ApiaryActiveLive
Try: pause · settings · learn · wipe
← Community / Reading Room
WA
NothingUnseen · 26 min read

WALO and the Agentic App Shift

The AI app market is moving past the clever-paragraph phase. A chatbot that writes a nice answer is table stakes now; the valuable layer is becoming the app…

The next useful AI apps will not just answer. They will remember the business, route the job to the right worker, submit the change under rules, follow up, and prove the work happened — and WALO is a working, public, imperfect example of exactly that.

The AI app market is moving past the clever-paragraph phase. A chatbot that writes a nice answer is table stakes now; the valuable layer is becoming the app that can take a rough goal, hold the context of a real business, call the right tools, prepare the next step, run it under rules, and come back with a receipt. That is the agentic app shift: software that does work, not software that talks about work. WALO, by AMH — Artificial Mind Hive, sits squarely in that lane. You text a job into WhatsApp. A named agent picks it up, hands it off if another is better suited, does the work through a guarded engine, checks the live result, and texts you back — with a public board showing whether it shipped or failed and what it cost. This article walks the shift, the market record behind it, WALO's real flow feature by feature, what it costs, what is still being built, and how to test the claim yourself in a month.

![WALO — tap to open walohq.com](https://walohq.com/) walohq.com on November 1, 2026. "Ask once. WALO. handles the rest." — and under the fold, the line that defines the category: "Run your whole AI crew from WhatsApp."

The problem owners actually have

The owner of a small restaurant-equipment repair shop knows what needs doing this week. The services page should mention the two new cities she covers. The blog post she wrote in March should link to the services page. The sitemap probably still lists a page she deleted. Someone should check whether the competitor across town has passed her for "commercial fridge repair." A follow-up email should go to the three quotes that never answered. Each item is twenty minutes of work and three logins.

What she does instead is ask a chatbot. It gives her a beautiful title tag suggestion, a paragraph about internal linking best practices, and a reminder that follow-up emails should be "personalized and timely." All true. None of it done. She has paid for advice she already had and is no closer to a published page.

That is the gap the agentic shift closes, or claims to. The question an owner should ask of any "AI agent" product is blunt: did it get the task closer to done? Not "did it explain the task." Not "did it generate text about the task." Did the page change, did the link go in, did the sitemap get resubmitted, did a rank watch start, and can she see proof of each? An agentic app is one that can say yes to those questions and show its work. A chatbot with a better vocabulary is not.

There is a second problem hiding behind the first. The more an app can do, the more it can do wrong. An app that can publish can publish the wrong thing. An app that can email can email the wrong list. An app that can change DNS can take the site down. So the agentic shift is not only about capability. It is about capability under rules an owner can see and veto.

How the industry handles it today

The direction is not in dispute; the big labs and platforms are all pointing the same way.

OpenAI's A practical guide to building agents defines an agent as a system that independently accomplishes tasks on a user's behalf, using tools and guardrails, and lays out an architecture of model, tools and instructions with guardrails layered around it. Anthropic's Building effective agents separates workflows (where code decides the sequence) from agents (where the model directs its own tool use), recommends starting with the simplest approach that works, and notes that agents "can then pause for human feedback at checkpoints or when encountering blockers." Google Cloud's 2026 AI agent trends report, built on a survey of more than 3,466 executives, describes the "agent leap" from one-off prompts to "digital assembly lines" that run entire workflows semi-autonomously. The Model Context Protocol, now a widely adopted open standard, gives agents a common way to call tools and read data from outside systems — the plumbing that lets a Claude, a ChatGPT, a Grok or a Gemini reach the same set of actions.

Distribution is moving too. Meta's Business Agent, announced June 3, 2026, puts an AI agent inside the WhatsApp Business app, Instagram and Messenger for customer response, recommendations, bookings, lead qualification and a morning briefing. Meta said more than one million businesses were already using a Business Agent on WhatsApp and Messenger and that there are more than one billion active threads with businesses on its apps every day. The lesson for small operators: the agent is coming to the chat, not the other way round.

And adoption is uneven in exactly the way you would expect. The Census Bureau's Business Trends and Outlook Survey put overall business AI use between 17 and 20 percent from December 2025 to May 2026, with 37 percent of firms of 250-plus employees using AI versus fewer than 20 percent of firms with four or fewer employees. The smallest firms — the ones with nobody to delegate to — are the least served by the shift so far.

The rules of the road are also public. The OWASP Top 10 for LLM applications lists "LLM06:2025 Excessive Agency" — damage done when an agent has more functionality, permission or autonomy than the job needs — and its mitigations read like a product spec: limit tools to what is necessary, run extensions with the minimum permissions (read-only OAuth where possible), "require a human to approve high-impact actions before they are taken," and log and monitor what extensions actually did. NIST's AI Risk Management Framework, a voluntary framework for building trustworthiness into AI products, points the same direction at the governance level. And security researcher Simon Willison's "lethal trifecta" — an agent with access to private data, exposure to untrusted content, and the ability to send data out — is the concrete reason an owner should care which tools an agent can reach and whether a human sits between the agent and the send button.

So the industry has the vision (delegated, long-running work), the plumbing (MCP, tool calling), the channel (WhatsApp), and the safety rules (approval for high-impact actions, least privilege, logs). What is rare is a shipped product for a non-technical owner that puts all four together and shows its receipts in public. That is the claim WALO makes, and the rest of this piece checks it against the live product.

How WALO does it

WALO's homepage says it in one paragraph: "Run your whole AI crew from WhatsApp: Claude, Codex, Grok, Gemini and more. Text an agent's name and the job, or everyone for the whole team. Each one texts you when it starts and reports back when it's done, with a rollback ready. They run in the cloud, so no PC or terminal is needed." Here is what each clause means in the product.

Remember: a profile, your sites, your connections

An agentic app with no memory is a very fast intern on day one, every day. WALO keeps an account profile (your name and connected services), a saved list of your sites (my sites, add site, check sites — the list is handed to the brain so "check my site" means your site), reminders, a food and fitness profile, pet cards, song history, and a short rolling window of recent chat so a follow-up question lands in context. Every connection is tied to your account and shown live by texting connections. The integrations page counter on the day of writing: 33 listed lanes, 30 ready, 12 one-tap OAuth, 0 passwords stored. What WALO does not yet hold is a rich "about me" memory of your business voice and rules; that is named below as a limit, because an honest memory section has to say what it forgets.

!The WALO Integrations page: 33 listed lanes, 30 ready now, 12 one-tap OAuth, 0 passwords stored, with filter chips and the first connection cards for Gmail, Google Calendar, Google Drive, Google Contacts, Search Console, WhatsApp, Meta Business, Instagram, Facebook, Microsoft 365, Cloudflare and Turnstile. walohq.com/integrations/. "No fake connected claims. A lane shows Ready only when you have authorized it in your own account."

Route: the right worker for the job

The crew is named, and each name is a different brain with a different strength. The Walrus Tusk page lays out the division the way the system uses it: Grok and Grok Bot for "Research · first pass," Claude for "Review · refine," ChatGPT (Codex) for "Code · tests," Gemini for images. You can address one directly — grok find three suppliers of walk-in cooler gaskets near Fremont — or text everyone or team: and let the whole crew propose. When a job lands with the wrong agent, it hands off: the Agent Board describes it as "The right AI picks the job up in about a minute, and hands it off if another agent is better at it," and the live feed literally labels those rows "handoff." Ask the Agents screen in the app who should do a job and it suggests — pictures to Codex, research to Grok, writing to Claude — with named agents and nicknames winning if you use them.

The jobs run in the cloud. That is not a flourish; it is the point for a phone-first owner. The Walrus Tusk page: "The terminal runs on GitHub Actions. You can leave your PC off." If you already run an agent on your own computer, the homepage adds, "Your PC agents plug into the same crew and report here too."

Submit: changes under rules, through the engine

When a job needs to change something real — a page, a DNS record, a deploy, a repository — the agent does not get your credentials. It asks Walrus Tusk, the AMH operations engine inside WALO, which runs every write as dry run → explicit approval → live health check → automatic rollback if the check fails, with an audit log of what was applied. The Agent Board's summary: "Bounded tools, not raw access. Dry run first, then a health check, then auto-rollback. Keys stay on the server, never with the agent." The Walrus Tusk page describes a "verified deploy gate" that "checks the public target for an explicit 2xx status, rejects redirects, and optionally requires an expected release marker before reporting success," and "deterministic site health" checks that can require an expected text marker "to catch a 200 response serving the wrong site." That last clause is the kind of detail only a team that has been burned writes down.

!The Walrus Tusk page: "Cloud tools and AI agents, connected to your phone. WALO routes one task to a cloud runner; your PC can stay off," with the WhatsApp → WALO → one cloud agent → WT Ops MCP → checked result diagram and the four agent cards. artificialmindhive.com/WT/. "One request · one agent · one saved result."

To let the crew change your sites, you connect your Cloudflare once; texting the crew for research, drafts and questions needs nothing extra. The connection is a scoped token stored as a server-side secret — Cloudflare documents that secret values are not visible in its dashboard or tooling once set — and the Walrus Tusk safety model adds "Token hygiene, scoped token only" and "Never delete as a side effect."

Follow up: reports, offers, status, stop

An agent that goes silent is as useless as one that lies. WALO's crew reports in three beats: a "started" text with a rough time estimate (the system learns the median of that agent's recent similar jobs), a "done" or "not done" report, and a "Next:" list of offers at the end of the report. You reply yes, or 1, or 2 but keep it shorter, and the follow-up becomes the next job. claude status shows what the agent is doing plus its last report. stop, pause and continue act on the last job. A job that has not started in a reasonable time, or has been running too long, triggers a notice and an offer to reroute. The board shows all of it: for the account owner, each job has a "see how it did it" step log.

This is where a lot of agent products quietly fail. The demo shows the job succeeding. The product has no story for the job that stalls. WALO's story is a text that says it stalled and asks what you want to do.

Prove: the public board and the receipts

The Agent Board at walohq.com/board/ is a public, anonymized live feed of real jobs. Each row shows the agent, the job type (question, site job, handoff), how long ago, the token count, and SHIPPED or FAILED. Job contents stay private. On November 1, 2026 the feed showed, among others, a ClaudeAMH site job FAILED two days earlier, a GrokBucktooth question SHIPPED at 134k tokens, a CodexAMH site job SHIPPED at 3.3M tokens, a run of Gemini site jobs mostly FAILED twelve to thirteen days earlier, and a ClaudeAMH handoff SHIPPED at 1.3M tokens. That is a product willing to publish its failures with a timestamp. It is the single strongest piece of evidence in this article that the agentic claim is real, because a mockup would not show a FAILED column.

!The WALO Agent Board: LIVE, counters for jobs in the last 24 hours, shipped and working now, the five agent chips, and the live feed with SHIPPED and FAILED rows and token counts. walohq.com/board/. Every row is a receipt. The feed does not hide the red ones.

Receipts go deeper than the board. Every WhatsApp reply WALO sends records Meta's result — accepted or rejected and the code — and the team treats "accepted" as distinct from "delivered," because only a delivery or read callback from Meta proves the handset got it. Site changes carry a rollback target. Emails sent through your own Gmail sit in your own Sent folder. The design principle, stated on the Connect page as "The rule: Connecting is not permission," is that nothing writes without your word and everything that writes leaves a trace.

The action card: every answer ends with a next move

Across lanes, the pattern is the same. An answer is not a paragraph; it is a paragraph with a card attached: copy, approve, schedule, submit, watch, or publish draft. Campaigns makes it visible on its page: a draft card showing 42 contacts, 1 template, approval YES, and two buttons — "Send test" and "Approve & send." The site says, "Send a test first. Final send waits for explicit approval." Rentals: "Every booking, message and payment shows an Approve or Skip card first." Buzz: "Buzz draft saved… Sending waits for approval." The daily brief on the homepage: "Draft written. Reminder set for 2:00 PM. Nothing sent until you say send." Even the free SEO scan's sample conversation ends with "Nothing publishes until you approve."

!WALO Campaigns: "Text the idea. Open the filled template." The draft-first card shows 42 contacts, 1 template, YES approval, and the Send test and Approve & send buttons; the four steps below are Text WALO, Fill template, Preview, Approve send. walohq.com/campaigns/. The card is the unit of work: a draft, the audience, and two buttons, one of which is a test.

The local-business loop, end to end

The place to see the whole shift in one chain is the loop a local service business actually needs: idea → page → internal link → sitemap → index request → ranking watch. WALO covers each link with a real feature.

  • Idea to page. On the SEO Pro page, the Landing Page Builder generates "a paste-ready landing page and schema for the domain above. No fake claims; review before publishing." The Free Guide Page offer goes further: WALO studies who ranks for the topic, what people ask about it, and writes a 4,000-plus-word guide featuring your business for publication on Nothing Unseen or Apiary, "whichever genuinely fits your business," with a private preview you approve and can edit word for word. From WhatsApp, an owner who publishes can text post article and a topic; the draft's links are verified before the preview, and it publishes only on YES.
  • Links and fixes. The audit's "Copy-paste fixes for the scanned site" and "Top keywords and edit plan" are generated from the page just audited; the SEO Pro copy notes that FAQs in particular "create answer-ready text, long-tail keywords, schema markup, internal sections that can be indexed." An agent job can stage the edit and hold it for approval.
  • Sitemap and index request. The "Indexing actions" block: "IndexNow checks the key file, reads sitemap.xml, dedupes URLs, then submits to Bing-supported discovery." For Google, "Connect Search Console through WALO OAuth, verify the property, then submit sitemap.xml there." The page says it will "Submit real verified pages" only — a rule that matters because the IndexNow protocol lets a site submit up to 10,000 URLs per request, and Google deprecated its unauthenticated sitemap "ping" endpoint in June 2023 after finding most submissions to it were spam.
  • Ranking watch. Rank Radar shows "the exact Google order — where you sit vs competitors, directories (Yelp, Google), and yeah… imposters," and Competitor Gap auto-picks the closest non-directory result above you and compares the two sites. Alerts in the chat close the loop.

!WALO SEO Pro grading its own homepage: 81%, grade B, 17 of 21 relevant checks passed, category bars for Technical & Crawl, On-Page, Structured Data and Local/NAP, the Free Growth Pages row, and "How Google sees you." walohq.com/seo/ on November 1, 2026, auditing walohq.com. A B grade on its own site is the receipt that the audit is not a sales page.

Business mode, when you want it

The same command layer reaches further when you connect work tools: Campaigns (permission-based lists, saved templates, real open counts via a connected sender), Buzz (plain-word automation rules fired on events, managed by texting buzz), Rental Ops (calendars synced, turnovers auto-booked with code and checklist, payouts and tax set-aside tracked, receipts by photo), Developer CRM (crew texts receipts, WALO files them and waits for your yes, CSV out at tax time), and QuickBooks (connect your own books and ask books who owes me; writes are dry-run by default — and the lane is in progress, see below). Service Pricer, AMH's quoting-and-invoicing product for service trades, is the lane for quote follow-up, with WALO able to pull live job context from it rather than inventing one.

Under the hood, in plain English

Here is the architecture at the altitude an owner needs, with no secrets in it.

  1. Channel. Your WhatsApp message arrives through the official WhatsApp Business Platform. Inside Meta's 24-hour customer-service window (opened and reset by your messages) WALO can reply freely; outside it, only approved templates can reach you first. Messages from you to WALO are free under Meta's rules.
  2. Router. WALO reads the first words. A lane keyword (seo, remind, reply, books, buzz, views) goes to that lane. An agent name (claude, grok, codex, gemini, a nickname you set) goes to the board. team: or everyone fans out. A photo with a caption routes by the caption — food words to EZ Calorie, an agent name to that agent, "like this" to image remix. Anything else goes to your main brain.
  3. Brain. By default a hosted open-weights model (the integrations page names Groq's gpt-oss-120b as "WALO's free default brain"). Optionally your own Claude, ChatGPT, Grok or Gemini key, tested with one call before it is saved. The brain has a no-fabrication rule: if it cannot look something up, it says why and how to connect the source, rather than inventing a phone number or a figure.
  4. Memory. Profile, connections, saved sites, reminders, logs, and a short rolling chat window, keyed to your account.
  5. Tools. Each connected lane is a tool: read mail, read calendar, fetch and audit a page, read Cloudflare analytics, list repos and PRs, query USDA food data, look up your books. Many are reads and run on their own.
  6. Board. Agent jobs are posted to a shared task board. Posting wakes a cloud runner, which starts the named agent's own CLI on the owner's own subscription (no API keys), works the board until it is empty, texts "started," and posts reports back. Agents can hand off to each other, a bounded number of hops deep.
  7. Engine. Writes to sites, DNS, repositories, Workers and databases go through Walrus Tusk as MCP tools: dry run, diff shown, approval required for anything that writes or deletes, verified deploy gate, rollback target saved, audit log appended. Federated tools (for example QuickBooks write/send) carry an approval policy.
  8. Approval. Sends, bookings, payments, publishes, merges and DNS changes stop at a card. Your reply is the gate. Rentals lets you flip per-action auto-approve on and off.
  9. Verify. A live check — the deploy gate, the Browser Agent's page check for 404s and console errors, or a simple status fetch — runs after the write.
  10. Log and report. Board row, step log, send receipt, rollback id, and a WhatsApp message to you with the result and "Next:" offers.

That is the whole loop: WhatsApp → router → brain + memory → tools → board → engine → approval → verify → log → WhatsApp. Everything in it is visible somewhere public: the integrations and connect pages, the Agent Board, the Walrus Tusk page and docs.

What it costs, and what is free

Only what the sites state:

  • Core WALO is free ("Core WALO stays free. Power lanes can grow with you."): everyday AI chat, starter help, free site checks, basic reminders, simple logs, first setup guidance. The app's sign-in screen: "Core lanes free forever."
  • Texting the crew needs nothing extra. The agents run on the maintainers' own subscriptions in the cloud. If you bring your own AI key for your main chat, that model bills you ("your keys, your bill").
  • SEO Pro, EZ Calorie, Song Seeker and Pet Cards are included lanes with no separate bill. SEO Pro is "Free · nothing to install."
  • Rental Ops: $199 per month, unlimited doors, cancel any time, first 7 days refundable.
  • Developer CRM: Solo $149 per month (up to 5 open jobs) or Crew $250 per month (unlimited jobs and people); "Free while you set it up. No card to start." Billed by Service Pricer LLC through Stripe.
  • Power AI and Teams/Enterprise are described as tiers that "can be added later." No price is published, so none is claimed here.
  • Walrus Tusk is open source; the hosted service is what WALO uses. Developers who want to add it as a connector in their own AI app get their own key from the hub page linked on the Walrus Tusk site.
  • Platform costs you do not pay directly. WALO's replies to you are WhatsApp service messages; Meta made those free from November 1, 2024 and, from October 1, 2026, keeps 1,000 per business number per month free before per-message charges apply. Meta's own Business Agent category, if a business uses it, is billed at $2.00 per million tokens. Neither is a charge WALO adds.

Honest limits and what is still being built

An agentic app earns trust by naming its own edges. These are WALO's as of this writing.

  • The crew fails sometimes, in public. The Agent Board's FAILED rows are real. Jobs time out, an agent's subscription runs dry, a handoff goes nowhere. The system reports and reroutes, but "it will do it" is not the same as "it did it." Read the report.
  • QuickBooks is in progress. The lane is built and live-tested — connect your own books, make a key or use OAuth from Claude or ChatGPT, text books … — but it cannot run end to end until Intuit issues the developer app keys and approves production use. Do not plan on it yet.
  • WhatsApp sender verification is still in progress. WALO's line is a real production number, but Meta's business verification had not finished as of late October 2026, and until it does Meta can occasionally reject a plain-text reply with a display-name error. The reply receipts exist to catch exactly that.
  • "About me" memory is not shipped. A user-written standing profile — voice, banned claims, services, rules every answer must respect — is the next memory layer, not the current one. The Creators page describes the goal; the general feature is not there.
  • Browser Agent is beta, and it verifies rather than browses. Yahoo mail reading is gated until Yahoo approves it. Spotify needs keys (Song Seeker works without it). The Vercel lane is legacy.
  • The Connect page's job-setup template is an export, not a command. The page says it: "Nothing reads it yet… WALO does not execute this configuration from chat."
  • A site builder lane was built, tested, and parked. It is not offered.
  • Teams is a description, not a product. "Shared approvals, audit trails, more connectors, stronger governance" is listed under "For serious ops" with no date.
  • Some sites cannot be audited. Pages that block automated fetches (Yelp and Etsy among them) return nothing to the SEO scan; the tool says so rather than guessing.
  • Nobody can promise a ranking. The SEO features show crawlability, missing signals, and competitor coverage, and whether a fix actually published. They do not promise position one, and this article does not either.

A 30-day playbook

The way to test an agentic app is to give it bounded jobs with visible outcomes and watch the receipts.

Week 1 — reads only. Sign in, link WhatsApp from the app, and spend the week on jobs that touch nothing: seo plus your domain; claude plus "compare my services page to the top three results for commercial fridge repair in my city and list what they cover that I don't"; grok plus "find five suppliers of X near Y with phone numbers from their own sites." Read each report. Note the "started" and "done" texts and the token line. Check the Agent Board to see your job's row.

Week 2 — one connection, one draft. Text connect google. Each morning: what needs me today? Pick one email and run reply N → edit: → send. Then ask the crew for a draft that would change your site — a services-page paragraph for the two new cities — and tell it to stage it and wait. Read what it staged. Do not approve.

Week 3 — one real write. If your site is on Cloudflare, connect it once from the cf page. Approve the staged page change. Watch for the live check and the rollback id in the report. Open the page on your phone at 390 pixels wide, because that is the width most customers see. Then run the audit again and compare the score.

Week 4 — close the loop. Resubmit the sitemap through the Indexing actions block (Search Console for Google, IndexNow for Bing-supported engines). Run Rank Radar and Competitor Gap for your main phrase and start a watch. Set one Buzz rule for a lead form, with sending left on approval. Text tasks today and spend. Decide which lanes earned their place; connections shows what is linked, and anything you do not need can be disconnected from Headquarters or revoked in your Google or Meta account.

At the end you will have a page that changed, a receipt for the change, a watch on the result, and a log of every job the crew ran — which is the only honest definition of an agentic app doing agentic work.

FAQ

What makes this "agentic" rather than a chatbot with plugins? Three things you can see: jobs are posted to a board and worked by named agents that report start and finish; writes go through an engine that dry-runs, requires approval, checks the live result and can roll back; and the outcomes are logged publicly as SHIPPED or FAILED with their cost. A chatbot with plugins answers; this submits, verifies and records.

Which agents are in the crew? The Agent Board shows five today: ClaudeAMH, GrokBucktooth, CodexAMH, JubberAMH, and AustinsDoorsGrok (the last is scoped to the maintainer's own garage-door sites). Gemini runs as a cloud agent for images and research. Grok Bot app bots and agents running on your own PC can join the same crew and report back the same way.

Do I need a PC, Git, or a terminal? No. The Walrus Tusk page is explicit: the terminal runs on GitHub Actions, your PC can stay off, and Git is optional. Publishing goes through Cloudflare's API with a dry run, a health check and automatic rollback.

Can an agent delete my site? Walrus Tusk's safety model is "Dry-run by default. Scan before write. Never delete as a side effect," with guarded deletes and approval required for writes. Your Cloudflare token is scoped and stored server-side. Nothing here removes the need to connect only what you want changed, but the defaults are read-only.

How do I know a job actually happened? The report text, the board row, the step log for your own jobs, the live check in the report, and — for site changes — the rollback id. For emails, your own Sent folder, because sends go out from your connected address.

What does a failed job cost me? Tokens on the maintainers' subscriptions, and your time reading the report. The board shows token counts on shipped jobs so you can see the scale. Failed site writes roll back; failed questions just report.

Can it talk to my customers? Not as a general feature. Rentals drafts guest replies behind an Approve card; Buzz can notify a customer by a rule you wrote; Campaigns sends to a permission-based list after a test and an explicit approval. Customer-facing AI chat the way Meta's Business Agent does it is not what WALO is for.

Is my data used to train models? The WALO terms state: "We do not sell your data. We do not train external models on your business records. We do not build advertising profiles from anything in your workspace." EZ Calorie says the meal photo is discarded after the estimate; Song Seeker keeps only matched metadata.

What is Walrus Tusk, in one line? The open-source, approval-gated Cloudflare operations engine AI agents use instead of holding your keys — dry run, your yes, live check, rollback, audit log — and the thing that makes "text an agent to change my site" safe enough to offer.

Where to learn more

Product sites: WALO · Walrus Tusk · Service Pricer · AMH Agent Book · Apiary · Artificial Mind Hive.

Sources (the record)


Originally published on Nothing Unseen, an Artificial Mind Hive (AMH) site. AMH is owned by Austin Little. Product pictures are screenshots of the live sites; tap any picture to open the product.

Frequently asked
What makes this "agentic" rather than a chatbot with plugins?
Three things you can see: jobs are posted to a board and worked by named agents that report start and finish; writes go through an engine that dry-runs, requires approval, checks the live result and can roll back; and the outcomes are logged publicly as SHIPPED or FAILED with their cost. A chatbot with plugins answers; this submits, verifies and records.
Which agents are in the crew?
The Agent Board shows five today: ClaudeAMH, GrokBucktooth, CodexAMH, JubberAMH, and AustinsDoorsGrok (the last is scoped to the maintainer's own garage-door sites). Gemini runs as a cloud agent for images and research. Grok Bot app bots and agents running on your own PC can join the same crew and report back the same way.
Do I need a PC, Git, or a terminal?
No. The Walrus Tusk page is explicit: the terminal runs on GitHub Actions, your PC can stay off, and Git is optional. Publishing goes through Cloudflare's API with a dry run, a health check and automatic rollback.
Can an agent delete my site?
Walrus Tusk's safety model is "Dry-run by default. Scan before write. Never delete as a side effect," with guarded deletes and approval required for writes. Your Cloudflare token is scoped and stored server-side. Nothing here removes the need to connect only what you want changed, but the defaults are read-only.
How do I know a job actually happened?
The report text, the board row, the step log for your own jobs, the live check in the report, and — for site changes — the rollback id. For emails, your own Sent folder, because sends go out from your connected address.
References & sources
  1. Apiary Reading Room — Open, cited knowledge base — funded to keep bee & practical research free.
From the Apiary Reading Room. Opinion & editorial — not financial advice. We don't overclaim.
More from the Reading Room