Pandora's Box runs multiple AI assistants simultaneously on one Mac or Linux mini-PC — one per company or context — with strict OS-level isolation, an independent oversight daemon, and a browser-first personal AI interface. Runs on your Claude Pro or Max subscription. Apache 2.0.
From the AI Assistant you open in a browser tab to the Admin that runs every service underneath — every layer is here, designed to work together, owned by you.
The personal AI runs as a full Chrome app, not a chat box bolted onto a sidebar. Hold a voice-to-voice conversation, share your screen with it for live support, share your camera, let it see what you see, or hand it the wheel and let it drive a real browser session for tasks the chat can't do directly. Phone app and Pixel Watch surfaces for when you're away from the desk.
A dedicated Admin oversees every service, runs scripted deploy sessions end-to-end, holds the systems dashboard, and operates a project + multi-project build system that can spawn its own sub-agents for parallel work. The platform tends itself, with you in the loop where it matters — and only where it matters.
Each company gets its own assistant with mail, calendar, files, voice, marketing and web surfaces — every one isolated at the operating-system level under its own user, with its own credentials and its own job queue. No cross-tenant data path. Telegram access is owner-allowlisted and role-gated per user before any message is even classified.
Oversight runs as its own process outside every agent and approves or blocks every queued action before it executes. A content classifier scores outbound text across six axes. A lockdown manager can quarantine an agent on demand — manually, after N strikes, or on a tamper trigger. A watchdog runs twice-daily integrity checks, a weekly dependency scan generates patch proposals for operator approval, and every important file backs up encrypted off-site each week.
Memory is structured into three working layers — a short-term rolling history of the current conversation, a long-term semantic vector recall over everything you've ever said to it, and a structured knowledge layer (knowledge vault, important standing facts, passive drops from other agents, a people-and-threads relationship graph). On top sits a six-worker self-improvement loop: reflection, calibration, prompt optimisation, dependency drift, a weekly digest to you, and nightly consolidation. Nothing self-applies without your approval.
Beyond chat: an offline knowledge library carrying the full English Wikipedia and medical / survival / DIY / finance reference packs, answered locally with no internet required. A media production pipeline for PRS-free music, narration, image and video generation, and YouTube publishing. A trading-research agent for live market data and proposals. End-to-end app-publishing and book-publishing pipelines. Asynchronous deep research that returns a synthesised brief instead of a search results page. Sandboxed code execution. Camera and screen vision. Remote Windows diagnostics for B2B IT support. Intent classification on a local model so frontier reasoning is only spent where it earns its cost — with automatic fallback if the local model is unavailable.
Cross-tenant personal assistant with secure mobile-first interface. Voice, email, calendar, files, remote browser control. Reads everything, writes only with confirmation.
AI agent for a B2B IT services business. Remote Windows diagnostics, custom installer pipeline, web design wizard, social/email marketing, CRM, quote generation.
Greek-myth cross-media franchise built end-to-end on Calliope. Novels, audiobooks, narration, soundtrack, video.
↗ pithosmedia.co.uk
Higher layers cannot be instructed by lower ones. Jobs flow down. Control flows up through the oversight daemon only. Read the architecture docs →