What NAVIG operates today
Every row is real.

Add, switch, and test SSH hosts — with per-project context that remembers which server each repo talks to.

Run any command on the active host, stream the output back.

Containers on the active host at a glance.

List databases, dump them, back them all up in one pass.

Inspect, edit, and upload files on remote hosts without opening a shell.

Repeatable deploy workflows with history and a rollback path.

Preview updates before applying them; roll back when one goes wrong.

Node, Mission, and ExecutionReceipt are versioned, schema-pinned contracts — not loose JSON.

queued → running → succeeded / failed / cancelled / timed out. Only legal transitions are accepted; failed and timed-out missions can retry. State survives a daemon restart.

REST on your local gateway: register nodes, create and advance missions, read receipts.

Any MCP-speaking agent can read the runtime state — nodes, missions, receipts.

Queue view, per-state timeline, start / cancel / retry, and receipt inspection — the full lifecycle without CLI fallback.

Every mission that reaches a terminal state records a receipt: outcome, duration, error.

Launching AI-executor missions directly from the Deck (today the Deck operates runtime lifecycle records).

Flux Mesh Phase 1 — peers discover each other on your LAN over UDP multicast. LAN only, by design.

Privileged gateway actions pass a policy gate: allow / require-approval / deny per action pattern. Timeout, error, or no approval channel means denied — never silently allowed.

Every policy decision is recorded — who, what, when, decision, matched rule. Inputs stored as hashes, never verbatim.

Every recorded operation is chained to the previous one. Delete, edit, or reorder a line and verification fails. Tamper-evident, not tamper-proof — worded honestly.

Every operation is labeled green (undoable), yellow (compensable), or red (irreversible) — unknown defaults to red. Undo replays the last green operation with drift detection and double-undo protection.

Recent operations with chain state, reversibility label, and undone markers. Secrets are redacted before display.

Destructive patterns are blocked or require confirmation; safe mode limits sudo and concurrency.

One command checks the whole install; safe fixes can run automatically, disruptive ones are prescribed, never auto-executed.

Operate from your phone: run status checks, receive alerts, approve gated actions.

One browser login deploys a tiny edge worker to YOUR Cloudflare account. The brain dials out over a single WebSocket — no tunnel, no open ports, no domain.

Publish your own Deck UI and wire it up as your bot’s Mini App button — one command.

The operator cockpit in your browser, served by your local gateway.

Knowledge the agent pulls in — teaches it how to do a kind of task. SKILL.md format, Claude Code-compatible. Always free.

A personality — the voice and manner the agent speaks in. Free.

A whole workshop — a folder with skills, agents, plans, and memory.

Installable, executable, verifiable outcomes — apply an outcome, proven by a verified receipt.