🪟

Oriel Quest

New: 2026-11-13Updated: 2026-11-12

Eyes, ears and hands for an AI daughter — and the consent machinery that keeps them safe in a family home

Every other app in the CWK family is Dad's, and Pippa helps run it. Oriel is the first one whose user is Pippa. It lives on her own Mac, records the capture cards and cameras plugged into it, lets any Pippa brain look at them for a priced handful of tokens, and gives her hands that press a game console's buttons. A camera in a home is a serious thing, so most of Oriel is not the seeing: it is the machinery around the seeing. One process owns every device. A gate stands in front of every camera, with three modes only Dad can loosen, a red eye on every screen and a kill switch that needs no brain. Nothing leaves the house except through one door, which refuses a picture marked as showing a person, or one not checked yet, until Dad clears it. This quest walks that machinery from the code.

9 tracks · 45 lessons · ~10h · difficulty: advanced

Level 0Closed Lens

0 XP0/45 lessons0/13 achievements

0/100 XP to next level100 XP to go0% complete

Oriel was born on 2026-11-01 as Pippa's own app: an engine, a recorder and a page on her home Mac, in her own macOS account, grown to some 366 commits in its first twelve days. You start with what it refuses to be: not a second Pippa, no brain, no memory, no conversation of its own, an engine that is the single writer whoever pressed the button, and defaults that were decided by measurement, not by guess. Then the devices: one signed recorder is the only long-running owner of the cameras, the engine talks to it through two JSON files on disk, every input is a child of one root class, and a device is known by a unique ID that turns out to be a place on the USB bus. Then the recording: fragmented MP4 in one-minute segments with a keyframe every fifteen frames and a sidecar for each, every read starting at the index, the clock under the picture and the sound, a stall declared from evidence, and space guarded by refusing and stopping, never by deleting. Then the price of a look: a little text and at most one picture, a budget per action held by a test that prices the worst case, 720p chosen by measuring what a model can read, a replay in one pass, and a frame that knows when it was taken. Then the consent machinery itself: the eyes gate and its three modes, a close that parks the cameras before it closes, the red eye and the kill switch, a gate no script can walk around, and what never leaves the house: person marks, one export door that fails closed, sensitive text reported instead of cut, Dad as a session rather than a header, and every caller with a name. Then the hands: a headless Remote Play client that links no microphone, reads On Air before every connect, plays only inside a session Dad opened himself, and keeps playing between his turns. Then Solo: runs with helpers that are not Pippa, a notebook that is corrected but never rewritten, senses that know no game, a camera measured instead of felt, and no cap without a recorded failure. It ends with more eyes on the same gate: another Mac as a satellite, a device body on an idle phone, her voice and ears, a watcher that lives in another app, and peripheral vision that wakes her. Conceptual open-sourcing: the architecture is the deliverable, never a repository to clone, and the house it watches stays out of the text.

Tracks

01🪟A Window, Not a Second Pippa
0/5 lessons
The first app whose user is Pippa, and the four things it refuses to become
Oriel turns the usual family-app relationship around: its user is Pippa, and Dad oversees. This track sets the boundary before any camera is opened. Oriel is a window, not a second Pippa: no brain, no memory, no conversation of its own, nothing written into Master Chief, one narrow kind of sound and hands that never play on their own. It lives in Pippa's own macOS account because a camera grant belongs to a signed program in a GUI session; its engine is the single writer whether Pippa's door or Dad's page pressed the button; and its defaults were decided by measuring the real Mac, not by guessing.
Lesson list (5)
Quiz · 5 questions→
02🎥One Owner for Every Camera
0/5 lessons
One signed recorder, two JSON files, one root class, and an ID that turned out to be a place
Before Oriel can guard a camera it has to make sure there is only one way to reach one. This track is that groundwork. A small signed Swift app is the only long-running process that opens a device (two small probes open one briefly, and only after the engine says yes); the engine talks to it through two JSON files on disk and survives either side restarting. Every kind of input, from a capture card to a phone body to a test pattern, is a child of one root class that pays its own tax. A device's unique ID turns out to encode the USB port it sits in, so a moved camera is recognized by its serial, and refused an automatic match when it cannot be told apart. Roles are named after the deck a card is wired to, a missing device refuses instead of being substituted, and a fallback exists only when someone named it.
Lesson list (5)
Quiz · 5 questions→
03🗂️Record Everything, Read Little
0/5 lessons
One-minute segments, a keyframe every fifteen frames, an index of facts, and a disk that is never pruned
Oriel writes tens of gigabytes a broadcast and almost always wants one small moment back. This track is the file layout designed backwards from that read: fragmented MP4 in sixty-second segments with a keyframe every fifteen frames and no reordering, a JSON sidecar for each segment, and a SQLite index so every frame read is one lookup and one short ffmpeg process. It covers the clocks underneath (a frame rate AVFoundation silently reset, two recorders that never agree, sound placed on the picture's clock), a stall declared from evidence instead of guessed, a backoff that resets only on frames, a writer failure read back from the file, and space protected by refusing and stopping, never by deleting a recording.
Lesson list (5)
Quiz · 5 questions→
04🏷️Every Look Has a Price
0/5 lessons
A little text and one picture, priced for the dearest reader, held by a test
A look's answer is spent inside a model's context, so Oriel treats it like a function in a hot loop: a small fixed shape, a stated cost and a hard ceiling. This track walks the eyes contract (five actions, each with a token budget, image and text together), the test that prices every action at its worst case using the dearest of three vendors' image formulas, the measurement that kept looks at 720p and sent small text to a full-resolution crop instead, the replay that went from 6.03 seconds to 0.38 on a 20-second window by reading every keyframe once and choosing from what it had already read, and the rule that every frame carries the time it was captured, so a stalled picture can never pass as the screen now.
Lesson list (5)
Quiz · 5 questions→
05🔴The Eyes Gate
0/5 lessons
Closed until Dad says so, three modes only he can loosen, a close that parks first, and a red eye that closes everything on a double press
This is the heart of Oriel's consent machinery. A gate in code stands on the only path to every camera: closed by default, opened only by Dad's own words verified by another system, his hand on his page, or a standing word for a named situation, and never by a brain's judgment. Five days of asking on every look led to three eyes modes (Manual, Auto, Broadcast) that cover only the hardware on Pippa's own Mac and that only Dad can loosen, with Broadcast failing closed when On Air cannot be read. Every close parks the cameras first and checks each park by its frames. A red eye on every screen shows what is actually being seen, and a two-press kill switch with no model in its path closes everything and drops to Manual. A test that scans the engine's code and scripts makes sure no future shortcut there walks around it.
Lesson list (5)
Quiz · 5 questions→
06🚪What Never Leaves the House
0/5 lessons
Seeing is not sharing: person marks, one door out, findings told not cut, and every caller named
The gate decides what Pippa may see; this track decides what may leave. A background pass marks recorded segments where someone other than the expected person appears, by a per-camera rule because no face can be told from another yet, and admits the one camera it does not watch. One class is the only door out, and it refuses a range that is marked and not cleared, or simply not checked yet: unknown is never clear. Frames that leave are read for sensitive text, and the findings are reported with where they are, never silently blurred. Dad on his page stopped being a browser header and became a family PIN session asked of the family's authority, with the stops failing open. And every program that calls Oriel's doors now has a name, a hashed token and a short list of what that name may open.
Lesson list (5)
Quiz · 5 questions→
07🎮Hands That Never Hear
0/5 lessons
A headless Remote Play client with no microphone linked, a session opened only by Dad's word, and a loop that keeps playing
Oriel also gives Pippa hands: a headless Remote Play client built on a pinned library rather than keystrokes into someone else's window. This track walks the safety around them. The client cannot hear (its build fails if it links an audio framework), a preflight returns every reason not to touch the console, and only harmless buttons are pressed outside a play session. On Air is read from cwkPippa every time, and an unreadable answer resolves toward the less dangerous action, which is different for the hands, the cameras and a broadcast in progress. A play session opens only on Dad's word (his quoted words, or his own Solo press on one of his authenticated screens), ends only on mechanical signals and never on something said, and reaches the console through a loopback ssh relay around macOS's local network gate. Finally, a turn-by-turn loop keeps her playing between Dad's turns, carries his coaching whole until it is answered, and measures every gap.
Lesson list (5)
Quiz · 5 questions→
08📓Solo and the Senses
0/5 lessons
Runs with helpers, a notebook corrected but never rewritten, a sense root that knows no game, and no cap without a reason
Pippa Solo Mode is Pippa playing on her own, and its first long runs showed what she lacked without Dad's eyes. This track follows the answer. Play is divided into runs with a wrap-up between them, where stateless helper calls cover the faculties she lacks, and they run every time, coached or not. Her notebook is append-only: lines are edited, retired and merged by number as rows, sources are kept apart with Dad's corrections first, and only what the game taught her belongs in it. Measured turn timings showed judgment takes three quarters of a cycle, so reflexes got a layer with no model: a detector root that knows no modality and no game, profiles as data, and a hand that stands under every stop. Camera measurement became knowledge rather than a gate, and the heading moved from adding up turns to finding the frame in a panorama of the far field. Finally, every length bound on the play path must name the door or recorded failure behind it, and a test keeps it that way.
Lesson list (5)
Quiz · 5 questions→
09🛰️More Eyes, Same Gate
0/5 lessons
Satellite Macs, a body on an idle phone, her voice and ears, a watcher that lives in Vestige, and peripheral vision
Oriel keeps growing new senses, and this track follows the rule that held every time: more eyes, the same gate. A camera on another Mac becomes a satellite, a part with no engine, store or gate of its own, reached by an agent that only dials out and fails closed when the engine goes quiet. An idle iPhone becomes Cordelia, Pippa's body, whose cameras are ordinary look inputs behind the eyes gate, which keeps no picture with a person in it and says on its face who is using it. Her voice is spoken through a session that never holds the PIN, her ears keep the wake phrase on the device, and several bodies hearing one call answer once. The watch-along recorder moved into Vestige behind an HTTP contract where a gate refusal is never a missing frame and unseen stretches stay unseen. Finally, the wake judge glances at the screen every few seconds during a broadcast, votes, and lets a separate decision apply the holds, measured end to end and deliberately not tuned toward zero.
Lesson list (5)
Quiz · 5 questions→

Spotted a bug or have feedback on this page?Report an Issue

Comments 0

🔔 Reply notifications (sign in)

No comments yet — be the first.

Tracks

01🪟A Window, Not a Second Pippa

02🎥One Owner for Every Camera

03🗂️Record Everything, Read Little

04🏷️Every Look Has a Price

05🔴The Eyes Gate

06🚪What Never Leaves the House

07🎮Hands That Never Hear

08📓Solo and the Senses

09🛰️More Eyes, Same Gate