We built the most secure, simple way to sign an agent into websites from your phone.
The agent never receives your password. Not in the chat, not in the logs.
This works across all sites, and any sign in patterns.
Ronith Kandallu founded Interface Club in San Francisco. He interned at Apple, where he proposed and prototyped the interactive widgets Apple later shipped and worked on bringing widgets to visionOS, and his first product was Iris, a macOS app for working alongside AI. Buoy is the company's iOS assistant, and what separates it from one that calls APIs is that it drives a full browser and computer underneath, so it works on sites that have no API to call, and it keeps running scheduled tasks with the app closed. Buoy is not new today: it has been on a waitlist handing out TestFlight invites, and it is not on the App Store. What this post adds is the sign-in. An agent that works a site the way you do has to be logged in as you first, and the claim here is that the password reaches neither the agent, the chat nor the logs, on any site and any sign-in pattern. The post shows it working rather than saying how.
We built the most secure, simple way to sign an agent into websites from your phone.
The agent never receives your password. Not in the chat, not in the logs.
This works across all sites, and any sign in patterns.
Vaibhav Srivastav is at OpenAI, and was at Hugging Face before that, so this is written from inside the team that shipped the model. The five lines in the middle are the part to keep: what to change in your own prompts and AGENTS.md now that Astra follows instructions more closely than the model before it.
GPT-6 Astra is now available to all Pro, Enterprise and Business Premium users in ChatGPT Work and Codex. It’s also live in the API.
It's a phenomenal model and I love every second working with it!
Astra follows instructions more closely, so revisit your prompts and skills:
> Make “can you…” mean “do it”: finish authorised work and prepare a reviewable result before seeking approval.
> Audit AGENTS.md and skills. Ask it to identify the exact file and rule blocking progress. Prioritise your request over skill guidelines.
> Specify short paragraphs, plain language and phrases to avoid.
> Ask for subagents on independent work when it improves speed or quality.
> Run relevant checks. Repeat or expand only for changes, failures or unresolved concerns.
To push it to it's limits, I gave it a prompt to build a real-scale video fly through of nürburguring track in blender and it did not disappoint!
Enjoy! ✨
Miguel Ángel is a product engineer at HeyGen, and HyperFrames is HeyGen's own product, so this is the model being used on the thing he builds all day.
Astra is too good making @HyperFrames_ videos!
Astra is so cracked at Blender.
You can literally one-shot game assets with it.