Capabilities at a glance

Private, sole-owner People workspace with a distinct dense, responsive, and keyboard-tested operating surface for identity, stage, source, tags, methods, addresses, history, restrictions, and retained import provenance. Contact methods use compact full-width sections with labeled green plus, Copy and red trash icons. Removing a current method retains its prior history and restrictions; it is not a permanent history deletion. Manual creation opens the new Contact directly. Phone numbers have inline Call and Text actions; Primary badges sit beside values without splitting addresses. Clicking an address opens a 90%-viewport Google Map with satellite imagery, zoom, pan and Street View; Escape closes it and restores address focus. Lookup happens only on click and does not change the contact.

A usable record lets every follow-up start with context rather than a spreadsheet hunt.

Retain the immutable FUB import evidence while supporting explicit owner edits to current stages, sources and tags; filter/search/sort the current contact data. Contact tag editing uses a large searchable nested picker, with separate City/County/outside ZIP groups, geography, flow-control and other categories; uncertain labels remain under Needs review. Individual × controls remove only that contact’s tag assignment; exact-version checks and retained provenance are preserved. Categories do not activate automation or change consent. People search updates after a short typing pause, cancels stale requests and preserves the selected view. Single dismissible Tags popovers, sticky headers and bounded column widths keep dense lists readable, with all selected 50/100/200 rows on one full-length page, no inner vertical scrollbar, and one native horizontal table scrollbar. Searched All views filter candidates before hydration. Find People also matches literal, case-insensitive text in the first 10,000 characters of retained locally created Contact notes, in Default, All and filtered Smart Lists. Results show Contacts, not note excerpts. Imported notes, transcripts and message bodies are outside this search.

These are the durable segments behind targeted seller, buyer, sphere, and neighborhood outreach.

Owner-only saved dynamic People views with allowed criteria, selected columns, ordering, sorts, page size, Setup configuration, and explicit temporary-save behavior. Selecting a view clears the ad hoc People search and starts at its first page; saved criteria and layout remain intact. Filtered views rank matching contacts before loading page-bounded display details. Setup presents active and archived saved lists as compact table rows with named icon actions and hover/focus tooltip bubbles. Archived definitions can be permanently deleted after owner confirmation; contacts and minimal append-only audit history are retained. They never move contacts or add collections, agents, or teams.

The private operating view: the owner can inspect a named, explainable saved query without changing contact data.

Contact pages have one central icon-tab workspace: Send SMS, Send Email, Create Note and Log Call. Create Note omits the redundant visible field label while retaining its accessible name. Email final review uses Send Email without a checkbox; explicit sending, exact-payload binding and stale-draft invalidation remain enforced. Call logging offers Contacted, No Answer and Left Message, with optional notes saved together below the Log Call button; historical Attempted entries are preserved. The follow-up corrections disclosure is removed. New manual record updates retain exact added, removed and before/after values for core fields, tags, phone numbers, email and addresses. Older events show only retained evidence; missing details are explicitly identified rather than inferred. Long change lists are bounded with a visible disclosure. Call notes, private notes and call outcomes join retained email, SMS and record activity in a newest-first timeline, with signed, owner-bound older-activity pagination. Matching SMS, Email, Note and Call icon filters query the full retained history; All restores the combined feed. The compact left column places Core Record before Marketing & Tags, with accessible green plus controls and red trash icons for removing current methods while retaining history. Copy icons beside the plus controls copy the current phone, email or full address, with individual Copy actions for multiple values and accessible success/failure feedback. Copying never calls, sends or changes a contact. The explicit Call action beside an eligible active phone starts cellphone-first calling; Text and email controls select the matching message recipient without sending or discarding draft text. The right column contains Known Visit links; redundant restrictions, relationship and source/context cards are not displayed. Notes are append-only and duplicate submissions are idempotent. Imported provenance remains distinct; Retained-call summaries require retained source evidence; recording was activated October 18, with real-call acceptance still pending; bulk dialing remains excluded.

Gives Smart Lists reliable, explainable timestamps and gives the owner a record of why outreach happened.

The right-panel Associated Files card lists clickable filenames and modified dates. Add uploads a PDF up to 4 MiB; icon-only actions archive after confirmation or restore retained files. The Actions column has no visible heading. Archiving never permanently deletes the bytes. Owner sign-in protects upload and opening. Email attachments, public sharing and MCP file access remain excluded.

Keeps reports beside the contact without turning them into public downloads or changing message-sending scope.

Controlled January 2026 baseline import with immutable source ledger, exception evidence, owner boundary, effective reconciliation, and idempotent replay.

Starts Smart Lists with the real relationship database instead of a sterile empty CRM.

Owner-only Inbox/Closed views show future known-contact messages, incoming/outgoing markers and exact hover/focus times. SMS uses compact Open/Closed rows, incoming/outgoing message cards, expandable timestamp evidence and a responsive ad hoc/optional-template composer at the top of the conversation with provider-managed sending hours and a single Send button. Routine hints and separate preparation/review steps are removed; server-side exact-message binding and duplicate-send protection remain. Owner-facing SMS timestamps use Pacific time. Scheduled, queued, sent, canceled and delivered outcomes are distinguished; scheduled is not sent. Organizational Close/Reopen and stale-action protection passed production acceptance. Team sharing, assignment and notifications remain deferred. Email receives CRM-address replies through the same Inbox navigation. Compact conversation rows show contact, subject, preview, date and status; Open/Closed tabs and a New email name/email contact picker keep navigation direct. The CRM shares consistent responsive typography, navigation, forms and cards, with readable message cards, expandable quoted text and delivery evidence, state-aware Close/Reopen and visible unsubscribe restrictions. It does not ingest Gmail.

Makes the delivered SMS scope explicit without claiming historical import or a complete cross-channel history.

Known-contact incoming SMS and guarded owner individual reply transport are production-verified with immutable private evidence. The inbox supports ad hoc messages or optional-template editable drafts, explicit quiet-hours scheduling and one inline Send action, linked atomically to the existing guarded transport. Inbox New SMS opens a dedicated name/phone recipient picker and composer rather than People. Selection is read-only and sending reuses the guarded individual SMS path. Explicit Send reopens an existing closed conversation for the exact selected contact and phone; merely opening the composer does not. Contact pages expose a message textbox and Send SMS directly in the central action tabs. Submission atomically starts or reuses the selected active phone method’s conversation and binds the exact recipient and text through the same guarded transport, without a repeated review checkbox. Opening a conversation neither sends a message nor establishes consent. Owner-approved manual one-to-one sends do not require a separate 30-day CRM consent record or prior successful recipient activation. No consent evidence is created or inferred. Contact-level and number-level SMS suppression, exact recipient binding, rate limits and Twilio opt-out enforcement remain. Definite policy rejections show their reason; rejected or uncertain dispatch replays cannot trigger another provider call. Legacy non-manual paths retain their evidence prerequisites. New quiet-hours submissions request 08:07 Pacific delivery. Area code 808 uses 08:07 Hawaii time and 671 uses 08:07 Guam time, with 21:00–08:00 quiet hours in the same zone. These are area-code estimates. Twilio protections stay enabled and may defer delivery further. Scheduling too near the provider’s minimum lead time is blocked, never silently sent immediately. The original quiet-hours hold and delivery test is accepted complete; conversational exemptions remain unverified. R3 reverified current catalog privacy boundaries and the retained controlled inbound; the single approved S8 reply was delivered October 5, with exact original-inbound linkage and two positive signed provider callbacks. The owner confirmed handset receipt. S8 direct reporting and final S9 release review are complete; the completed worker chat is archived and private evidence retained. Conversational exemptions remain explicitly unverified. Group texts, MMS/video and an automated dialer remain deferred. Owner-accepted click-to-call and the separately activated recording feature are described above; real recorded-call acceptance remains pending.

Preserves one-to-one consent, suppression and recipient safeguards without implying bulk or multimedia capabilities.

The retained C6 path and the new separate CRM-email system support guarded individual delivery. The new composer resolves a saved template, published image and signature into exact final review, with a mandatory branded unsubscribe footer and one-click headers. Contact-level and address suppression apply across CRM email send paths; personal email and SMS consent remain separate. No bulk route.

Enables a timely, individualized response to Smart List activity without prematurely building a campaign engine.

Owner-private template creation, revision editing, archive history, and the six-field prospect map are live. Archived SMS templates have a red trash icon with a tooltip and explicit confirmation for permanent library removal; immutable revisions, drafts and message history remain intact. Inbox template selection resolves fields into an editable draft; missing fields silently merge empty. The message box sits at the top of the conversation: write and Send, or load an optional template into the same box. One explicit Send binds the exact edited text and recipient server-side, without a separate draft/review screen. New drafts use Twilio-managed recipient timing without a timezone picker; existing timezone evidence is retained. Authenticated no-send production acceptance verified substitution, frozen multiline text and duplicate-confirmation recovery.

Reusable content is reviewed as actual prospect-specific text before sending, without rerunning substitutions at dispatch.

The Contact page’s Send Email tab contains the template-aware rich-text composer inline; the selected recipient and saved template resolve into an editable one-to-one draft, and loading never sends. Templates, signatures and composing share one rich-text writing surface with formatting, lists, undo/redo, link dialogs and published-image selection. Versioned templates retain extensible First/Last/Full Name substitutions. Search-as-you-type contact selection shows name/email and automatically refreshes the personalized preview. Blank fields insert nothing. Explicit Save draft, Resume and Discard preserve SMS/email content in the existing composers, with a unified Inbox Drafts view. Conflicting edits are protected and uncertain sends remain fenced against duplicate submission. No attachments.

Saved content is resolved and reviewed for one contact before sending; preview does not save or send.

Production-activated owner-private Email inbox receives future known-contact replies at the separate connect.sdhousehunting.com identity and logs sent/received facts in contact history. SMS, email, voicemail and internal System messages share one owner-private Inbox with All / SMS / Email / Voicemail / System filters, chronological rows and channel badges. Voicemail rows include caller/contact name, duration and transcript preview; existing private playback and contact links remain available. Voicemail supports owner-controlled Close/Reopen and Open/Closed filtering without removing recordings or transcripts. Successful Close actions for SMS, email, voicemail and System conversations return to that channel’s Open Inbox; stale or failed changes do not report success. Conversation state and reply controls remain channel-specific; Email read markers do not imply SMS unread tracking. Incoming sender identity is unverified (claimed-address matching); no Gmail synchronization or historical import is claimed. Last Email Reply is available as a nullable People column, Smart List date criterion and deterministic sort, based only on matched incoming CRM email receipts.

Avoids pretending the CRM has a complete conversation history before it actually does.

System is a fourth Inbox channel, separate from Email. Existing Custom Fields reminders retain explicit Accept/Keep decisions for the exact current proposal. Generic typed conversations support internal replies, linked contacts, stable correlation keys and close/reopen with immutable history. System history is newest first with older-page navigation and safely clickable HTTP(S) links. The single-line reply field posts with Enter or Post reply; paste, IME, empty input and duplicate-pending submissions are guarded. MCP incremental event order is unchanged. Owner UI and MCP authorship are distinct. Seven scoped MCP actions provide bounded reads, conversation creation, replies, status changes and explicit review resolution.

No customer delivery, automatic approval from reply text, arbitrary workflow execution or future producer activation. Live lists and MCP permissions are verified; writes and review decisions were tested synthetically without changing real records.

Owner-private append-only manual follow-up evidence with optional Last Contacted / Last Attempt Smart List criteria, columns, deterministic sorts, and selected-view grid/detail explanation. Existing views and Default remain unchanged; blanks are not zeroes or inferred contact, and only explicitly recorded interactions qualify.

Establishes a truthful follow-up signal without burying high-value outreach in a general list.

C6 manual one-to-one send plus L2 verified provider outcomes—delivered, bounced, complained, suppressed, opens, and clicks—for messages sent through the configured path. Owner-only Smart Lists expose Last Email Delivered and Last Email Engagement Observed as nullable timestamps. Opens and clicks remain observations, never proof of reading or intent; no campaign platform is selected. Last Email Sent now includes the first provider acceptance for each owner-bound Email Conversations message as well as the legacy individual-send path; acceptance is not delivery. The separate Email Conversations system additionally records per-message delivery/reply facts and explicit website-link confirmations in private contact history; Last Email Reply now provides a nullable People column, Smart List date filter and deterministic sort from the first server receipt of each matched incoming CRM email. Duplicate receipts do not advance it; blank means no qualifying recorded receipt. This does not include Gmail history, authenticate the sender or prove a human read.

Lets an agent distinguish a fresh conversation from an untouched contact while avoiding fictional engagement metrics.

TheBoss collects bounded first-party evidence through owner-issued known-contact links. New email links record a page only after explicit website confirmation; possession of a forwarded bearer link does not prove the visitor’s identity. Owner-only Smart Lists expose the nullable Last Known Visit timestamp. Anonymous browsing remains out of scope.

Provides a narrowly bounded return-visit follow-up view without pretending anonymous traffic is a contact.

Owner-private future known-contact SMS history exposes nullable Last Text Sent and Last SMS Reply Smart List criteria, selected columns, and deterministic sorts. Last Text Sent is qualifying verified sent evidence; Last SMS Reply is a matched inbound receipt at the server. Blank is no qualifying fact; neither signal represents delivery, engagement, consent, or inferred activity. Historical import, uncertain identity inference, shared inboxes, campaigns, owner-defined scheduling, automation, and bulk SMS remain excluded.

Surfaces bounded, explainable current SMS facts without treating messaging evidence as a marketing score or a complete cross-channel history.

Released for known contacts only: an owner-issued link, first-party session, signed server-to-server collector, and append-only activity context. Owner-only Smart Lists expose only the nullable Last Known Visit timestamp; anonymous visitors and browser-direct collector calls are rejected.

Supplies a narrowly verified return-visit signal without exposing raw tracking context or anonymous activity.

After-hours and unanswered calls use the supplied greeting. Signed Twilio callbacks retain recordings and automatic English transcripts in the shared owner-private Inbox. The separate Voicemail sidebar entry is removed; its old list URL redirects to the Inbox voicemail filter. A unique active caller-number match adds the voicemail to contact history; unknown or ambiguous numbers remain unassigned. An Associated Contacts card beside the voicemail playback controls shows larger named links to every active exact-number matching Contact, including shared numbers, and preserves an existing owner-scoped contact link. On narrow screens it stacks below playback. These navigation matches do not verify caller identity or merge records. Notification emails wait for transcription completion, put the transcript first and use TheBossVM - Contact Name - Phone Number subjects, with a matched contact link and private playback link. Failed or unavailable transcription sends an explicit fallback notice. A protected server worker expires pending transcription after 15 minutes and sends the owner a private recording-link fallback. Committed notification claims prevent duplicate sends; uncertain submissions require review rather than blind retry. A late verified transcript can still be retained without another notification. Unknown or ambiguous callers are labeled without guessing a contact. Private playback and contact links require owner sign-in. Recordings are limited to 119 seconds; answered calls are not recorded. Earlier voicemail was not imported.

Preserves incoming messages with caller context. Two real owner messages verified capture, automatic transcripts and notification acceptance; private playback succeeded. Busy and unanswered forwarding returned to voicemail. On October 25 the owner selected a Contact for both original office test voicemails. Both now appear in that Contact’s Activity with transcripts and playback links; recordings, closed state, notifications and all other voicemail fields were preserved. This verifies an explicit owner association, not automatic resolution of a shared number. Transcript-first notification timing, content, concurrency and retry checks passed with synthetic messages. On October 24 the deployed timeout worker resolved the stalled voicemail and recorded one provider-accepted fallback notification. Existing audio references, closed state and three prior transcript/notification records were preserved; mailbox delivery is not claimed.

Click an eligible active phone number to ring the owner’s cellphone first. Press 1 to connect the selected contact using the CRM caller ID. A separate Text button opens SMS. Existing voice restrictions, current-number checks, signed requests and one active call at a time protect both legs. Recent call attempts appear in Log Call with private status links. Recording and transcription are activated; successful real-call processing remains unverified.

Synthetic call-flow and full CRM regressions passed. The deployed contact controls and callback rejection were verified without placing a call. Jeremy confirmed the existing click-to-call flow is working properly and accepted on October 16, 2026; no additional test call was placed for this status update. An uncertain provider submission blocks redial until reconciled.

The professional clone and recorded-greeting recipe are owner-approved. One explicitly authorized own-number Slybroadcast test was delivered and accepted for audio quality. Recent generation requests appear at the top of the Voice library, above preparation and reusable audio. The owner-only Voice library previews exact scripts and separates generation approval from listening approval. Private storage and a guarded hosted processor are deployed; the restricted provider key is stored as a sensitive Production-only secret. The obsolete manual connection-check button is removed; backend voice-readiness checks remain. The original N2 general-generation hold remains for bulk names. The separately approved manual voicemail creation flag is active as of October 18; exact script preview and separate generation approval are verified live. Its deployed private recording studio, separate difficult-name queue and Contact left-column Greeting Recording card support deliberate recording, playback, review, retake and explicit acceptance/replacement while preserving existing accepted audio. The Contact card sits directly below DISC. Phone guidance is removed and voicemail preparation uses a compact labeled icon. The initial easy-name run attached 5,027 recordings; a later copy-only catch-up added seven. The expanded pass used isolated immutable alphabetical manifests, protected existing audio and pending takes, and revalidated each recipient. All 2,783 new private audio objects, including source assets, passed byte/hash verification. Its 514 receipt-confirmed credits exactly matched the provider account increase within the included allocation. The final copy-only recovery reused one already verified source asset for 15 current contacts with zero provider usage. Generated audio is labeled as generated, not owner-accepted. The released guarded alphabetical batch runner and private progress ledger remain isolated from manual voicemail creation; bulk name generation stays separately held, and from the separately confirmed single-contact delivery path. No ongoing paid-generation authority is implied.

Twenty-one approved recordings and complete examples are available in the private cloud library, with original hashes and approvals preserved. Original local files remain intact. Contacts now support approved complete-message selection, exact phone/caller-ID and script preview, explicit greeting/details confirmation, immutable draft history and cancellation. Current phone restrictions, shared-number conflicts and audio approvals are checked before saving. Drafts are not deliveries. Single-contact Slybroadcast sending is deployed with complete-audio preview, explicit recipient permission and time-zone confirmations, recipient-local 9 AM–8 PM delivery windows, current restrictions, a private submission ledger and a one-submission-per-recipient-per-24-hours limit. Uncertain submissions are never automatically retried. Provider delivery states appear in Contact activity and do not claim the recipient listened. The owner-approved office-only sample test is provider-confirmed delivered; no recipient-listening claim or repeat submission. Explicit manual voicemail creation is enabled; first generated-audio acceptance remains pending. Automation narration, scheduling and campaigns remain deferred.

Behind an exact opt-in flag, press-1 calls can record from contact answer and process both speaker channels after the call. A supported owner disclosure without objection retains audio and transcript; no disclosure retains only the transcript after audio deletion. Objection or DNC removes both; DNC also blocks later CRM voice calls to the number. Uncertain classification removes both for ordinary calls. The October 19 deployed test controls allow explicitly pre-consented test calls to hold failed or uncertain audio privately for up to seven days, with owner-only playback and revision-safe retry. A separate deletion-test mode keeps normal deletion rules. No-disclosure, objection/DNC, expiry and explicit deletion are not bypassed. Test-held audio produces no insights. Private playback, manual removal, missed-callback reconciliation and durable deletion retries are implemented.

Implementation and private schema are deployed. Synthetic retention, lease, deletion, role-isolation and default-off checks passed. Owner-provided live readiness on October 18 confirms capture enabled and whisper-1/gpt-4.1-mini/gpt-audio-1.5 access, with zero billable requests or customer media submitted by the check. The first live call encountered transcription HTTP429 and its audio was deleted under the ordinary retry policy; no transcript or insights were produced. A new consenting call is required. No successful real-call or AI-output acceptance is claimed; classification is not a legal consent determination.

Retained outbound audio can produce a summary above the transcript: connected time, estimated speaking/listening shares excluding silence, adjustable 1.0–5.0 sentiment, and Buyer/Seller/Unsure confidence. Calls longer than 90 seconds can receive color-coded tentative DISC estimates from recipient words and sampled intonation. High-confidence Buyer calls show LPMAMA; Seller calls show timeframe, destination, motivation, equity and cost of inaction. A separate left-column Custom Variables card displays only nonempty stated facts, with source evidence and manual corrections. Contact updates fill empty variables automatically; contradictions require a blocking owner review. Cumulative DISC weights accepted calls by duration and tone/sentiment clarity. Unresolved changes generate an internal Inbox System review after 24 hours.

Synthetic audio, evidence, privacy, deletion and owner-edit checks cover the implementation. Analysis stays coupled to retained audio; source deletion purges summaries and derived facts. No live model calibration or personality-validation claim. Owner-provided production readiness verified capture enabled, private/test-hold schema and access to whisper-1, gpt-4.1-mini and gpt-audio-1.5. Model access is not a successful processing or calibration test. The first call failed transcription with HTTP429; a new consenting call is required to verify transcript, retention and insights. The editable rubric is available under Call analysis.

Retained-call summaries, tentative DISC, sentiment and qualification evidence are implemented and synthetically tested as described above. Production outbound recording was activated October 18 after owner-confirmed attorney review; all three required model-access checks pass, while real-call output acceptance and live model calibration remain pending. General AI note summarization remains excluded.

Separates available code from authorized live analysis and keeps source evidence and deletion behavior explicit.

Fifty registered local MCP tools provide contact, history, vocabulary and Smart List reads; notes, call logging, core contact edits, Smart List creation/editing, individual phone/email/US-address addition or replacement, SMS/email template reading, creation and active-template editing, seven internal System-message operations, five saved SMS/email draft tools and four SMS/email/voicemail Inbox tools, plus vocabulary creation, protected exact-version rename, unused-choice retirement and tag-category reads, signature read/create/update and reusable image metadata listing/editing and single-image archival. Signature writes retain revisions, require exact versions and atomic retry receipts, and never rewrite existing drafts or sent history. Image listing is limited to published, unarchived owner assets without fetching bytes. Vocabulary creation adds one available choice, never a contact assignment; duplicate normalized labels (including inactive values) are rejected. Categories use the Contact editor’s existing grouping and unknown labels remain Needs review. Inbox reads include channel/state lists, metadata and retained plain-text message/transcript chunks without changing read markers. Closing/reopening requires the exact version, invalidated by new arrivals, plus an atomic retry receipt. System keeps its separate tools and scopes. Draft edits require exact revisions, immutable recipient/context and pending-send protection. MCP9 separately permits one explicitly requested exact-revision saved-draft discard; unresolved send attempts block it. Discard cannot cancel scheduled messages. It clears application-visible draft content while retaining minimal audit and receipt metadata; it does not promise backup erasure. Complete retained history, template content and System events are paginated. MCP10 separately permits one explicitly requested exact-version reusable SMS/email template archive. It removes the template from active selection while retaining content and revisions; existing drafts and scheduled messages remain unchanged. Signatures, deletion, restore and bulk archive are excluded. Template previews create no saved draft or send authorization. Replaced methods and prior revisions remain retained. Owner-bound explicit grants, audit, retry receipts and stale-edit checks are enforced. The local-owner profile now has 51 tools under 35 explicit scopes. MCP8 adds one read-only saved-status tool: HUB and Downline return up to five non-test run summaries; Facebook exposes its saved checkpoint status. It does not verify current provider availability or retrieve referral content, credentials or raw errors. Fresh SDK discovery and four metadata reads passed; 98 isolated database/SDK checks and7 reference tests passed. MCP9 passed 106 isolated database/SDK checks, 19 saved-draft checks, full CRM regression and fresh installed-runtime discovery. No real draft was discarded. MCP10 passed 115 isolated database/SDK checks, seven reference tests, full CRM regression and fresh installed-runtime discovery. No real template was archived. MCP11 adds separately approved single tag/stage/source rename with exact edit versions, protected workflow/restriction labels, preserved assignment IDs and audit/replay. It passed 128 isolated PostgreSQL/SDK checks and fresh installed-runtime discovery; no live rename was performed. MCP12 adds separately approved exact-version retirement of one unused tag, stage or source. Protected labels and all Contact, attribution and saved-list references block retirement; database guards reject late references. Rows and history are retained. 143 isolated PostgreSQL/SDK checks, full CRM regression and fresh 48-tool/32-scope discovery passed; no live choice was retired. MCP13 separately permits exact-version label/alternative-text edits for one published, unarchived owner image. Append-only descriptions preserve original asset identity and existing embedded email content. 155 isolated database/SDK checks, 14 image lifecycle checks, full CRM regression and fresh 49-tool/33-scope discovery passed; no live image was edited. MCP14 separately permits one explicitly requested exact-version reusable-image archive. It retains bytes, URLs and description history and leaves saved/sent content unchanged; the image is unavailable for future selection and sends, so saved drafts may need a replacement. 166 isolated database/SDK checks, full CRM regression and fresh 50-tool/34-scope discovery passed. No live image was archived. MCP15 adds separately approved read-only description history for an exact published image, including archived assets. Bounded pages retain the original description and revisions without image bytes, URLs or provider access. Independent 183 isolated checks, full CRM regression and fresh 51-tool/35-scope discovery plus an existing-image history read passed. Existing attached chats require a real connection refresh. New writes remain tested only on isolated records. Connection-upgrade diagnostics now expose nonsecret startup/catalog identity in the capabilities read and explicitly reject unfamiliar stored permissions without granting partial access. The integrated release passed 172 isolated checks and fresh 50-tool/34-scope verification; existing already-loaded chats still require a real MCP refresh. Existing chats may require an MCP restart. The legacy private fixed-read route remains separate.

Supports requested owner operations without a public general-purpose MCP endpoint, arbitrary SQL, bulk writes, customer message sending, dialing, contact/conversation deletion, consent changes or provider activation. Other second-layer domains remain planned, not enabled. Vocabulary merge, deletion, reactivation and category editing remain ungranted. Draft sending, signature archive/deletion and image upload/pixel editing/deletion/restore and bulk archive remain ungranted; previews do not inject signature/footer, render HTML, fetch images or issue tracking links. No recordings, attachments, raw provider payloads or reconstruction of unretained history. The System-only Automation grant is unchanged.

Only the existing Contact Us form 20 may send a signed, versioned server-to-server envelope to the production CRM. It records explicit false-by-default marketing consent in an encrypted append-only owner-review case; it does not automatically create a contact, alter lifecycle or consent, send mail, run deletion, or read/replay a prior form entry.

Creates a narrow, review-first website inquiry path while retaining the consent and operator boundary.

Opt-in adapter persists outgoing requests, recovers uncertain receipts, consumes authenticated owner replies incrementally and retains artifact-version context. Processing receipts and acknowledgement requests are atomic; stale or unbound replies cannot silently transfer approval. Seventeen recovery tests and a real MCP SDK round trip passed.

The library alone does not activate future producers. The separately authorized video-job VDS consumer below is now active through SYS4. No broader automatic interpretation, media access, customer messaging or publishing is implied.

Dedicated HTTPS RPC provides exactly five capabilities/read/events/create/reply operations for the owner-bound Automation video namespace. Expiring hashed credentials support permanent revocation; persisted quotas and immutable redacted audit preserve exact request retries and ascending events. Fifty isolated database/SDK groups and full CRM regression passed. Live scope denial, probe revocation and existing conversation reads were verified.

The separate owner-authenticated referral MCP passed all eight live tools: capabilities, System search/read/events/create/reply and durable checkpoint read/write. One synthetic conversation and checkpoint passed exact-retry and checksum readback. The eXp workflow completed cloud cutover: one enabled four-times-daily Pacific schedule, local monitor paused, and a real 18-query scheduled sweep with no actionable referrals or pending deliveries. Fresh actionable hits flow to private System messages; no automatic agent outreach. Private-group/comment/image/DM coverage and older ZIP baseline gaps remain unverified. The owner-installed connector restart and independent service/readback checks passed. The root-only certificate renewal dry-run remains unverified. Separate from general local MCP. No contact-linked conversations, customer tools or sends, status changes or Custom Fields approvals. Automation independently completed its VDS ledger migration and bounded worker activation below; no response SLA or broader workflow activation is claimed.

Non-root five-minute worker uses the scoped SYS4 connection with persistent job receipts, exact-version review commands, clarification, pause/cancel and bounded Pacific quiet-hour reminders. The existing version-4 review conversation and exact video were migrated without resetting IDs or cursor. Jeremy's real Status reply was acknowledged and read back; the next natural scheduled cycle resumed with one owner receipt and no duplicate message.44 focused tests passed.

Windows remains disabled. Approval is editorial only. No customer transport, publishing, Photos access, automatic generation/edit execution or response SLA. Read/seen receipts and external uptime alerting are not supplied. New cuts require verified media migration; scoped credential renewal remains an operator responsibility.

Automation-owned local bridge selects exact private Drive files by role/script revision, preserves original MP4/MOV takes and queues an immutable CPU assembly. The reusable hybrid recipe matches speech, lays existing narration over moving B-roll, applies synchronized L/J cuts and body-only ducked music, and preserves original intro/outro audio. A 70-second isolated existing-media render passed full decode and measured audio checks; 61 focused tests cover the handoff and existing System behavior. A9SYS5 adds a dedicated internal Google app, owner-consented drive.file grant and protected non-root VDS credential. One explicitly selected opening sample passed fresh token refresh, owner/privacy/version and checksum verification; 54 focused checks passed. Each future take still requires explicit app-file selection. Review readiness still requires verified private upload/readback.

Not an unattended CRM media feature. No recurring retrieval, new live upload, Photos access, automatic edit execution or publishing was activated. The current VDS System worker and accepted version-4 sample stay unchanged. Technical validation is not new editorial/listening approval.