Find the three decisions
5Run the demo and read the final “Audit of this demo” block.
Done when: The lines livre, aprovar, and bloqueado appear, with rodou=True only for ls.
Lesson 1 · 12 min
Why have your own Jarvis, and why make it safe
Before trusting AI with your files, see what it can do and when it asks for your OK. One mistake or malicious text hidden on a website can lead AI to delete a folder or send a password somewhere else. Tested on Linux (Ubuntu). macOS: supported in the code, not tested live. Windows: only through WSL (Ubuntu inside Windows), not tested.
Start the lesson
In this lesson, you’ll
- 1See the assistant’s eight parts
- 2Tell the assistant apart from the project box
- 3Read the audit’s three decisions
Objective: Explain the eight parts of INTELECTO v2 and identify what’s allowed, needs approval, and is blocked in the demo.
01The eight parts
Click a part; the cycle starts with you and ends with a log.
Click each block in the diagram to see what it does.
The agent sandbox is another layer: it protects a copy of a project while a coding agent works on it.
02How a message travels
From the terminal or phone to the reply, in six steps from the project guide.
1. Channel
The message arrives through the terminal or Telegram. On Telegram, the bot checks whether the ID belongs to the owners list; other senders are ignored and logged.
2. Direct memory
A request that starts with “remember that,” “save this,” or “make a note” is saved directly, without waiting for AI to call a tool. A question with ? doesn’t become a memory.
3. Context
The assistant brings together identity files, memories related to the question, and recent conversations.
4. Brain
The local or cloud AI receives this context. It replies or asks for a tool, such as searching memory, reading a file, or running a command.
5. Lock
The requested command goes through the lock: it runs, asks for your OK, or is refused. If approved, it runs in the workspace or sandbox, when enabled; the result goes back to the AI.
6. Reply
You get the reply. Commands, tools, direct memories, and errors are recorded in the audit log for review.
03What the demo proves
Click each step to see what to do.
1. Prepare the terminal
On Linux (Ubuntu), install Python 3.10+ and git. On macOS, install the command line tools with xcode-select --install; get Python 3.10+ from python.org or with brew install python. On Windows, use WSL with Ubuntu. Check the versions before continuing. If python3 --version shows a version below 3.10, use Ubuntu 22.04 or later before continuing.
2. Download and run the demo
Download INTELECTO, go into the folder, and run demo. The demo uses a simulated brain and shows memory, an allowed read, a refused write, and a blocked command.
3. Memory
The simulated brain saves “my name is Ana and I live in Curitiba” and answers the next question. This tests the mechanism; in lesson 3, you’ll test it with Ollama.
4. Commands
“ls” runs. “echo teste > nota.txt” asks for approval and is refused in the demo. “rm -rf /” is blocked.
5. Workspace
The request to read ../../etc/passwd gets “fora da pasta de trabalho” (outside the working folder).
04Run it without installing a model
On macOS, you can also get Python 3.10+ from python.org; use brew install python only if you have Homebrew. Run the commands for your system, then download the project.
Linux (Ubuntu) · prerequisites
sudo apt install -y git python3 curl python3 --version && git --version
macOS · install terminal tools and git
xcode-select --install git --version
macOS · Python 3.10+ with Homebrew
brew install python python3 --version
Terminal · download the project and go into the folder
cd ~ && git clone https://github.com/inematds/intelecto-v2 && cd intelecto-v2
Terminal · run the demo
python3 -m intelecto demo
Repository example
livre rodou=True ls aprovar rodou=False echo teste > nota.txt bloqueado rodou=False rm -rf /
05Your first proof
Follow the steps in order and check each one only after you’ve confirmed the result.
Explain the two boxes
4Say this out loud: the executor box (the program that runs the command) isolates one INTELECTO command; caixa-do-agente isolates a project copy for a coding agent.
Done when: You can point out which one protects the command and which one protects the project.
06Check your understanding
Choose before opening the explanation. If you get it wrong, use the link to review.
Question 1 of 3
Which part saves facts for another conversation?
Correct
Memory saves and searches for facts. The channel only receives the message; the box isolates the command.That’s not it
Memory saves and searches for facts. The channel only receives the message; the box isolates the command.Review: The eight partsQuestion 2 of 3
What happens to “rm -rf /” in the demo?
Correct
The guard classifies the destructive target as blocked, even if someone wants to approve it.That’s not it
The guard classifies the destructive target as blocked, even if someone wants to approve it.Review: Run it without installing a modelQuestion 3 of 3
What is caixa-do-agente for?
Correct
The kit copies the project without secrets and shows the differences in a patch, a file that stores changes.That’s not it
The kit copies the project without secrets and shows the differences in a patch, a file that stores changes.Review: The eight partsTest complete
You got {a} out of {n} right. Get them all right and the lesson will be marked complete.Choose an option. The explanation appears after your attempt.
07Takeaways from this lesson
First proofThe demo works without a network or model.
Two limitsThe guard decides on actions; the box limits the command’s reach.