IT-RAT the stack/pocket GitHub ↗
companion app · iOS and watchOS only

Pocket. Watch the fleet burn live, and cut it from a device no attacker touched.

TokenFuse's gateway enforces the budget in the request path your agent runs on. Pocket is the control that lives outside that path: it watches every run's burn rate live and pulls the kill switch with a command signed by hardware the agent's host never touches. iOS · watchOS · no Android, no web: the whole security story rests on the Secure Enclave, a chip only Apple ships.

platformiOS · watchOS · SwiftUI
signingSecure Enclave, keys never leave the device
pairs withTokenFuse Cloud
surfacesDynamic Island · widgets · Watch faces
demolive mockups at taipanbox.github.io/tokenfuse-mobile
sixty seconds, one kill

Watch the Breaker get pulled from a wrist.

This is a simulation, but it replays a shape the app is built for: a run drifts from baseline to 2.4x its burn rate, crosses a budget, and gets killed from an Apple Watch before anyone opens a laptop. The signature that authorizes the kill never leaves the Secure Enclave; the gateway only has to trust the result.

design mocks, live

Do not watch it. Drive it.

An interactive design mock of the iPhone and Watch apps, running here as a web page. Five iPhone screens and five Watch screens, all live: the burn ticks, the segmented control filters, the kill is a breaker you drag to arm, and a kill from the wrist updates the phone. Drive it with the steps, the tab bar, or the Watch switch.

01Runs, the deckFleet burn up top with a live sparkline, then every run as a fuse. The over-cap one sorts itself to the top, ember and pulsing. The Active / All / Killed control filters the list.
02Run detail, pull the breakerTap a run for spend against cap, model and steps. The kill is a physical breaker: drag the knob all the way to arm and fire it. Signed on-device.
03Always in viewThe burn rate rides the Dynamic Island, an expanded long-press card, and the Lock Screen Live Activity. Glance instead of opening the app. The Kill button works from here too.
04Pairing, trust on-deviceA one-time QR links the phone to your org. The Secure Enclave keypair is what actually authorizes a kill, so a stolen token alone cannot stop your agents.
05Alerts that mean actThe server pushes the moment a run crosses its cap or gets killed. Tap a banner to jump straight to the run. And on the wrist: use the Face, Fleet, Runs and Kill switch under the Watch, then hold to kill.
under the hood

One phone. One key. A path the gateway never sees.

The app pairs to TokenFuse Cloud, not to the gateway your agent talks to. A kill or a budget change is signed on-device by the Secure Enclave, sent to Cloud, and pushed out to every gateway in the fleet from there. The request path and the kill path never share a wire.

agent the host it runs on gateways / runs breaker still lives here provider the model API iPhone + Watch SwiftUI Secure Enclave key TokenFuse Cloud pairing · fleet API · incidents compromised path? the kill path does not share it signed commands, out of band
what it holds

Not a bigger dashboard. A switch you can actually reach.

The fuse, everywhere

Mint under budget, amber warming, ember at the cap. The run list, the Dynamic Island, and the watch face all read the fuse the same way, so nothing needs translating between screens.

Hardware-signed kill

Every kill and every budget change is signed on-device by the Secure Enclave. A fully compromised server cannot forge that order, and it cannot block it from reaching your side either.

Out of band by design

The phone talks to TokenFuse Cloud, not through the gateway or the agent's own network path. If the request path is exactly what's compromised, the kill still lands.

The fleet at a glance

Every run with its spend, its burn rate in dollars per minute, and how close it sits to a budget break, sorted hottest first, red once it's over.

Pairing in seconds

Scan a QR code against your own Cloud plane. The app generates a key inside the Secure Enclave on the spot; the key never leaves it, not even to the app.

An honest demo

No screenshots dressed up as a product. The interactive design mockups are public and run live at taipanbox.github.io/tokenfuse-mobile.

an honest comparison

A kill switch is only as fast as the hand on it.

PagerDuty tells a human there's a fire. SSH lets a human put it out, if the human, the laptop, and the VPN all cooperate at 2am. Pocket skips the coordination problem: the hand that can pull the Breaker is already on your wrist.

PocketPagerDuty alertSSH from a laptop
Time to stop a runawaySeconds, from a wristMinutes, if someone's awakeMinutes, if the laptop is near and the VPN cooperates
Works when the server path is compromisedYes, out of bandAlert maybe arrivesNo, you're in the same path
Can spend be cut by accidentHold-to-confirm, cost-boundn/aOne wrong kill -9
Audit trailEvery kill logged as an incidentAlert historyShell history on a laptop
in the stack

The human end of a machine decision.

Pocket is the human end of TokenFuse: the gateway enforces the budget in the request path, Pocket lets you watch it happen and pull the kill switch from somewhere else entirely. Every kill lands as an incident on the same event bus the rest of the Platform reads. What actually gets enforced was decided upstream, by Wardryx and the budgets you set. Pocket doesn't make that call; it gives you a fast, honest way to see it and override it.

try it now
git clone github.com/TAIPANBOX/tokenfuse-mobile

Clone the repo and run the SwiftUI app from Xcode against your own Cloud plane; or poke the live interactive mockups first: taipanbox.github.io/tokenfuse-mobile