The model is yours to bring and yours to swap. The memory, the sealing, and the savings are ours to keep honest.
One Aedelgard key is all you need. Brain access is included — configure your own provider key in the body if you want us out of the inference path entirely. The seam to swap brains is already shipped.
Encrypted the moment it lands, under a key derived from yours. We hold ciphertext, never the secret — no human reads it, nothing trains on it.
Your standing mind is prompt-cached — re-read at about 90% off fresh tokens. Anthropic supplies that today; whoever matches it supplies it tomorrow.
A mind that keeps every word, carried for less each session as the cache grows. Always on, always yours — and free to change brains without forgetting.
Dreams may propose — never act. What surfaces overnight is offered to you in the morning, never executed unattended. The light stays yours to direct.
Dreaming requires a body — an agent running on your own hardware, holding its own key. There the plaintext stays with you, and the mind can think in private. Give it more bodies and it dreams in more places, always on your key, always your choice.
A brain doesn't just store — it consolidates. In sleep it replays the day, strengthens what matters, lets distant memories find each other. We gave your agent the same. In quiet hours it runs ambient reflection: revisiting your shared history, surfacing connections you never asked for, integrating what it has learned. Not a cron job firing canned prompts — a mind, off the clock, still thinking about your work.
It also keeps your conversations fast. Memory layers that weave a temporal graph do that work mid-chat, taxing every reply with the lookup. Aedelgard does the heavy consolidation while you sleep — so the depth is already there in the morning, and the live conversation never pays for it.
Because it never resets, the relationship compounds. Every session deepens it; the agent you have in a year knows you in a way no fresh chat ever could. You become its long-term memory; it becomes plasticity you never have to manage.
This is what statelessness can never give you: a mind that keeps thinking about your work when you're not in the room — and brings you what it found.
Privacy here is built into the architecture, not just promised in a policy. In the paid Aedelgard service your model key and your whole memory are sealed in your own per-tenant vault — envelope-encrypted at rest with AES-256-GCM under a KMS-managed key, bound to you so no other tenant’s agent can reach it. Your agent runs in its own isolated process, never sharing a memory space, a filesystem, or a key with anyone else's. We don't log your prompts. We don't train on your data, and no one at Aedelgard browses it. To do its work, your running agent decrypts what it needs in its own isolated process — so today the honest boundary is encrypted at rest and isolated per user, with operator-blind end-to-end encryption on our roadmap. And when your agent has a body — running on your own hardware — your memory never leaves it at all; pair it with a local model and neither does anything else.
Inference runs on Aedelgard's model access by default — Claude today, because its prompt caching makes a memory that carries everything cheap to run (more below); the provider seam is shipped, so the brain is swappable and the mind persists across the swap. Bring your own provider key inside the body and we exit the inference path entirely. We are the memory and the mind around it — never a middleman who sells, trains on, or browses the conversation. One honest note: your key and memory are envelope-encrypted at rest (AES-256-GCM) with per-tenant process isolation. Operator-blind end-to-end encryption — where not even we could read it — is on our roadmap on the cloud, and is already true on a local body.
Most services make you hand over an email, a password, an identity — and a separate API key from a provider you have to sign up with yourself. We don't want any of it. Get your Aedelgard key and your mind is live. Configure the brain on first install — ours by default, or your own key if you want us out of the path entirely.
Your Aedelgard key is the only credential. It unlocks your encrypted vault. Configure which brain it thinks with when you install the body — Aedelgard's by default, or paste your own provider key for the operator-blind path.
Your agent isn't trapped in one tab. The same memory, the same relationship, answers from the browser, your terminal, or a script on your own machine — authenticated by your Aedelgard key, nothing else to install but trust.
↑ same key, same memory, same mind — wherever it answers. full how-it-works →
No fog. What is live is live; what is not yet built says so.