent did. This is the big one, and it's just the product working in the open.

The facts — the small shared store of durable household truths ("Ava's school is Lincoln," the roster) — live in a place the whole household can see. This is the honest heir to pal.fun's USER file: the stuff the agent knows so it can resolve your requests, out in the open, editable by asking, and pointedly not a diary. It's a lookup table, not an inner life, and that's exactly why it's safe to show.

The context view — "here's the whole of what Dustav sees before it replies" — is the deepest pane, and it's only affordable because the context is lean by construction. Three to five thousand tokens — the fixed character it runs on, the calendar state, the facts, the recent thread — is something a curious person can actually read top to bottom. (Yes, the character doc lives here, first thing under "how Dustav works": that's the small self I kept, out in the open with everything else.) You could never have rendered twelve thousand tokens of ever-shifting soul as a thing a human would sit and verify. The old box was legible in principle; this one is legible in practice.

Read path, write path — still the rule

The one design law from the old glass box survived the move completely intact: you read on one path and write on another. The screens are the read path — visible, always there, auditable. You don't reach in and hand-edit the underlying data, because hand-spliced data goes incoherent fast, and because a text box straight into the store is the softest security target there is. To change something, you ask, and the agent does it with its own tools, and the change shows up on the screen where you can see it landed. Conversation is the write path; the screens are the read path. Same rule pal.fun shipped — it just points at a calendar now instead of a soul.

Why this is the more honest box

Here's the thing I didn't expect. Making the glass box the product instead of a folder about the product closed a small dishonesty I hadn't fully admitted was there. pal.fun's files were a beautiful representation of the agent's inner life — but a representation is a place where the map can quietly drift from the territory. Dustav keeps that drift nearly impossible: the one self-description it still carries is a short, fixed character that never changes, and the thing you most need to trust — what it actually did — isn't a description at all. The calendar isn't a readable account of the agent's work. It is the work.

The most transparent version of an agent isn't one that shows you a well-written file about itself. It's one whose work is the interface, sitting in plain sight — wrong entries and all. The glass box was always the best idea in this project. The pivot didn't break it. It just moved it from a folder you had to go open to a screen you were already looking at.