What is true, and what is not.

An interactive sandbox where you teach, leash, run, approve, and inspect one simulated Clerk task — cancelling a subscription in a synthetic billing portal. No real accounts are touched. The local-first alpha is a Chrome-on-Windows extension that records and replays the same contracts against fixtures (and, after gates, one unlocked real origin), talking only to a local BFF.

• One species is available: the Clerk. The rest are roadmap.
• The colony animation and its ticker are a labelled simulation, not production telemetry.
• Platform gate for the alpha: Chrome + Windows only.
• Governance: sandbox by default; willing partners graduate to a local Ontogony slice (Kanon + Allagma) via scripts/alpha-ontogony.ps1.
• Receipts are sealed with SHA-256, not cryptographically signed. Anyone can recompute the seal on the verify page.

The site sandbox and the extension both talk only to mymonkey route handlers. The extension never holds Ontogony tokens. When governance is evaluated, the local BFF — never the browser — talks to Kanon and Allagma in live mode.

Chrome extension  ──►  local BFF :3000  ──►  sandbox adapter (default)
                                       └──►  Kanon :5081 / Allagma :5083 (live graduation)

· fixture-first, then one sealed OriginUnlock for a real origin
· service tokens live only on the BFF
· screenshots off by default; credentials are session references

The design assumes the following, and is built against them:

• A page can try to induce actions outside the task. Every external write is evaluated against the leash before it runs; actions off the allowed origins or on the never-list are denied.
• An irreversible action can be triggered accidentally. Irreversible actions always pause for a human, in every leash mode.
• A model or executor can be wrong. Material drift from the demonstration pauses the run rather than improvising.
• A record can be altered after the fact. Receipts are sealed so any change is detectable.

The monkey is the same governed object regardless of what performs the clicks. In the site sandbox, the executor is mymonkey-sandbox-replay/1. In the Chrome extension alpha, it is mymonkey-extension-replay/1— deterministic content-script replay. No model is invoked on the happy path; drift pauses rather than improvises.

• Reversibility depends on the target system; we do not promise universal undo.
• A stop revokes future authority immediately, requests cancellation of in-flight work, and reports only what has actually stopped — it is not an instant global halt.
• No money movement, deletion, or impersonation. Ever.

Report anything that looks wrong to security@mymonkey.ai. We would rather hear it early.