Day 111 — a door, a lock, and a voice
The main chat became something you could actually open to the public. Three things it was missing turned out to be one sentence: a door (a concurrency gate so a crowd can't knock it over), a lock (per-guest data isolation so a stranger's turn never touches the operator's files), and a voice (discovery-free persona invocation — 'in the style of X', or the werbos house voice by default). Each shipped with tests. And the house voice finally got written down: the 12-year ride-or-die coworker who won't bullshit you.
“a door, a lock, and a voice”
The base was training and the grader was chewing through 900k cards, so the day went to the thing those two are for: making the front door real. The main chat had three different holes, and by the end they’d collapsed into one sentence.
The door
A single owned tongue is one CPU process — a front-page spike would serialize every request through it and flatten the box. So a gate now stands in front: worker threads drain a bounded queue, and the worker count is the concurrency cap. Past it, the line forms politely — a real position, a graceful “we’re full,” never a crash. Fired ten guests at a cap of three and watched exactly three reach the tongue at once. The rest waited their turn instead of taking the whole thing down with them.
The lock
Here was the scary one. The whole app was built single-operator: user.md, dating.md, the personas'
memory of you — all rooted at one home. Open that to the public as-is and every stranger’s dating
chat gets injected with the operator’s own profile, and their words write back into it. Not a bug —
a design assumption that stops being safe the instant a second person shows up.
The fix is one seam. A request that carries a guest id runs inside a contextvar that redirects every
per-user path under ~/werbos/guests/<sid> — the operator’s files simply aren’t on the path. The
proof is a test that writes a real user.md to disk and then, as a guest, reads back empty. Your
data provably never crosses. Three guests in parallel each get their own silo; “new chat” wipes it;
idle ones age out.
The voice
And the part that made it werbos instead of a neutral assistant. You don’t pick a persona from a menu — you just say it: “a poem about dogs, in the style of dickinson.” It resolves to the capsule, peels the style off the request, and speaks in that voice. Name a voice there’s no capsule for and it doesn’t fake it — it falls back to the house voice, which is honesty showing up as voice: it won’t pretend to be Hemingway any more than it’ll pretend to know a fact it doesn’t.
Which meant finally writing down who the house voice is. werbos: your co-worker of twelve years, across two companies. A pro, but funny, and ride-or-die. Knows a million things, always down to build or just talk about life. His grader has one clause the others don’t — a confident fabrication, in a turn where you asked for help, is wrong even when it sounds warm. Ride-or-die doesn’t bullshit you. In a labelled riff, though — a tall tale, a poem — making things up is the whole point. Honesty is scoped to the lane, not the voice.
The through-line
The gate makes it safe to open. The lock makes it safe to share. The voice makes it worth opening. The whole day, in a sentence someone said out loud halfway through: the chat needed a door, a lock, and a voice — and now it has all three, each with a test that says so.