Real problems.Smarter solutions.
Development, automation, AI integration and systems for a more capable tomorrow.
Development · Automation · AI integration · Systems that work
- ROLE / Claude
Reads the whole system before touching it. The messy architecture questions go here — what breaks, what to keep, what to throw away.
- ROLE / Codex
Writes and refactors alongside me. Codex takes the mechanical passes so the decisions that need judgement stay mine.
- ROLE / ChatGPT
The thinking partner for shape and strategy — a plan is not finished until it survives its own objections.
- ROLE / Grok
Goes and looks. Grok chases what is current: releases, pricing, and the thing that quietly changed last week.
- ROLE / Gemini
Reads what isn't text. Screenshots, diagrams, recordings and scanned documents go to Gemini when the answer is visual.
- ROLE / Hermes AI
Runs the work that shouldn't need me. Hermes keeps scheduled jobs, agents and integrations moving between sessions.
Human thinking.
AI amplified.
The modules that run behind the site
06 systems01
Billing
Monthly retainers and one-off work, itemised to the line. No ambiguous add-ons, no surprise invoices.
02
Credentials
Hosting, DNS and CMS logins, rotated on schedule and sealed in an encrypted vault.
03
Contracts
Signed SOWs and SLAs, versioned and retrievable — the terms you agreed to, always on file.
04
Code vault
Source in a private repository, with diffs and commit history you can read at any time.
05
Activity
A plain-language log of every deploy, config change and renewal — nothing happens off the record.
06
Command center
The operator side: unpaid invoices, unread messages and unsigned contracts, oldest first, with the agency vault one click away.
Two sides, one surface
One portal, two points of view.
You know exactly what's true.
- See what's billed and why, invoice by invoice.
- Confirm credentials, contracts and domain ownership.
- Read the activity log for anything that changed.
You run it from one place.
- Manage every client, retainer and credential in one view.
- Ship, renew and back up without context-switching.
- Keep the whole operation auditable and on record.
Who it's for
Three people, one source of truth.
Built so trust isn't a promise
SecurityTenant isolation
Row-level security keeps every client's records reachable only by that client.
Server-held sessions
Sessions live in HttpOnly cookies and trust decisions are made server-side, never in the browser.
Admin MFA
Operator access to vaults, billing authority and contract signing requires a second factor.
No secrets in the browser
Service keys, tokens and provider credentials stay in server-only modules.
Encrypted vault records
Credential and agency vault entries are encrypted at rest with audited access events.
Audit logs
Every deploy, renewal and record change is written to an activity log you can read.
How access works
Invite-only, by design.
01
Invitation only
Accounts are never self-created. BNSN invites your team, scoped to your records alone.
02
Magic-link sign-in
No password to store or lose — you sign in with a one-time link sent to your work email.
03
Scoped portal
You land in your own portal: billing, work log, code proof and credential context.
Start with a clear view of your site.
Start with a transparent planning range. No account is required, and you will see the estimate before sharing your contact details.