Support

Aegis help

• What Aegis is made ofAegis

  Aegis — Package Overview

  Personal cybersecurity. Company 00000000-0000-0000-0000-000000000032, slug aegis, type Portfolio. Scope: the description on its row in packages/common/companies.py. Interaction contract: CLAUDE.md. Context: plans/context/00_CONTEXT_INDEX.md.

  Module map

  `` packages/companies/aegis/ ├── CLAUDE.md the interaction contract — read first ├── AEGIS_PACKAGE.md this file ├── __init__.py the only .py at the package root ├── models/ the shapes Aegis stores and returns — breach card, finding, asset, device, case, │ consent, evidence, removal, autonomy (four levels) ├── services/ the work — PROTECT: breach_provider, exposure (check + finding answers), monitoring, │ accounts (inventory, priorities, guides), devices, recovery, journal, integrations, │ protect_metrics · CASES: cases, tasks (Helm sync), scam, incidents, playbooks, │ evidence, privacy, consent, authority (preview), notify, cross_company, cases_metrics · │ SHARED: addresses, agents, core_a_agents, errands, comparison, plan, settings, refusal, │ fix_steps ├── stores/ Aegis's collections — every personal field sealed or blind-indexed (13 helm_aegis_*) ├── support/ SUPPORT_PROFILE.yaml, which Bridge's support FAB answers from ├── tests/ unit tests └── plans/ ├── context/ 00_CONTEXT_INDEX.md · AEGIS_PATTERN_260930.md · AEGIS_DEIDENTIFICATION_261001.md · │ AEGIS_MASTER_PLAN_261006.md · AEGIS_TRUST_DESIGN_261006.md · AEGIS_COMMERCIAL_MODEL_261006.md └── genesis/atomic/ AEGIS_FEATURE_REGISTER.md (keeper's) · intake/<lane>.md ``

  HTTP surface

  | Route | What it does | |---|---| | GET /aegisco/health | the signed-in app's runtime check: the registry row served, and whether the paid breach lookup is connected | | GET /aegisco/me · GET /aegisco/plan | who is signed in (and whether they are the owner); their plan from Vault | | POST /aegisco/check/password | the password check — only 5 hex characters of its SHA-1 leave; nothing about it is stored but the count | | POST /aegisco/check/email | one verified address checked: payload · presentation (one card per breach) · followups, plus what the autonomy level did | | GET /aegisco/checks | the person's recent checks | | GET · POST /aegisco/addresses · POST /aegisco/addresses/verify · DELETE /aegisco/addresses/{id} | the addresses a person owns; a new one is confirmed by a link Bridge sends | | POST /aegisco/watches · DELETE /aegisco/watches/{id} | keep watching (a weekly Helm reminder) on or off | | GET · PUT /aegisco/settings/autonomy | how much Aegis does on its own | | GET · PUT /aegisco/errands/switch · POST /aegisco/errands/compare · GET /aegisco/errands/pairs | the per-kind switch and the off/on comparison (owner only to change or run) | | Round 2 (on main ab0d0fc0ea, PRs #4786 + #4774, then #4812): routes/aegis_app.py 44 routes and routes/aegis_cases.py 36, both at /aegisco (api.py:5110, :5114) | | | GET /aegisco/checks/{id} · POST /aegisco/findings/{id}/answers | one check's result state and findings; the answers that change a finding's steps | | GET · POST /aegisco/monitoring · DELETE /aegisco/monitoring/{id} · POST …/{id}/run · …/pause · …/resume | watching as a subscription with its honest state | | GET /aegisco/journal · POST /aegisco/journal/reviewed | what changed since the last review | | GET · POST /aegisco/accounts · PATCH · DELETE /aegisco/accounts/{id} · GET /aegisco/accounts/priorities · GET …/{id}/guide · POST …/{id}/guide/steps/{step}/done | the account inventory, what to protect first, dated guides | | GET · POST /aegisco/devices · PATCH · DELETE /aegisco/devices/{id} · GET /aegisco/recovery/map · POST /aegisco/recovery/rehearsal | devices with dated evidence; the recovery map and rehearsal | | GET /aegisco/integrations · POST /aegisco/integrations/{name}/revalidate · GET /aegisco/metrics | the connector registry; the person's own metrics | | GET · POST /aegisco/cases · GET · PATCH /aegisco/cases/{id} · POST …/{id}/approve · …/close · …/helm · …/handoff · GET …/{id}/export | cases end to end, their Helm to-dos, the recovery packet | | POST /aegisco/cases/{id}/evidence · GET · DELETE …/evidence/{eid} · POST …/evidence/{eid}/redact · GET /aegisco/tasks · GET /aegisco/cases-metrics | evidence and the timeline; task contracts; cases' metrics | | POST /aegisco/scam/check · POST /aegisco/scam/escalate · GET · POST /aegisco/incidents · POST /aegisco/incidents/{id}/intake | the suspicious-message check; incidents and their playbooks | | GET · POST · PATCH /aegisco/privacy/requests (id in the body) · PATCH …/{id} · POST …/{id}/prepare · …/authorise · …/status | removal requests through their lifecycle | | GET · POST /aegisco/permissions · DELETE …/{id} · POST /aegisco/permissions/preview · GET · PUT /aegisco/settings/notifications · GET · PUT /aegisco/events/optins · POST /aegisco/events | grants, the preview, notification settings, cross-company opt-ins and events | | GET /aegis-admin/status | the operator read for command-web's /aegis page (operator key only) |

  ⛔ /aegisco, not /aegis — /aegis/* is Labs' code-audit pipeline (routes/aegis.py). auth.AUDIENCE_BY_PATH_PREFIX admits only an aegis_user token at /aegisco/.

  Collections

  | Collection | Holds | De-identified how | |---|---|---| | helm_aegis_addresses | addresses a person owns, watching state | address sealed; address_index / token_index blind indexes; watching yes/no | | helm_aegis_checks | each check run | sealed; ⛔ never a password, its hash or prefix | | helm_aegis_settings | the autonomy level | sealed | | helm_aegis_errands | errand answers and off/on comparisons | sealed | | helm_aegis_monitoring · helm_aegis_assets · helm_aegis_devices · helm_aegis_journal | round 2, protect: watches, declared accounts, declared devices, protection changes | sealed (stores/_common); listed in Helm's sealed_fields.py | | helm_aegis_cases · helm_aegis_tasks · helm_aegis_consents · helm_aegis_evidence · helm_aegis_removals | round 2, cases: cases, Helm task contracts, grants, evidence, removal requests | sealed; listed in Helm's sealed_fields.py | | aegis_breaches | the public breach facts and the steps written once per breach | holds no person |

  The thirteen helm_aegis_* collections (stores on main 06ff3b0505) are keyed on user_id, so Helm's account census covers them for export and erase.

  Errands and agents

  packages/common/errands/offers/aegis.py offers security.exposure.check, security.account.protect and security.incident.resolve (runs in services/errands.py). CORE-A agents: aegisco_breach_advisor (Iaso — the steps for one breach) and aegisco_account_guard (Ladon — the steps for one account) and, round 2, aegisco_message_checker (Tiresias — the suspicious-message check, services/scam.py), generated under generated/ by _launch/ops/aegis_build_260930/request_aegis_agents.py.

  Environment

  | Var | Service | Notes | |---|---|---| | HIBP_API_KEY | central-command | Have I Been Pwned's paid key, for the email half. Unset → "not connected yet"; the password half needs no key | | GOOGLE_CLIENT_ID_AEGIS | central-command, aegis-web | Aegis's own Google client — google_identity.aegis_audiences() reads it, no default | | GOOGLE_CLIENT_SECRET_AEGIS | aegis-web | |

  Change Log

  • 2026-10-01 — Created with the company (lane AEGIS aegis-build). • 2026-10-07 — Round 2 reached main (06ff3b0505: #4786 aegis-core, #4774 aegis-web): module map, routes (44 + 35 at /aegisco), the nine new helm_aegis_* collections and the third agent added from a census of origin/main (_launch/ops/aegis_keeper_r2_261006/package_census.py) (lane AEGIS aegis-keeper, round 2, AGS-R2-KEEP-03). • 2026-10-07 — Re-census at main ab0d0fc0ea (#4812 carried aegis-core 514bb2dd49): aegis_cases.py 35 → 36 routes, the new one PATCH /aegisco/privacy/requests (id in the body, as aegis-web's client sends it); modules 57, aegis_app.py 44 and 13 helm_aegis_* collections unchanged (package_census.py origin/main) (lane AEGIS aegis-keeper, round 2, AGS-R2-KEEP-03).

• How Aegis works, and the rules it keepsAegis

  Aegis — CLAUDE.md

  Interaction contract for a Claude Code session working under packages/companies/aegis/.

  ⛔ Read plans/context/00_CONTEXT_INDEX.md before your first edit here.

  Role

  Aegis is Memriq's personal-cybersecurity company: slug aegis, company id 00000000-0000-0000-0000-000000000032. Its scope is the one-line description on its row in packages/common/companies.py. Read it there; it is not copied here. Its web app is apps/aegis-web (aegis.memriq.ai, aegis-beta.memriq.ai, aegis-staging.memriq.ai), its API routes are packages/mcai/command/routes/aegis_app.py under /aegisco/ (⛔ routes/aegis.py and /aegis/* are Labs' code-audit pipeline) plus the operator read routes/aegis_admin.py at /aegis-admin/status, and its first product is the exposure check: has this person's email address or password turned up in a known breach, and what should they do about it.

  ⛔ The name collision

  "Aegis" ALSO names Labs' code-audit system: packages/companies/labs/mlabs/aegis/, the aegis-audit-code skill, twenty agents named aegis_*, and the AEG- unit prefix in LABS_FEATURE_REGISTER.md. None of that is this company and none of it is touched from here. • This company's agents are prefixed aegisco_, never aegis_ (COMPANY_PREFIXES maps aegis_ to Labs). • This company's register units are prefixed AGS, never AEG.

  The rules that decide most questions here

  1. ⛔ A PASSWORD NEVER LEAVES THE PROCESS AND IS NEVER STORED, LOGGED OR RETURNED. Only the first five hex characters of its SHA-1 go to the Pwned Passwords range endpoint, with Add-Padding: true. 2. ⛔ AEGIS CHECKS ONLY AN ADDRESS THE PERSON HAS SHOWN THEY OWN — the signed-in account's own address, or one they verified through a link sent by Bridge. Never anybody else's. 3. ⛔ **EVERY STORED EMAIL ADDRESS IS A KEYED HASH FOR LOOKUP; THE PLAIN ADDRESS LIVES ONLY INSIDE THE SEALED FIELD.** Keith's test: *"if someone hacked our system and accessed the non-encrypted data, can they tell who that belongs to?"* — the answer for every Aegis collection must be no. 4. ⛔ THE CENTRAL SERVICES ARE CALLED, NEVER REBUILT (D123). Sign-in → the central authority; admission → Prelude redeemed; billing → Vault; every email → Bridge (bridge.services.egress.send_email); agents → CORE-A; every model call → packages.common.llm.task_client; anything at a time → a Helm reminder. ⛔ No mail transport, no Stripe, no DomainAgent subclass, no scheduler of Aegis's own. 5. ⛔ A MISSING PROVIDER KEY IS SAID, NEVER FAKED. With HIBP_API_KEY unset, the email half answers "not connected yet" in words, and the password half (which needs no key) still works. 6. ⛔ NO PRIVACY, TERMS OR LEGAL PAGE OF AEGIS'S OWN. Counsel owns them. Counsel published Aegis's privacy policy and terms on production on 2026-10-06 (evidence 749cfb1303, PR #4555; the templates and pages b2ad3c8219, PR #4480); apps/aegis-web renders Counsel's published text at /privacy and /terms and holds no legal text of its own.

  Decisions in force — round 3, finding time (2026-10-10)

  The design is plans/context/AEGIS_FIND_TIME_ADDENDUM_261010.md (Keith, verbatim); the decisions are locked in round 3's shared doc personal_cowork/PROJECTS/MEMRIQ/032_AEGIS/00_DOCS/AEGIS_ROUND3_COLLAB.md §3 and summarised here.

  • ⛔ R2-D8 ("Aegis never signs in to a third-party account") IS SUPERSEDED by addendum §4 and R3-D2. Code and copy that still say it describe round 2 and change only with round 3's delegation units (register AGST-11, AGST-13, AGSU-7). Measured on origin/main 42b554a17b with git grep -n "never signs in\|R2-D8" 42b554a17b -- apps/aegis-web packages/companies/aegis/models packages/companies/aegis/services packages/companies/aegis/support: models/autonomy.py:2, :11, :76; services/authority.py:2, :10, :30, :76, :186 (the gate that refuses delegated work); support/SUPPORT_PROFILE.yaml:68 and support/knowledge/watching-and-autonomy.md:42 (what Bridge's support assistant reads); the web app's copy people read — apps/aegis-web/src/components/cases/case-detail.tsx:168, :323, src/lib/capabilities-today.ts:31, src/lib/api/aegis.ts:597 — and its tests apps/aegis-web/tests/settings.test.tsx:77, tests/welcome.test.tsx:18. • R3-D1 — raising delegation above Guide needs a separate tick on every disclaimer, none pre-ticked, recorded with the text version. • R3-D2 — the person chooses how much Aegis does in their accounts, up to provider-authorised sign-in; Memriq's floor (addendum §4.3, all six) is kept whatever the setting: never deletes an account, data, messages or files; never moves money, changes payment details or accepts terms on the person's behalf; never changes the recovery email, recovery phone or password of the main email account without a separate, explicit confirmation in that moment; never types a password the person did not just give for that session, and never stores one; stops and hands back on any provider screen it does not recognise; logs every action in the change journal (PROT-11) with how to undo it. *Amended 2026-10-12 (D198, lane CAO agent-levels):* Keith — *"we give the user complete control over what they want their agents to do … we set the defaults to a safer level … and we have a heavier approval process as you go up the levels."* Three floor items — deleting, money or payment details, accepting terms — are now LEVELS the person may raise (packages/common/agency: aegis.delete_in_session · aegis.money_in_session · aegis.accept_terms_in_session; default "hand it back to me"; a typed opt-in that ends after 30 days; and even then each such change needs the person's confirmation in that session). The other three items (main-email recovery confirmation, passwords, unrecognised screens) and the change journal hold at every level. Code: services/delegation.py lifted_floor + floor_check; disclaimer version 2026-10-12.1. • R3-D3 — calendar event details (not only free/busy) and every Memriq signal the person shares are used; the agent–user confidentiality pledge is stated wherever context is asked for or used. • R3-D4 — booking mode is the person's setting: propose each time, or book for me. • R3-D5 — v1 delegation runtime: Guide everywhere; Fill = staged values the person copies in and confirms; Act-with-me and Act-for-me only where a provider's authorisation permits the change, otherwise "not available for this provider"; all three proven against an Aegis test provider page on beta. • R3-D6 — sessions are booked into a separate calendar named "Aegis". • R3-D7 — group and global learning on by default, de-identified, k ≥ 20, with an opt-out on Settings. • R3-D8 — the time-finding agent's directive is addendum §5.1, verbatim, in its CORE-A definition. • R3-D9 — register mapping: AGS-R3-CORE-nn → AGST-n, AGS-R3-WEB-nn → AGSU-n, AGS-R3-KEEP-nn → AGSV-n. • ⛔ The calendar is Harbor's (GET /harbor/calendar/events, contract §7, called server to server as Helm's services/calendar_read.py does). Aegis never talks to Google itself. Timing is still a Helm reminder — rule 4.

  Relevant skills & commands

  • db-env-safety / /check-env-target — before anything that writes Mongo. • bridge-aware — every email and the support FAB. • core-a-build-agent / /request-agent — every agent. • prelude-aware, prelude-feedback-widget — the waiting list and the feedback button. • no-guessing / /diligence.

  Change Log

  • 2026-10-01 — Created with the company (lane AEGIS aegis-build). • 2026-10-06 — Route line corrected: Aegis's API is routes/aegis_app.py at /aegisco/; the file and prefix the first version named are Labs' (lane AEGIS aegis-build). • 2026-10-07 — Rule 6 corrected: the legal pages are published by Counsel (b2ad3c8219 #4480, 749cfb1303 #4555), no longer held (lane AEGIS aegis-keeper, round 2, AGS-R2-KEEP-03). • 2026-10-10 — Added "Decisions in force — round 3": R2-D8 superseded, R3-D1…D9, the calendar is Harbor's (lane AEGIS time-keeper, round 3, AGS-R3-KEEP-03). • 2026-10-10 — Corrected after the keeper's separate verifier refuted the first version: R3-D2 now carries all six floor items of addendum §4.3 (payment details, never storing a password and "with how to undo it" had been left out); the R2-D8 site list adds services/authority.py and the two support files, and AGST-13; R3-D5 says "all three". • 2026-10-10 — Corrected again after the keeper's second verifier: the R2-D8 site list now cites its git grep command and names all 16 hits, adding the aegis-web source sites case-detail.tsx:168, :323, capabilities-today.ts:31, lib/api/aegis.ts:597 and the docstrings models/autonomy.py:2, services/authority.py:2 (lane AEGIS time-keeper, round 3, AGS-R3-KEEP-03).

• Keep watching, notifications, and how much Aegis does on its ownAegis

  What does Keep watching do?

  It re-checks an address you own on a schedule and tells you if it turns up in a breach it was not in before. The timing comes from a reminder on your Helm board — Aegis runs no timer of its own. In Settings, each watched address shows its real state: running, having trouble (with the reason), not running yet (with the reason), or paused — with when it was last checked successfully and when the next check is planned. A watch that is not running is never shown as all clear. If your plan does not include watching, Aegis says which plan does. Turn it off in Settings at any time.

  How does Aegis notify me, and what are quiet hours?

  In Settings → Notifications you choose how much a notification says — just "An account needs attention", safe on a shared screen, with the details behind sign-in — or a short summary. You can set quiet hours. Urgent alerts only break through quiet hours if you have turned that on. All of Aegis's email is sent through Memriq's own mail service.

  How much does Aegis do on its own?

  You choose in Settings. Each level says, before you pick it, what Aegis does without asking and what could go wrong: • Suggest (the default): Aegis looks at what you have shown it and suggests steps; it changes nothing. • Prepare: Aegis also drafts tasks, requests and evidence for you, without sending anything. • Execute approved actions: Aegis carries out a specific step you approved and checks the result. • Standing limited permission: Aegis repeats narrowly defined, low-risk steps you agreed to, within their limits and until they expire. Purchases, messages to other people, closing an account, recovery changes, destructive device actions and sharing sensitive evidence always need their own approval, whatever the level.

  How far Aegis may go INSIDE your accounts is a separate choice, on Permissions › What Aegis may do in your accounts: Guide (it shows you the exact page and button; you do it), Fill (you sign in and watch; it fills in and you confirm), Act with me watching, and Act for me (it signs in through the provider's own authorisation — your password is never shared). Anything above Guide needs you to tick each risk first, and you can withdraw it in one tap. At every level Aegis never deletes an account, data or messages, never moves money or accepts terms, never asks for or stores your password, stops on any screen it doesn't recognise, and never contacts a site, a bank or anyone else for you.

  Is my watched address being checked right now? How do I see whether watching is working?

  This chat cannot see your own watches. Open Settings → Watching: each watched address shows its real state — running, having trouble (with the reason), not running yet (with the reason), or paused — with when it was last checked successfully and when the next check is planned. A watch that is not running is never shown as all clear. Quiet hours are set separately, in Settings → Notifications: during them Aegis holds notifications, and only urgent alerts break through if you turned that on.

• Data-broker opt-outs and PermissionsAegis

  How do I get my details removed from a people-search or data-broker site?

  On the Privacy requests page in Aegis, give your name once (and your city and state, and a listing's address where a broker asks for it). Aegis shows you exactly what it will send to each broker and what each request discloses. When you press "Send them for me", Aegis's agent sends every request itself and tracks each broker's reply — you don't send anything. Each broker shows whether it was sent, the date, and the broker's reply (received, asking you for something such as a confirmation link, says it removed your listing, refused, or found nothing). Some brokers only take requests through a web form that stops automated senders; Aegis's agent tries each one and says what stopped it. Opt-outs are a U.S. route: Aegis covers people in the United States for now. Aegis does not use a paid removal service and never claims anything is removed everywhere. (The Privacy requests page is different from Aegis's privacy policy, which is linked at the bottom of every page.)

  What is the Permissions page?

  Everything Aegis is connected to and allowed to do, in one place: • Connected services, each labelled honestly: working on the live service, tested but not live, guided only (Aegis guides you but cannot act there), not available, or planned and not built. • Every permission you have given — who, for what, which actions and which details, until when — each with "Revoke". Before you give a new permission, "Preview" shows exactly what Aegis would read, change and send. • Other Memriq companies: each kind of event another Memriq service could share with Aegis (for example a suspicious payment or a replaced phone), what it would share and why. All are off until you turn them on, and nothing from another Memriq company reaches Aegis unless you do.

  Can I use Aegis to watch a family member's accounts?

  No. Aegis only checks and watches what you have shown is yours. Being in the same family or household does not give access to anyone else's accounts.

• Your plan — what Free and Plus includeAegis

  What do Free and Plus include?

  Free covers everything Aegis does when you ask: checking your email addresses and a password against known breaches, step-by-step help strengthening an account, your devices and how you would get back into each account, cases for a security problem (including "I need help now"), "Is this message real?", removal requests, and your permissions and notifications. Plus adds watching: a weekly re-check of each address you choose, and being told when a watched address turns up in a new breach. The plan page (Settings → Your plan) shows your level and, for each feature, which plan it needs.

  Can I buy Plus? How much is it?

  Not yet — the plan page says "Not available to buy yet". Aegis sets no price of its own; plans and prices come from Memriq's billing, and none is on sale for Plus today. Aegis does not say when, or whether, Plus will go on sale — it never calls it "coming soon". If you press something that needs Plus, Aegis tells you so and changes nothing.

• How the password check keeps your password privateAegis

  How does the password check keep my password private?

  When you press Check, your browser sends the password to Aegis's own server over an encrypted (HTTPS) connection. The scrambling happens there, on Aegis's server — not on your phone or computer. The server turns the password into a scrambled code (a SHA-1 hash) and sends only the first five characters of that code to Have I Been Pwned's Pwned Passwords service, with padding switched on so the reply does not reveal which entry matched. The service sends back every scrambled code that starts with those five characters, and Aegis's server compares the rest itself. So the password reaches Aegis's server and nowhere else: Have I Been Pwned never receives it, and Aegis never keeps it, never writes it to a log, and never shows it back to you. The field on the page is cleared as soon as you press Check.

  Is my password scrambled on my device?

  No. Your device sends the password to Aegis's server over an encrypted connection, and the server scrambles it there. What leaves Aegis's server is only the first five characters of the scrambled code — never the password, and never the whole scrambled code.

  What does "seen N times" mean?

  That password has turned up that many times in data breaches. Anyone trying to break into accounts tries those passwords first, so stop using it and change it everywhere you use it. "Not found in known breaches" means it is not in the list; keep it long and use it on one site only. The check cannot tell you whether a particular email address and password were leaked together.

  Can I type my password into the support chat instead?

  No — please never share a password in the chat. Use the password check on the Check page.

• Home, getting started, and "I need help now"Aegis

  What does the Home page show me?

  Home is where you land after signing in. It shows, each from your own data: what needs you now, the one next useful step, what Aegis is handling, what is waiting (for example a step that needs your approval, or a reply from a site), which addresses Aegis is watching and when each was last checked, what was finished recently, and what changed since your last review, with why each change matters. Aegis does not give you a safety score or a green "all clear". If an address has never been checked, Home says "Not checked yet" — which is different from "no findings", which means a check ran and found nothing in the sources it looked at.

  I'm new. Where do I start?

  The Welcome page (/welcome) gets you one useful result in a few minutes without asking you to list all your accounts. It explains what Aegis will and will never do, uses the address you signed in with (signing in already proved it is yours), runs a check, helps you add the one account that matters most, and lets you turn on watching if your plan includes it. You can skip any step.

  Something has gone wrong right now. What do I do?

  Press "I need help now" — on Home, on the Welcome page, or on Aegis's front page before you sign in. After you sign in it opens incident intake straight away: you say what happened (for example someone signed into your account, or you lost your phone) and Aegis opens a case that starts with the next useful step. You do not have to finish setting up first. Aegis cannot promise to recover an account, get money back, or make a site reply by a certain time.

• Finding time — your calendar, how you like to work, booked sessions and how much Aegis does for youAegis

  What is "finding time"?

  Most people already know they should turn on two-step sign-in — the hard part is finding the moment. Aegis does both halves of that for you: it finds the time, by reading your real schedule and the way you said you like to work and proposing (or, if you ask it to, booking) the right moment; and it shrinks the work, by doing as much of each task as you allow, so a session is small. In Aegis's words:

  "If your email gets taken over, getting it back usually takes days and phone calls. Five to ten minutes now — with us doing most of the legwork — means that never happens on a bad day."

  A time on a task ("most people take 4 minutes") is shown as measured only when Aegis has really measured it from people's completed sessions. Until then it shows a range from the step-by-step guide, or says "not measured yet".

  How do I connect my calendar, and what does Aegis read?

  Open Connect your calendar (/connect/calendar) and choose Connect your calendar. You give permission through your calendar provider's own sign-in page; Aegis never asks for your calendar password. Aegis reads your events **including their details** — titles, times, places — not just when you are free or busy, so it can read the situation: a weekend of travel when you said you don't do chores while travelling is skipped; a long airport layover, when you said you like airport time, can be offered. The page lists, in plain sentences, exactly what is read.

  The page always shows the calendar's real state: connected (with which calendar and since when), not connected, or "couldn't read your calendar" with the reason. An unconnected or unreadable calendar is never treated as a free calendar — Aegis will not propose times from a calendar it could not read.

  How do I disconnect my calendar?

  On Connect your calendar (/connect/calendar), choose Disconnect, then Disconnect my calendar to confirm. Aegis stops on its very next read — nothing waits for a nightly job. Times Aegis already booked on its own "Aegis" calendar stay where they are until you remove them, and each can be undone in one tap (see below).

  What does "agent–user confidential" mean?

  What passes between you and your Aegis agent is agent–user confidential — a pledge Memriq keeps across every service. You see it wherever Aegis asks for or uses your context: when you connect your calendar, in Settings, and next to every "Suggested because…" line. It is kept, in practice, by: • Sealed fields — every value that could identify you (addresses, account names, device names, calendar event details) is stored encrypted, field by field, and opened only to do the thing you asked for. • De-identification — names, addresses and other identifying details are removed before any AI model call that does not need to know who you are. • Purpose-limited reads — your calendar is read to find time for your security tasks and nothing else; signals from other Memriq services are read only when you have turned them on. • An access log you can read — every use of a permission you gave is written to the access log on Permissions, including uses Aegis refused itself. • Revocation on the next read — withdraw a permission or disconnect your calendar and Aegis stops on its next read.

  The public page /confidentiality ("Between you and your agent") explains all of this and can be read without signing in. The legal terms are in Aegis's Privacy policy and Terms.

  What can other Memriq services tell Aegis?

  Only what you turn on, on Permissions. With your say-so, Aegis can use signals such as travel plans (Drift), a new device (Merc), a new job (Forge), a move (Dwell), how you review your finances (Reckon), your tasks, routines and quiet times (Helm) and personal context (Harbor) to pick a better moment. All are off until you turn them on.

  What are the onboarding questions?

  Short and conversational, and started from what Aegis already sees, so you mostly confirm rather than fill in a form: 1. Show, then ask — for example, "Looking at your calendar, Saturday mornings and Tuesday evenings look open most weeks. Are either of those good for a few small tasks?" 2. Your style — all at once or a few minutes at a time; phone or computer; at home or while waiting (airport, commute, appointments); alone or with a partner. 3. What's off-limits — "Is there time you keep for yourself that we should never touch?" These become protected time. 4. Load — "How full does life feel right now?" light, normal or stretched.

  Every answer can be changed later on Settings › How I like to work.

  What is Settings › How I like to work?

  At /settings/work-style you can see and change: your usual open windows, all-at-once or small pieces, phone or computer, where and with whom, your protected time, your load, and the booking mode — "propose each time" or "book for me". Each value says where it came from: you answered it, you edited it, or Aegis inferred it from your calendar and what you do. Nothing inferred is presented as something you said.

  What is protected time?

  Time you keep for yourself — a lunch walk, the half hour after the kids are in bed, Sunday afternoon. Aegis never proposes it and never books it. A short open gap between busy blocks is treated as a break too, unless you tell Aegis otherwise.

  What does "load" change?

  How much Aegis offers. When your calendar is dense, or you said "stretched", Aegis slows down: it offers only the one thing that matters most, or nothing that week.

  What has Aegis learned about me, and how do I correct it?

  The "What Aegis has learned" part of How I like to work lists everything Aegis inferred — your usual open windows, travel days, busy weeks, which suggestions you accept, move or ignore, the device you use, how long your sessions usually take — each marked inferred, with when it was learned. Change any value, or mark it wrong, and Aegis uses your correction from then on. Aegis also says when it notices something new, for example "You've done your last three sessions on your phone — want me to send them there by default?"

  Does Aegis learn from other people? Can I opt out?

  Aegis learns at four levels: you, each task (real minutes and where people get stuck), groups of similar people, and Aegis as a whole. Group and whole-Aegis learning use only de-identified, aggregated data, in groups of at least twenty people. You can opt out of it on Settings › How I like to work; your own settings keep working either way.

  What is "Have 3 minutes?" on Home?

  A block on Home: "Have 3 minutes? Have 10? Do one thing that makes a big difference." The options are built from your own open tasks, so each one fits the time you pick. "If you only do one thing", Aegis starts with your main email account, because it recovers everything else.

  What is "one more?"

  After you finish a task Aegis may ask "See, that wasn't bad. Got time for one more?" with time options built from what you actually have left (for example 3, 6 or 15 minutes). Pick one and Aegis serves the most important task that fits. Saying no is fine and is never held against you.

  What is My time?

  My time (/plan-my-time) shows the specific times Aegis suggests, such as "Saturday 9:10–9:20, before your 10:00 — two tasks, both on your phone". Each one says "Suggested because…" with the reason — your calendar, what you told Aegis, or a signal you turned on — and the confidentiality line. For each suggestion you can: • Accept — it becomes a session (and, in book-for-me mode, an event on your Aegis calendar); • Move — pick another time, or ask Aegis to find another one; • Decline — it goes away; you can say why if you like, and Aegis learns from it.

  If your calendar is not connected, or Aegis couldn't read it, My time says so plainly instead of showing empty time.

  What does "book for me" do?

  With booking mode set to "book for me", Aegis puts sessions on your calendar itself and moves them when your calendar changes. Anything Aegis places is unmistakable: • it goes on a separate calendar named "Aegis", with its own colour, which you can hide in one click; • the title starts with the Aegis mark and reads as Aegis's, for example "Aegis · 2 quick security steps"; • the first line of the description says "Added by Aegis because you asked it to book sessions for you — change this in Aegis › Settings.", followed by the session checklist and links; • you see a one-line notice when Aegis books or moves something, such as "I put 10 minutes on Saturday at 9:10 — tap to move or remove"; • a weekly digest lists everything Aegis added, moved or removed.

  Where is the weekly digest, and how do I undo a booking?

  On /activity/bookings, a week at a time: each entry says what was added, moved or removed, when, and why. Each booking Aegis can still undo has Undo — one tap. Undoing also teaches Aegis what not to do next time.

  What are Guide, Fill, Act with me watching and Act for me?

  How much Aegis does inside your other accounts (for example your Google, Apple or Microsoft account). You choose, for each provider or for all of them: • Guide — Aegis opens the exact page, says which button to press, and confirms the result. You sign in. • Fill — you sign in and watch; Aegis fills fields, moves between pages and stages each change; you click the final confirm. • Act with me watching — you sign in; Aegis completes the steps itself while you watch and can stop it at any moment. • Act for me — Aegis signs in through the provider's own authorisation (no password shared with Aegis) and completes the steps.

  When you are watching, Aegis can move faster because you see every step. When Aegis signed in itself, it is most careful: smaller steps, every change read back, and it stops on anything unexpected. Not every provider allows the higher levels — many do not let other apps change security settings — so a provider stays at the highest level it actually permits.

  Why do I have to tick boxes to turn on Fill, Act with me watching or Act for me?

  Because it is a real decision, and your choice. The consent screen says in plain words what Aegis will be able to do at that level and for which providers, what it will never do, and each risk: • a wrong setting can lock you out; • a provider may treat automated activity as suspicious; • changes take effect immediately; • Aegis cannot undo some provider changes.

  There is one box per risk. None is ticked for you and there is no "select all". Aegis records the exact wording you accepted, the time and the level, and shows it on What Aegis may do in your accounts (/permissions/accounts). You see the screen again when you raise the level, add a new provider at Act for me, or when the wording changes.

  How do I turn delegation off?

  On What Aegis may do in your accounts (/permissions/accounts), withdraw the consent in one tap. It takes effect before Aegis's next action, and What Aegis may do in your accounts shows the level now in force.

  What will Aegis never do in my accounts, whatever I choose?

  Memriq keeps a floor no setting removes: • never deletes an account, data, messages or files; • never moves money, changes payment details, or accepts terms on your behalf; • never changes the recovery email, recovery phone or password of your main email account without a separate, explicit confirmation from you in that moment; • never types a password you did not just give for that session, and never stores one; • stops and hands back to you on any provider screen it does not recognise; • logs every action in the change journal, with how to undo it.

  What is the session screen?

  Each booked or started session has its own page (/session/<id>). It is prepared in advance: what to have ready (your phone, your password manager), which accounts, in what order, with direct links and a time for each step (marked measured only when it was measured). Each step shows the level Aegis will work at; you mark it done, or stop it, and Aegis stops with you. Phone-first wherever the task allows.

  What is "Do it together now"?

  A way to do a session right away with Aegis beside you, step by step, confirming each change as it goes. It is for when you would rather just get it done with help than pick a time.

  Aegis asked "What would help?" after I moved a session a few times. What is that?

  A check-in, not a reminder. After a couple of delays Aegis says: "We've moved this a couple of times now — that's normal, life is busy, and we don't want to add to it. What would help?" and offers five choices: • Only the one thing that matters most • Shorter pieces (2–3 minutes) • Different days or times • Do it with me now, I'll handle most of it • Pause for a few weeks

  Your choice changes what Aegis does next, and it never repeats the same prompt. Sessions that didn't happen, or that you moved, are moved quietly and are never shown as failures.

  Where do I see my progress?

  On Progress (/progress), shown as work done — for example "4 of 7 important accounts protected · 12 minutes total" — never as a risk score. A number Aegis has not measured yet says "not measured yet" rather than showing zero.

  Does Aegis remind me or nag me?

  No. Aegis's standing instruction is to respect your time and needs, never to do anything that reads as nagging, never to fill protected time, and when in doubt to ask less and do more of the work. It reaches you the way you have responded before — in the app, as a Helm to-do, or a Bridge message within your quiet hours.

  Can Aegis include my banks?

  Yes, if you keep them in Reckon and you turn it on: Permissions › What Aegis may do in your accounts › Your banks. Aegis then reads only the NAMES of your banks from Reckon — never balances, numbers or transactions — and lists them with general steps, labelled as general because they are not your bank's own. Each read is written to your access log. It is off until you turn it on, and you can turn it off there at any time.

• The Check page, its results, and "Is this message real?"Aegis

  What do the different check results mean?

  A check of an email address you own ends in one of five states, each said in words on the Check page: • Checking — the check is still running. • Findings — the address was found in one or more known breaches; each finding shows the site, when it happened, what leaked, how relevant Aegis thinks it is and how sure it is, and the steps. • No known findings — nothing was found in the sources Aegis checked. That is not a promise you are safe. • Breach source unavailable — Aegis could not reach the breach source, so nothing was checked. It is not a clean result. • Not connected — the breach source is not connected yet, so nothing was checked.

  Why does a finding ask me questions?

  Only questions whose answers change what you should do — for example whether you still use that account, or whether you changed its password after the breach. Aegis never asks for the password itself, and an email address appearing in a breach does not mean your password was reused.

  What does "Work through this" do?

  It opens a case for that finding (or the case it already belongs to), so the steps, your answers and anything you do are kept together in Cases.

  How does "Is this message real?" work?

  On the Check page, open "Is this message real?". Paste the message's text, upload a screenshot, or type a web address from it as text. Aegis looks at what the message claims and asks for and returns one of: strong warning signs, unresolved suspicion, not enough to tell, or no obvious warning signs. "No obvious warning signs" is never a guarantee the message is genuine. Aegis lists what it could not check, and the next safe step — usually to contact the sender through a route you already trust, not one in the message. Aegis never opens links from the message, and the page never makes them clickable. You can open a case from the result if you need to act.

  Can this chat tell me whether a message I received is real?

  This chat explains how Aegis works; it does not judge a message itself. To check one, open the Check page and choose "Is this message real?": paste the text, add a screenshot, or type the web address from it as text. Aegis answers there with one of the four results, what it could not check, and the next safe step. Aegis never opens links from the message.

• Cases — working through a security problemAegis

  What is a case?

  One place for one security problem — a breach that affects you, a suspicious message you escalated, or something that happened such as a lost phone. Each case shows its next step, who has it (you or Aegis), a timeline, what has to be true for it to be finished, and its actions. Cases also appear as to-dos on your Helm board with a link back to the case.

  Why does a step ask for my approval, and what does "Preview" do?

  Some steps have consequences, so Aegis asks first. Each one says what happened, what Aegis would do, and what could go wrong. Press "Preview" to see exactly what would be done, then approve or leave it. A step you have not answered stays "Waiting for your approval" — Aegis never treats silence as a yes. Purchases, messages to other people, closing an account, changing recovery settings and anything destructive on a device always need their own approval.

  What does "Checked against official guidance" mean on an incident's steps?

  Every step of Aegis's incident playbooks cites the provider's own official help page it rests on — Google, Apple, Microsoft, Facebook and Instagram, the mobile carriers, or the U.S. Federal Trade Commission. Aegis's agent reads each page and confirms the step against it, and the playbook shows "Checked against official guidance" with the date of that check. When a page changes, Aegis checks the step again. Open a case to see each step's sources and the sentence on the page that supports it. The steps are guidance only, and Aegis takes no destructive step from them.

  How do I add evidence or get a copy of my case?

  Use "Add evidence" on the case: what it is, a label, a reference number (for example from your bank or a police report) and your own statement. "Export" downloads the whole case as a file you can give to a bank, a provider or an adviser.

  Can Aegis get my account or money back?

  No. Aegis organises the steps and the evidence and keeps track of who is waiting on whom, but it cannot promise to recover an account, reverse a payment, or get a reply from a site by a certain time.

• What a breach card means, and which addresses Aegis checksAegis

  What does a breach card show?

  One card for each breach your address was found in: the site's name and logo, when the breach happened, what happened, what of yours was exposed (for example your email address, password or phone number), how serious that is, what to do first, and the remaining steps in order. The steps are written once for each breach, from what that breach leaked.

  How serious is "serious"?

  A breach that leaked passwords, payment details or identity documents is marked serious — act today. One that leaked a phone number, home address or date of birth is "worth acting on", because it helps someone target you with convincing scams. One that leaked only an email address is lower risk: expect more spam and phishing.

  What should I do first after a breach?

  Follow the "What to do first" line on the card. When a password leaked, that is almost always: change it on that site, and anywhere else you used the same one, then turn on two-step sign-in.

  Which addresses does Aegis check?

  Only addresses you have shown you own: your sign-in address, and any other address after you open the link Aegis sends to it while signed in. Aegis never looks up someone else's address.

  Why does the email check say it is not connected yet?

  Checking an email address needs Aegis's breach-lookup key. When it is not connected in the environment you are using, Aegis says so and charges nothing; the password check works without it.

  Where does the breach data come from?

  From Have I Been Pwned (haveibeenpwned.com), credited on every result.

• Accounts, devices and recovery readinessAegis

  What is the Accounts page for?

  You list the accounts that matter to you — your main email, your password manager, your phone carrier, your bank — and Aegis orders them by what to strengthen first, with the reason for each place in the order. "I have N minutes" shows what fits in 5, 15 or 30 minutes. Aegis never imports a password export and never asks for a password. If you have not told Aegis whether an account has two-step sign-in or a passkey, it says "Unknown" rather than guessing.

  What is "Strengthen this account"?

  A short guide for that account: each step, why it matters, the date the instructions were last checked, and a link to the provider's own page that you open yourself. In this guide you sign in and change settings on the site yourself (in a session you can let Aegis do more, at the level you chose on Permissions — see "finding time"). When you press "I did this", the step shows "You said you did this". Only when the provider itself confirms it does the step show as confirmed — Aegis keeps the two apart.

  What does the Devices page show?

  The phones, laptops and other devices you told Aegis about: whether each is still supported, its updates setting, and its backup — "No backup", "Backup exists (restore not tested)" or "Backup restored successfully in a test" are different. Every device shows how long ago you last confirmed it. Aegis cannot see your devices; it shows what you told it, with that date. It never wipes or resets a device.

  What is the recovery map, and what is "Rehearse recovery"?

  The recovery map shows which account can recover which — for example your main email resets most other passwords — and flags any single point of failure, where losing one thing would lock you out of several. "Rehearse recovery" asks two questions for one account: could you find your recovery method, and could you reach the official recovery page? Aegis records your answers and the date. It never needs or stores your recovery codes.