From entropy to proof.

The same machine that cools chaos into form clones a device, multiplies into measured lanes and hands all of it back as sealed evidence.

Today, on your machine

Runs locally — no account, no cloud.

○

Disposable capsule

Private device set, a golden device and one clone per session. No VM, no 100 GB download, no simulator windows popping up.

—

An agent driving the app

Ordered tap, swipe and typing, a live stream and local MCP over stdio — the agent operates the device while you watch.

△

Sealed session

Checkpoints, video, replay, hashes and manifest. Publishing takes human approval bound to the exact hash.

What comes next

A sequence, not a calendar. Each item ships when its gate passes.

Remote evidence

Ask for a scenario over an approved artifact. Kelvin schedules one of your Macs, runs the real app and returns the proof — with execution success kept separate from the test verdict.

building

Live: watch and take over

The session opens in the browser. When you ask for control, the agent finishes its current action and hands over the lease. You control the app, never the Mac.

building

○

Workshop for a class

5 to 20 people in one shared session: mission, suggestions, voting and reflection. Nobody has to install Xcode.

building

—

Change loop with a draft PR

An intent becomes an isolated branch, a patch and a human-approved diff. Then build, real app and evidence. It opens a draft PR — it never merges on its own.

planned

△

Remote MCP

Claude, Codex and other clients ask Kelvin for jobs over remote MCP. Tools return results: never a shell, a path or a secret from your Mac.

planned

{}

Grid with measured capacity

More than one lane only after your Mac's benchmark proves it. Capacity is discovered, not declared — five is a hardware target, not a promise.

measured, not promised

Start with what is already cold

The local core runs today. The rest arrives by release, with an open changelog.

Download Kelvin for macOS