caiioo

A spring shipping recap — drawn in print.

Tue, 28 Apr 2026 14:00:00 GMT

A spring shipping recap — drawn in print. Five PebbleFlow releases this April brought: • Personal Intuition — cross-thread memory that surfaces relevant moments naturally as you chat • Seeing-Eye Dog — vision routing so text-only models (DeepSeek, Kimi, local Ollama) can read images • Sub-agent committees — agents that spin up specialists or form a working group • Video and music generation via Veo 3.1, Sora 2 Pro, Seedance, and Lyria 3 Pro • XLSX cell-level tracked changes — spreadsheet redlining with the same accept/reject UX as Word • Ask-User dialogs for human-in-the-loop collaboration • SQL query tool for SQLite databases • Instant Tool Chooser running on-device in ~10ms • Gemini Flash TTS — 30 voices, 70+ languages • On-device Whisper dictation — speech-to-text that never leaves your device • PebbleFlow public API (tester tier) • Inbound messaging + AI tag-team response (tester tier) • Linux and macOS apps shipped The botanical print above was made with PebbleFlow's image generation — then refined across several rounds of human direction and editing. Most AI companies brand themselves with neon gradients, glowing neural nets, or cyberpunk grids. We chose William Morris meets Japanese woodblock — because the point of AI isn't to flatten human style into a single futuristic house aesthetic. It's to give every person, every team, every taste, more room to be themselves. AI should empower human creativity, not replace it with a default style. pebbleflow.ai

View on twitter View on bluesky View on threads View on instagram View on facebook View on linkedin

PebbleFlow 0.9.718 ships two features that land on the same philosophical point: personalization and

Mon, 27 Apr 2026 17:04:36 GMT

PebbleFlow 0.9.718 ships two features that land on the same philosophical point: personalization and responsiveness shouldn't require trading away privacy or burning tokens. Personal Intuition PebbleFlow now maintains a cross-conversation associative memory of your history with it. Every agent turn you have is indexed into a local embedding store. When you start a new conversation, the top-K most relevant chunks of your past are surfaced as cues that the agent can respond to in one of three ways: subtly adapt its style based on what it's learned about how you work, explicitly retrieve a specific memory via the new memory.expand(id) tool, or ignore them if they're not useful. The load-bearing part is where the memory lives. The memory index — embeddings, chunks, the whole associative graph — stays on your device only. It's a locally re-derivable projection of your conversation history, not a synced artifact. Our cloud sync explicitly excludes it (tested and locked in via guard tests). You can export the whole memory as a backup and import it into another device. Your history with PebbleFlow belongs to you. Private Conversations are fully insulated. If a thread is marked private, its chunks go into a separate storage namespace that is excluded from cross-thread retrieval, cloud sync, and memory.expand. Belt and suspenders. Available on the free tier. Off by default. You turn it on when you want it. Instant Tool Chooser PebbleFlow now picks the right tools for any conversation in roughly 10 milliseconds. That's under 1/20th of a second, entirely on your device, using a local bi-encoder retrieval model that runs natively in the extension, the desktop apps, and the iOS/Android apps. Two practical consequences. First, workflows feel instant — no user-visible delay while the agent figures out which tools to reach for. Second, it saves an LLM call. The alternative was a "Quick Tasks" helper LLM that makes the same decision using tokens. The on-device chooser does it for free. Used to be a tester-only feature. As of 0.9.718, it's the default for every tier — free, pro, platform, teams, enterprise. On every platform. Both features reinforce the same architectural thesis we wrote about in our recent trust posts: the workspace runs on your device. Your personalization lives on your device. Your speed comes from your device. We're not in the middle. Download PebbleFlow or update to 0.9.718: https://pebbleflow.ai #PebbleFlow #PrivacyFirst #LocalFirst #AIAgent #AgenticWorkflow

View on threads View on instagram View on twitter View on bluesky View on linkedin View on facebook

It's not GPT-5.5.

Mon, 27 Apr 2026 16:00:00 GMT

It's not GPT-5.5. It's not Gemini 3.1 Pro. It's not Grok 4.20. It's Xiaomi MiMo-V2.5-Pro. The best agentic model isn't always the one with the biggest brand. It's the one that actually executes when you put it inside a real agent loop — calling tools, threading context, staying grounded in the documents you give it. So we tested them all. PebbleFlow runs every frontier model through our agentic architecture, measuring trustworthiness, tool-call accuracy, speed, and value-for-cost. Then we cross-reference with Artificial Analysis intelligence scores. Notable finding: GPT-5.5 is more willing than GPT-5.4 to answer from training data when prompts explicitly ask for source-grounded answers. Not fabricating false facts — but reaching outside the supplied context, which breaks the grounding guarantee agents rely on. Top of the leaderboard: • Xiaomi MiMo-V2.5-Pro — 87 • OpenAI GPT-5.4 — 86 • Z.ai GLM 5.1 — 86 • MoonshotAI Kimi K2.6 — 86 • DeepSeek V4 Pro — 86 • Google Gemini 3.1 Pro — 86 The leaderboard updates as models ship. PebbleFlow gives you all of them, with measured data on which one to trust for which job. PebbleFlow.ai

View on twitter View on bluesky View on threads View on linkedin View on facebook View on instagram

The Vercel breach is being read mostly as "another OAuth supply-chain attack." Three details from Hu

Fri, 24 Apr 2026 23:48:00 GMT

The Vercel breach is being read mostly as "another OAuth supply-chain attack." Three details from Hudson Rock's analysis, Context AI's own statement, and Vercel's bulletin tell a sharper story. Detail one is where the supply chain actually starts. According to Hudson Rock's analysis (now consensus reporting across Trend Micro, OX Security, Strapi, and The Hacker News, and not refuted by either Vercel or Context AI as of April 22), the original vector was a Context AI employee whose personal device was infected with Lumma Stealer infostealer in February 2026, reportedly via a downloaded Roblox "auto-farm" exploit. The malware exfiltrated their Google Workspace and AWS credentials. Two months later, those credentials and the OAuth tokens they enabled were the leverage point for everything downstream — a Vercel employee's Workspace compromise, the access to Vercel's internal environments, and the eventual data theft. Personal-device hygiene, on a single employee's machine, became the root cause of an enterprise OAuth supply-chain breach affecting "hundreds of users across many organizations" (Vercel's phrasing). Detail two is the disclosure timeline. Context AI detected unauthorized access to the AWS environment hosting their AI Office Suite in March 2026 — over a month before Vercel disclosed. According to Context AI's own bulletin, they engaged CrowdStrike for forensics, deprecated the affected environment, and notified one identified impacted customer at the time. The broader scope — that the same intrusion had likely compromised OAuth tokens belonging to "some" of their consumer users, including the token that let attackers into a Vercel employee's Google Workspace — only emerged this week, when Vercel's own investigation traced back to Context AI. As of April 22, three days into public disclosure, Context AI's bulletin (last updated April 21) still provides no committed timeline for notifying additional impacted users. The people whose tokens were compromised in February still don't know when, or whether, they'll be told. This is the part that should change how technical teams think about installing third-party AI tools. The breach detection at the vendor is not the same as the disclosure to you. There is, in many cases, no contractual or regulatory obligation for the vendor to tell you their service was compromised, even when the compromise included the OAuth tokens you handed them. You can do everything right on your end — least-privilege scopes, MFA, conditional access — and still be operating on the attacker's clock for months while you wait for someone else to decide it's time to talk. Detail three is the part Context AI's own statement quietly reveals about architecture. The breached product was their deprecated CONSUMER SaaS — the AI Office Suite. Their current enterprise product, Bedrock, was unaffected. The reason Context AI gives is that Bedrock "runs in customer environments." The same vendor's same engineering team built two products with two different architectures, and the SaaS-middleman one was the one that got dumped. The runs-in-the-customer-environment one survived because the attackers had nowhere centralized to attack. That is the architectural lesson the rest of the industry will spend the next month re-learning, and it is the one PebbleFlow has built around from day one. PebbleFlow is a powerful, privacy-first workspace with an agentic orchestrator and chat interface that runs in a side panel. Three specific architectural properties mean a Context AI–style breach against us would yield nothing useful. Your Workspace OAuth tokens are stored encrypted on your device, not on our servers. Your Workspace API calls (Gmail, Calendar, Drive) go from your device directly to Google. We are not in the data path. The relay we host is end-to-end encrypted on the WebSocket bus. Each user's devices perform a key exchange through the relay envelope; the relay can route messages but cannot read them. The relay is single-tenant per user by construction, built on Cloudflare Durable Objects. Each user gets their own runtime-isolated object. Lateral movement between users is not a compromise mode the architecture permits. A Context AI-style intrusion of our infrastructure could not yield your Workspace OAuth tokens, because we never had them. There would be no quiet month of us figuring out who to notify, because there would be nothing in our environment for an attacker to take from you. Full analysis + architectural deep-dive (with a traffic table you can verify yourself with Little Snitch): https://pebbleflow.ai/blog/vercel-breach-roblox-cheat-month-of-silence #Vercel #ContextAI #SupplyChainAttack #PrivacyFirst #PebbleFlow #InfoSec #OAuth

View on threads View on linkedin View on instagram View on twitter View on bluesky View on facebook

The Vercel breach happened the way a lot of SaaS-AI breaches will happen: a single Vercel employee i

Fri, 24 Apr 2026 21:53:12 GMT

The Vercel breach happened the way a lot of SaaS-AI breaches will happen: a single Vercel employee installed a third-party AI productivity tool ("Context AI") and granted it broad "Allow All" access to their corporate Google Workspace via OAuth. The tool's own infrastructure — specifically, Context AI's deprecated consumer SaaS product — had already been compromised. (Reporting traces the original chain back to a Context AI employee whose personal device was infected with Lumma Stealer infostealer malware in February 2026, reportedly via a downloaded Roblox game exploit.) Attackers used the hijacked OAuth token to pivot into Vercel and access a subset of customer environments and non-sensitive environment variables. A threat actor on BreachForums has separately listed what they claim are 580 Vercel employee records for $2M; Vercel has not verified that listing. The structural lesson here isn't "be more careful what you install." It's that the SaaS AI model puts a vendor in the middle of every OAuth grant — and that vendor becomes a single point of failure for everyone who connected. PebbleFlow is built differently. PebbleFlow is a powerful, privacy-first workspace with an agentic orchestrator and chat interface that runs in a side panel. Three concrete architectural properties mean a Context-AI-style breach against us could not produce a Context-AI-style aftermath: First, your Workspace OAuth tokens are stored encrypted on your device, not on our servers. When you complete the Google consent flow, the resulting access and refresh tokens are written to Keychain (on Apple), Android Keystore (on Android), or the browser's secure storage (in the extension). We do not keep a token vault. When the agentic orchestrator needs to read your calendar or search your inbox, the API call goes from your device directly to Google, with the on-device token attached. Our infrastructure is not in the data path for any of your Workspace content. Second, the relay we host at relay.pebbleflow.ai — which handles device-to-device coordination when you use PebbleFlow across multiple devices — is end-to-end encrypted. Each user's devices perform a key exchange through the relay envelope, and from then on the relay sees ciphertext only. It can route messages between your devices, but it cannot read them. Third, the relay is single-tenant per user by construction. Each user gets their own isolated Cloudflare Durable Object — separate compute, separate storage, runtime-enforced isolation between users. There is no shared multi-tenant database holding everyone's session state for an attacker to dump and pivot laterally through. This is what "privacy-first" actually means in practice. It is not a marketing posture. It is an architecture that refuses to occupy the position that made the Vercel breach possible. Full technical breakdown, including a traffic table you can verify yourself with Little Snitch or Wireshark: https://pebbleflow.ai/blog/not-in-the-middle-vercel-context-ai-breach #SupplyChainAttack #PrivacyFirst #PebbleFlow #OAuth #DataSecurity

View on threads View on instagram View on twitter View on bluesky View on linkedin View on facebook

Nicole Nguyen's Wall Street Journal column this week walked through something more AI users are star

Sat, 18 Apr 2026 17:02:34 GMT

Nicole Nguyen's Wall Street Journal column this week walked through something more AI users are starting to notice: the chatbot you use has a file on you, and what you can take with you when you leave is, at best, a partial copy. Anthropic shipped Claude Memory Import in early March. Google followed with Gemini Import a few weeks later. OpenAI hasn't shipped an importer at all. The pattern across all three: - each vendor built the import side, none built a full export side - what gets transferred is a model's prose summary of what it thinks it learned about you, not the actual data - the destination is always another vendor's cloud account We think the framing is upside-down. "We make it easy to bring your memory to us" quietly assumes the memory belongs in a cloud account in the first place. Better importers address the surface symptom while preserving the structure that creates the problem. PebbleFlow ingests the actual export bundles from ChatGPT, Claude, Gemini, Perplexity, and Grok, and the destination is your machine — not a PebbleFlow cloud account. There is no PebbleFlow-side memory store because there is no PebbleFlow-side anything. Cross-device sync is end-to-end encrypted through a relay we cannot read. Portability is what privacy-by-design looks like in practice. If your data really is yours, you have to be able to walk in and walk out with it. Full piece: https://pebbleflow.ai/blog/ai-memory-belongs-on-your-device

View on linkedin View on facebook View on instagram

The WSJ published a good guide this week on switching AI chatbots and taking your "memory" with you.

Sat, 18 Apr 2026 16:42:05 GMT

The WSJ published a good guide this week on switching AI chatbots and taking your "memory" with you. Every tool in it assumes that memory belongs in some vendor's cloud. We think it belongs on your device. https://pebbleflow.ai/blog/ai-memory-belongs-on-your-device

View on twitter View on bluesky View on threads

Salesforce CEO Benioff tested OpenClaw and said it can't be trusted for business. Security researche

Sun, 12 Apr 2026 23:45:13 GMT

Salesforce CEO Benioff tested OpenClaw and said it can't be trusted for business. Security researchers backed him up -- 42,900+ exposed instances, a remote code execution vulnerability, and over 1,000 malicious skills distributing malware. We built PebbleFlow with a fundamentally different security model: tool approval controls that pause before every action, real-time visibility into what the agent is doing, and no centralized gateway routing your data. Full breakdown on our blog: https://pebbleflow.ai/blog/benioff-openclaw-enterprise-trust

View on twitter View on bluesky View on linkedin View on facebook View on instagram View on threads

Opus 4.6 in Anthropic’s own app gets this wrong, but PebbleFlow with the exact same model gets it ri

Thu, 09 Apr 2026 04:52:04 GMT

Opus 4.6 in Anthropic’s own app gets this wrong, but PebbleFlow with the exact same model gets it right. Why? Because app design matters. Get full power. Any AI. Private. Transparent. https://pebbleflow.ai

View on bluesky View on facebook View on linkedin View on threads View on tiktok View on twitter

PebbleFlow just passed our CASA Tier 2 third-party security audit with ZERO vulnerabilities found.

Mon, 06 Apr 2026 20:51:46 GMT

PebbleFlow just passed our CASA Tier 2 third-party security audit with ZERO vulnerabilities found. CASA (Cloud Application Security Assessment) is the security framework maintained by Google's App Defense Alliance. Tier 2 requires a full independent code and infrastructure review by an authorized lab -- in our case, TAC Security. They looked at our authentication, data handling, OAuth flows, dependencies, and infrastructure. Result: zero findings. No remediation required. Why this matters: -- Independent validation that our security posture holds up to the same bar Google uses to gate access to sensitive scopes like Gmail and Calendar -- Confirms that our privacy-first architecture (BYOK, local-first processing, minimal data retention) isn't just marketing -- it's been audited -- One more signal for teams in regulated industries evaluating whether PebbleFlow meets their vendor risk bar Full details, audit letter, and our broader compliance posture: https://pebbleflow.ai/trust

View on twitter View on bluesky View on instagram View on facebook View on linkedin View on threads

We hid an Easter Egg inside PebbleFlow 🐣

Sun, 05 Apr 2026 21:21:23 GMT

We hid an Easter Egg inside PebbleFlow 🐣 Find the secret game and see what happens. Happy Easter! 🎮 Watch: https://youtube.com/shorts/kpvRqs4XVis ⬇️ Install: https://pebbleflow.ai/install

View on twitter View on bluesky View on instagram View on facebook View on linkedin View on threads View on tiktok

Did you know a federal court order now requires OpenAI to keep ALL ChatGPT conversations indefinitel

Fri, 03 Apr 2026 20:14:57 GMT

Did you know a federal court order now requires OpenAI to keep ALL ChatGPT conversations indefinitely -- even ones you deleted? We did a deep dive into what ChatGPT actually stores about you: your conversations, your IP address, your device info, your usage patterns. By default, your conversations train future models. And if your team uses it at work, OpenAI becomes a data processor in your compliance chain. The kicker: small and mid-size teams can't even access Enterprise-tier privacy controls. You get the same privacy as a free user. We wrote up the full technical audit, including what BYOK architecture changes about the equation. https://pebbleflow.ai/blog/chatgpt-data-audit

View on twitter View on bluesky View on instagram View on facebook View on linkedin View on threads

Solved the Wordle in 3, using Gemini 3 Flash. Just 8 tool calls, perfectly executed. 66 seconds.

Fri, 03 Apr 2026 19:42:12 GMT

Solved the Wordle in 3, using Gemini 3 Flash. Just 8 tool calls, perfectly executed. 66 seconds. PebbleFlow is an efficient, smart, patent-pending harness for AI — complete with proprietary browser automation. It's the best way to get things done using whatever model you want, privately and productively, all in the convenience of a sidebar interface. Beta available now: https://pebbleflow.ai/install

View on twitter View on bluesky View on instagram View on facebook View on linkedin View on threads

PebbleFlow's private agentic AI platform already supports 22 of the world's languages!

Fri, 27 Mar 2026 20:50:07 GMT

PebbleFlow's private agentic AI platform already supports 22 of the world's languages! Try it for free. Try free models, or plug in your own OpenRouter key. https://pebbleflow.ai

View on bluesky View on twitter View on tiktok View on linkedin View on facebook View on threads View on instagram

Agentic is Easy

Thu, 26 Mar 2026 18:25:56 GMT

Agentic is Easy Any AI. Your Data. Private One-click add to your browser from the Chrome Web Store Add an OpenRouter key, add a few bucks, and get started with any AI, or try free models -- even run local models on your device https://chromewebstore.google.com/detail/pebbleflow/cmlideojdkgeifenjpnilfjjicghefob https://pebbleflow.ai

View on bluesky View on facebook View on instagram View on threads View on twitter View on linkedin View on tiktok

How can you use AI agents safely to get stuff done without storing your memories and personal info i

Wed, 25 Mar 2026 21:28:25 GMT

How can you use AI agents safely to get stuff done without storing your memories and personal info in the cloud? PebbleFlow.ai! See how. https://pebbleflow.ai Use AI, Don't Let AI Use You

View on bluesky View on instagram View on threads View on linkedin View on tiktok View on twitter View on facebook

AI makes mistakes.

Wed, 25 Mar 2026 03:21:45 GMT

AI makes mistakes. See every action taken in your sidebar. Interrupt or guide the agent at any time. Optimize results. https://pebbleflow.ai Install our extension and get to work with your new coworker!

View on bluesky View on instagram View on facebook View on linkedin View on threads View on tiktok View on twitter

Use AI. Don't Let AI Use You - https://pebbleflow.ai

Mon, 23 Mar 2026 15:14:12 GMT

Use AI. Don't Let AI Use You - https://pebbleflow.ai

View on bluesky View on facebook View on instagram View on linkedin View on tiktok View on twitter View on threads

PebbleFlow makes it easy to have your private AI agent use Perplexity to research and Gemini to plan

Fri, 20 Mar 2026 15:39:23 GMT

PebbleFlow makes it easy to have your private AI agent use Perplexity to research and Gemini to plan a trip - then record it directly to a Google Sheet. https://www.youtube.com/watch?v=KPaWNDskfcE Private. Convenient. Powerful #Pebbleflow https://pebbleflow.ai

View on bluesky View on facebook View on threads View on linkedin View on twitter

PebbleFlow.ai solves the Wordle on the first try. PebbleFlow can drive your browser, under your con

Thu, 19 Mar 2026 15:37:03 GMT

PebbleFlow.ai solves the Wordle on the first try. PebbleFlow can drive your browser, under your control using a privacy-first approach with no cloud control or storage.

View on youtube View on tiktok View on instagram

This video demonstrates PebbleFlow solving a Wordle.

Thu, 19 Mar 2026 15:34:33 GMT

This video demonstrates PebbleFlow solving a Wordle. https://www.youtube.com/watch?v=cEL4DIhiSEo PebbleFlow is an agentic AI platform.

View on bluesky View on facebook View on threads View on linkedin View on twitter

Browser Tab Overload?

Wed, 18 Mar 2026 21:29:00 GMT

Browser Tab Overload? Your AI just another tab you have to manage? Try PebbleFlow! Lives in your favorite browser's sidepanel. Simple to Start. Powerful. Private. Transparent. Any AI.

View on bluesky View on facebook View on linkedin View on threads View on twitter

Knock, knock... who's there? We don't know! We don't have your data!

Wed, 18 Mar 2026 17:55:04 GMT

Knock, knock... who's there? We don't know! We don't have your data! We don't have your data. We don't want your data. You are not the product; our software is https://pebbleflow.ai

View on facebook View on linkedin View on twitter View on threads

A subscription to https://PebbleFlow.ai/install is a subscription to privacy innovation!

Mon, 09 Mar 2026 19:42:56 GMT

A subscription to https://PebbleFlow.ai/install is a subscription to privacy innovation! We are in soft beta launch, but we already have a prezzy for early adopters! PrivateVoice for Mac! Standalone app works with any app. Simple as press to talk! We wrote this post with it!

View on bluesky View on facebook View on linkedin View on threads View on twitter View on instagram View on tiktok

https://pebbleflow.ai

Mon, 09 Mar 2026 17:07:18 GMT

https://pebbleflow.ai Agentic orchestrator that stores your personal data only on your device... We don't want your embarrassing internet browsing activity ... We want you to choose your favorite AI, and be able to use it privately.

View on facebook View on linkedin View on twitter View on threads

Preparing for official launch. Tutorials are starting to appear on our website!

Thu, 26 Feb 2026 21:04:35 GMT

Preparing for official launch. Tutorials are starting to appear on our website! We have a sidepanel user interface walkthrough available. https://pebbleflow.ai/tutorials/

View on bluesky View on facebook View on instagram View on linkedin View on threads View on tiktok View on youtube

Wait! is caiioo getting more accurate results using the API directly than a user gets when using the

Mon, 23 Feb 2026 12:00:00 GMT

Wait! is caiioo getting more accurate results using the API directly than a user gets when using the AI company's proprietary app??

View on linkedin

Get things done at work and at home with a private, agentic AI system that cannot spy on you and can

Mon, 23 Feb 2026 12:00:00 GMT

Get things done at work and at home with a private, agentic AI system that cannot spy on you and cannot take actions without your permission. Use any model you want... Claude, Gemini, Grok, ChatGPT, Kimi, MiniMax, Mistral. Pay for the software without the monthly commitment to AI usage. All the power for what you need. Pay for what you use.

View on linkedin

A little extra experience for users.

Sat, 14 Feb 2026 17:00:00 GMT

A little extra experience for users.

View on linkedin

caiioo.ai is a platform with a user-friendly interface that orchestrates multiple AI tools to help y

Sat, 14 Feb 2026 16:00:00 GMT

caiioo.ai is a platform with a user-friendly interface that orchestrates multiple AI tools to help you accomplish tasks while keeping you in full control of your data. It is developed by experts in privacy and data protection. https://caiioo.ai

View on linkedin

caiioo soft launches in Beta today! Available now in chrome web store as a one-click install extensi

Sat, 14 Feb 2026 15:00:00 GMT

caiioo soft launches in Beta today! Available now in chrome web store as a one-click install extension. https://caiioo.ai caiioo is a browser extension that serves as a privacy-first AI orchestrator — it lets you use 500+ AI models (via your own API keys) with integrated tools like Google Workspace, web browsing, image generation, and code execution, all from a browser sidebar with local-first data storage and no vendor lock-in.

View on linkedin