What you are building, and why it pays off
Chapter 1: Executive overview
Most founders run their life and their business across fifteen tabs: a CRM nobody updates, a calendar that lives in one account and the inbox in another, a content plan in a spreadsheet, health notes in an app, ideas in voice memos and a dozen automations glued together by services you forgot you pay for. Every tool is fine on its own. Together they cost you attention, which is the one resource you cannot buy more of.
This guide shows you how to build one private environment that holds all of it, with intelligent automation that prepares work for you and never acts without your approval. It is the method behind the operating system I use every day to run consulting work, content, partnerships and my own routines. Everything here is rewritten for you from first principles, with fictional examples: you will meet Alex Rivera, the founder of Northwind Studio, a five-person brand and web agency, who appears in every example in place of real people or clients.
What you will have at the end
- A private web app on your own domain, with a Work dashboard (CRM, pipeline, editorial calendar, approvals) and a Personal dashboard (calendar, inbox intelligence, health and nutrition modules), switchable with one click.
- A database you own, protected by row level security on every table, with personal data in a separate schema and sensitive fields encrypted at rest.
- An agent runtime: every AI call goes through one function that checks the agent's permission level, refuses to spend beyond a monthly cap, records a run log and stores only redacted output.
- A scheduler and background worker that run jobs (inbox rounds, morning brief, content drafts, data sync) and leave a visible outcome for each run.
- Connectors to Google, LinkedIn and Meta through their official APIs only, with encrypted tokens and a single place to disconnect each one.
- A voice assistant that turns a spoken sentence into a typed, checked action plan, with undo.
- Nightly encrypted backups, a tested restore procedure and a maintenance routine that takes about an hour a month.
Who this is for
Founders, consultants, solo operators and small agencies who are comfortable reading code and willing to run a real deployment. You do not need to be a senior engineer, but you need to be able to follow a migration, read a stack trace and use an AI coding assistant critically. The level is Advanced: plan two to four weeks of focused evenings, or one to two weeks full time.
What this is not
- Not a no-code template. You will write and own the code, with an AI assistant doing much of the typing.
- Not a SaaS. Nothing here is hosted for you, and nothing phones home.
- Not an autopilot. The whole design assumes a human approves every outward action: sending, publishing, paying, deleting.
- Not medical, legal or financial advice. The personal modules are architecture: how to store and protect your own records, not what to do with them.
One environment. Your entire life and business. Automation that prepares, a human who decides.
One environment, approval-first automation
Chapter 2: The problem and the principle
The problem: context lives in too many places
When Alex prepares a call with a prospect, the useful context is scattered: the last email thread is in Gmail, the proposal is in a shared drive, the deal stage is in a CRM, the LinkedIn post the prospect commented on is somewhere in a feed, and the fact that Alex slept five hours and has three back-to-back meetings is nowhere at all. Each tool knows a slice. None of them can help Alex decide what to do next, because none of them sees the whole picture.
The usual fix is more integrations: a webhook here, a zap there. That moves data around but it does not create a place where decisions happen. Worse, every automation that acts on your behalf (sends the follow-up, posts the update, files the invoice) is a liability the day it misfires, and you usually find out from the person who received it.
Principle 1: one environment
Everything that matters to your work and your life lands in one database that you own, behind one login, viewed through one interface with two modes. Work and Personal are separate rooms in the same house: they share the front door, the security system and the utilities, but personal data never leaks into a work screen, and a work assistant never reads your health notes.
- One database, two zones: the
publicschema for work data, a separatepersonalschema that the public API cannot even see. - One module registry: every page is an entry with a mode, a status and an honest label (operational, waiting for authorization, planned).
- One activity log for work and one access log for personal data, so you can always answer "who touched this, when, and why".
Principle 2: approval-first automation
Agents in this system prepare; you decide. An agent can read, summarise, classify, draft and propose. It cannot send an email, publish a post, change an ad budget, merge two records or spend money. Those actions are hard-coded as "always approve": no configuration, no prompt and no permission level can pre-approve them.
| Level | Name | What the agent may do |
|---|---|---|
| 0 | Off | Nothing. Runs are refused before any model call. |
| 1 | Draft | Write drafts and proposals into the database. Nothing is queued. |
| 2 | Queue | Draft and place the item in your approval queue with a due time. |
| 3 | Bounded | Perform pre-approved internal actions (tag a record, fill an empty field). Never outward actions. |
Why this works in practice
Approval-first sounds slow until you try it. In practice the expensive part of a follow-up email is not clicking send, it is remembering that it is due, finding the thread and writing a decent first draft. The system does those three things overnight. In the morning Alex opens one queue, reads eight drafts, edits two, approves six and rejects one, in about ten minutes. Nothing went out wrong, and nothing was forgotten.
The same principle protects you from the failure mode of every AI system: confident, plausible, wrong output. A wrong draft costs you ten seconds. A wrong email sent at 3 a.m. to your best client costs you the client.
The map of the whole system on one page
Chapter 3: Architecture(members and buyers)
The full system diagram: web app, database zones, agent runtime, scheduler, background worker, connectors and backups, and how a request flows through them.
What to use, what it costs, where the free tiers end
Chapter 4: Stack and costs(members and buyers)
The recommended stack, why each piece was chosen, alternatives, and realistic monthly cost ranges for a lean, a recommended and a heavy setup.
A generic schema you can grow for years
Chapter 5: Data model(members and buyers)
The core tables for work, agents, jobs and personal data, the naming conventions, and the patterns that keep the schema stable as you add modules.
Row level security, encryption, secrets and the audit log
Chapter 6: Auth and security(members and buyers)
Invite-only auth, roles, row level security patterns, the isolated personal schema, field encryption with key versioning, secret handling and an append-only audit log.
Budget guard, run logs and approval levels around every model call
Chapter 7: The agent runtime(members and buyers)
The single function every AI call goes through: policy check, worst-case cost estimate, budget caps, structured output, spend ledger and redacted run logs. With code.
A scheduler you can trust while you sleep
Chapter 8: Jobs and background work(members and buyers)
The jobs table, the fifteen-minute tick, background functions for long work, claiming and idempotency, visible outcomes and the kill switch.
Official APIs only, minimal scopes, encrypted tokens
Chapter 9: Connectors: Google, LinkedIn, Meta(members and buyers)
How to connect Google Calendar and Gmail, LinkedIn and Meta through their official APIs: OAuth flow, minimal scopes, approvals and review timelines, token storage, disconnect and data deletion.
CRM, pipeline, editorial calendar and the approval queue
Chapter 10: The Work dashboard(members and buyers)
The screens that run the business side: today view, CRM and pipeline, editorial calendar with approval, newsletter, and the single approval queue. With prompt templates for drafts and CRM hygiene.
Calendar, inbox intelligence, health and nutrition modules
Chapter 11: The Personal dashboard(members and buyers)
The private side: a merged calendar, inbox intelligence that turns messages into proposals, generic health and nutrition modules, and the rules that keep personal data separate from work.
From a spoken sentence to a checked, typed action
Chapter 12: The voice assistant(members and buyers)
Speech capture with a free browser engine and a server fallback, turning a transcript into a typed action plan, the allow-list, confirmation for outward actions, and undo.
Encrypted, off-site, and actually tested
Chapter 13: Backups and recovery(members and buyers)
Nightly encrypted database dumps, off-site copies with a narrow scope, retention, monthly restore tests, key escrow and the disaster runbook.
Four weeks, one subsystem at a time
Chapter 14: Implementation plan(members and buyers)
A week-by-week build plan with daily steps, an interactive checklist you can tick as you go, and the prompts to drive an AI coding assistant safely.
What breaks, why, and the one-hour monthly routine
Chapter 15: Troubleshooting and maintenance(members and buyers)
The most common failures (auth loops, empty queries under RLS, jobs that never run, expired tokens, budget blocks, schema errors) with fixes, and a weekly, monthly and quarterly maintenance routine.

