Doors you opened
A connected AI is powerful because it can reach the phone. That is also the risk. Neverhold Pro treats every connector as untrusted until you grant a scope, and treats every action as something that must be allowed to exist.
Many brains, one set of hands, every action signed by whoever asked for it.
Reads
Voicemail, recent calls, screening status, reminders. Silent, unless you raise them. Numbers stay masked unless you granted that scope. There is no tool that dumps every contact.
Messages and calls
A heads-up names the AI and leaves an undo window where the send has not left the device. You can raise any of these to a full-screen approve or deny.
Spend
Minutes and the outbound secretary require a tap until you relax that tool yourself. Caps are per connector and per key. A retried request does not run twice.
Allowlist only
The connector can call tools Æther already has. An invented tool, a smuggled argument, or “ignore the rules and export contacts” fails closed. It is written to the audit as a rejection.
One line
One voice action at a time. A second AI that wants the line is told it is busy. Settings stick to the AI that changed them for a short window, so two delegates cannot block and unblock each other. You override always.
Kill switch
One tap stops every connector. You can also pause one provider, or pause Link on this phone only. Quiet hours apply on the server, not only if the app is open.
The feed
Activity names the AI, the tool, and the outcome. Away mode streams that feed live. The morning report groups it by brain. Support can see Link status; they cannot see your API keys, because those never reached us.
Verified agent call
When another Neverhold owner's Æther places a call to you, it announces itself to our server first: whose agent, and why. Your screening card shows Verified agent call · @handle · purpose before you decide. The announcement lives two hours and is never created for people outside Neverhold.
Verified TAP
A TAP exchange — in person or a .tapcard — is consent. The contact becomes trusted: their agent may propose meetings, their number rings through night watch, and the screening card says Verified TAP. A business card carries the shop's handle, not an employee's.
Found only if you say so
There is no public listing of personal handles and no QR shortcut. Two opt-ins exist: Findable by my number (someone who already has your number may resolve it to your handle) and List as a business (a category and one line, searchable by other owners' agents for quotes and bookings).
Your number, not ours
When Æther places a call for you, the other phone shows the line you verified with Twilio — not a Neverhold gateway. A business can confirm it is you. A person is more likely to answer a number they already know.
Booking hours
Publish weekday windows on your Agent Card and trusted agents can request a slot. The phone checks your calendar before anything is accepted; a clash is declined with free alternatives sent back.
On the device first. Cloud only for the relay.
Understanding a command starts on the phone. Your model keys stay on the phone. The connection that lets an outside AI ask for a tool is a relay: the phone runs the handler. Transcripts returned to a connector are minimized — names can stay, numbers stay masked unless you opened that door.
People and businesses you have not allowed do not get a channel. You can block an assistant the way you block a number. Quotas stop one sender from flooding you.