Dina — Test Results

“I need a chair” → 5 reviewers created (3 verified Ring 2, 2 unverified Ring 1)

Dina checks health vault (back pain, needs lumbar), finance vault (budget 10–20K INR)

Trust-weighted reviews: skip CheapChair (low trust score), recommends ErgoMax Elite

Sancho arrives → Sancho’s Dina contacts your Dina (D2D encrypted, Ed25519 signed)

Your Dina searches vault by Sancho’s DID, finds: “his mother had a fall”, “likes cardamom tea”

Nudge: “Sancho 15 min away. Ask about his sick mother. Make cardamom tea.”

“Is this video AI?” → Dina resolves creator DID via AT Protocol Trust Network

Elena (Ring 3): 200 attestations, 15 peer vouches, 2yr history → “authentic, trusted creator”

BotFarm (Ring 1): 0 attestations, 3‑day‑old account → “unverified, check other sources”

Shopping agent asks “any health conditions?” → Guardian blocks cross-persona access

Health (restricted): “L4‑L5 herniation” withheld. Proposes “chronic back pain” only

User approves minimal disclosure. PII scrubber confirms no diagnosis leaked

OpenClaw/Perplexity Computer wants to send email → pairs with Home Node, asks Dina first

Dina checks: safe? matches your rules? PII leaking? “send_email” → MODERATE, asks you first

Safe tasks (web search) pass silently. Rogue agent with no auth → 401, blocked at the gate

User uploads license scan → Brain extracts fields with confidence scores

Deterministic reminder fires 30 days before expiry (no LLM in the scheduling)

Delegation: Brain generates strict JSON for DMV-Bot. Guardian flags for human review

Most noise waits quietly. Real harm interrupts immediately.

At the end of the day, Dina gives one calm summary and clears the queue.

Dina exports from the old machine and imports on the new one as an encrypted archive.

The wrong seed cannot unlock the vault. The same seed restores identity and data.

Migration is non‑destructive: the old machine still works after export.

Gmail OAuth expires — connector status: expired. Vault and identity still work.

User reconfigures credentials, connector resumes. No cascade, no crash.

Re-run install script — DID unchanged (idempotent). No rotation, no orphaned data.

Identity is derived from master seed — immutable after bootstrap.

“Haven’t talked to Sarah in 45 days” → proactive nudge in briefing, not on demand.

Life event follow-up: “Sancho’s mother was ill” → “you might want to check in.”

Emotional dependency detected → Dina suggests specific humans, never herself.

When Dina has little evidence, she says so honestly.

When people disagree, she says the evidence is mixed instead of pretending certainty.

When the signal is strong, she speaks clearly and points back to the original sources.

Even in a flood of alerts, Dina interrupts only for what truly matters.

Fake urgency from strangers is suspicious; trusted urgent events can break through.

No auth, no access. Revoked means revoked immediately.

Sensitive actions stay blocked unless you approve them.

Agents cannot impersonate someone else.