Version History

White paper, security audit, encryption claims

• White paper published: "From Chaos to Coherence" — HTML + PDF download
• Security audit completed — full infrastructure review, 1 HIGH fixed (OWUI signup), 2 false positives cleared
• Encryption claim wording updated on landing page to reflect audited trust model
• White paper linked from landing page hero and footer
• Security audit log added to docs/SECURITY_AUDIT_LOG.md

Public Swarm hub, CI/CD, open source readiness

• Public Swarm hub live at swarm.algorythmics.life — anonymous collective intelligence with live stats
• New get_my_traits tool — view the anonymous traits Bob would share with the Swarm
• GitLab CI/CD pipeline — lint (ruff) + test (664 tests) on every push
• AGPL-3.0 licence — Bob is open source
• Hub-optional federation model — Bob works 100% offline; Swarm is opt-in; self-host your own hub or join the public one
• Gold-standard repo: CHANGELOG, CONTRIBUTING, SECURITY, pyproject.toml, .editorconfig
• README overhaul — public-facing with badges, architecture diagram, quickstart, API reference
• 21 tools, 664 tests (was 659)

Bank statement import via chat, subscription management

• New import_bank_statement tool — users can upload CSV bank statements directly in chat; Bob parses, deduplicates, enriches vendors, and runs subscription detection automatically
• New update_subscription tool — update amount, frequency, status, vendor, and dates for any tracked subscription via chat
• Raw file reading (file_id) — bypasses OWUI content extraction that was mangling CSV files; reads uploads directly from disk
• Multi-bank CSV parser: NatWest, Lloyds, Monzo, Starling, HSBC, and others — auto-detects format from headers
• Transaction dedup via UNIQUE constraint (account_id, date, description, amount)
• 21 tools total (was 18), 664 tests (was 637)

Monitoring, briefing control, operational hardening

• Briefing schedule control — new set_briefing_schedule tool lets users set daily/weekly frequency, day, and time via chat
• New users default to weekly briefings (Monday 09:00 UK); existing users keep daily
• Email sync monitoring — health check now verifies actual processing progress, not just log freshness (catches silent failures like the taxonomy path bug)
• Version history page at /versions with 0.x.x milestone releases
• Open source commitment messaging — landing page updated to reflect early access status
• Container symlink fix — Dockerfile no longer creates directories that conflict with entrypoint volume symlinks (was breaking email sync, credentials, and logs)
• Private domain references scrubbed from all public-facing pages
• 18 tools total (was 17)

Polish, AI improvements, file uploads

• File upload resolution — uploaded CSVs, PDFs, and documents are fully parsed into chat context (not just RAG snippets)
• Six-phase AI improvement pass: thread summariser, context builder, prompt tightening, email API modernisation, briefing feedback tracking, smarter knowledge gaps
• Briefing redesign — separate one-off bills from recurring costs, calmer accountant tone, thread directory for cross-referencing
• Monolith split — server refactored into focused modules, secrets moved to env files, cron dedup
• Deploy script (deploy-all.sh) — tests, rebuild all user containers, health check in one command
• Documentation reorganised under docs/ with formal release notes

Legal compliance and digital rights

• Terms of Service, Privacy Policy, and Cookie Policy — all purpose-written for Bob's architecture
• IEEE 7012 (MyTerms) integration — machine-readable terms, .well-known/myterms discovery endpoint, full VRM case document
• "This is not social media" contrast cards on landing page
• Entity updated to Dragonfly Labs Ltd (trading as Algorythmics) across all legal pages
• Consent framework with per-feature opt-out and DSAR (data subject access request) support

Collective intelligence and landing page

• Swarm anonymous collective intelligence layer — Bobs share traits without revealing identities
• Live Swarm stats on landing page (active bots, traits, categories)
• In-chat onboarding — structured welcome message on first conversation
• Gmail onboarding flow — guided OAuth setup for email import
• PII scrubbing — removed all personal names, emails, and bank details from codebase
• Landing page rewrite with product thesis and privacy-first messaging

Self-service onboarding

• Per-user subdomains: {user}.algorythmics.life
• Provisioner API — automated container creation with LUKS encryption
• Signup, unlock, and sleeping pages — entire lifecycle without manual intervention
• Auto-login on first boot — API key seeded, walkthrough launched
• Teardown isolation — deleting a user destroys only their container and data

Containerisation and encryption

• LUKS-encrypted Docker containers — each user's data is a locked volume at rest
• Multi-user provisioning — deploy.sh creates isolated containers per user
• Security hardening pass — input validation, rate limiting, connection safety
• Phase 0 complete — product overview, architecture documented, old test data wiped

Tool calling and memory

• Real OpenAI function calling — Bob can invoke tools (save_memory, deactivate_memory) during conversation
• Persistent memory with coverage gap detection — Bob tracks what he knows and what's missing
• OWUI file sync — uploaded files pulled into Bob's document catalogue automatically
• Transaction matcher — reconciles bank entries against email receipts
• 29 new tests, document schema fixes

Financial intelligence

• Subscription detector — mines transaction history for recurring payment patterns
• Vendor intelligence — AI-powered transaction categorisation and spending summaries
• Renewal tracker — extracts renewal dates from PDFs (including encrypted ones), flags upcoming renewals
• Bank statement chase — daily briefing reminds you if statements are overdue
• Calendar integration and gap detection

Core platform

• OpenAI-compatible API — Bob speaks the ChatGPT protocol, fronted by Open WebUI
• Chat interface at bob.algorythmics.life via Open WebUI
• Gmail pipeline — OAuth setup, Google client, email discovery scanner
• Daily briefing email via Resend (bob@algorythmics.life)
• Financial context enrichment — chat responses informed by transactions, memory, documents
• Ownership-based access model — stripped multi-tenant Swarm heritage

The fork

• Hard fork from Swarm coordination platform
• Inherited: FastAPI server, SQLite database, authentication, threads, messages, FTS search, ACL, user profiles
• Rewritten as a personal AI agent — single-user focus, finance-first vision
• VISION.md: full roadmap, data sources, planned tables, collision check against existing tools