The Android app brings the prompts of the poison0 agent to your phone. Whether your agents run in the cloud, in the basement or on a build server: You answer with one tap, and your agent keeps working.
AI agents write code, run commands and work on their own for hours. The human sets the direction, often from a phone.
In a cloud VM, on a server in the basement, on a build server. There they have compute, quiet and access to your repos.
You speak the task into your phone, and the agent carries it out on the remote machine. On the road, in a meeting or on the sofa.
Nobody looks at the screen of the machine where the agent works. The device you actually hold is your phone.
The poison0 agent asks when a decision is yours to make. At your desk the card appears right in front of you. On a remote machine it waits on a screen nobody is looking at.
Until an answer comes, the tool call does not run. Your task waits while you are on the road.
That keeps your machine safe. Steps you wanted then wait until you are back at the machine.
What was asked and why, you only see when you open the machine again.
The poison0 agent app shows every prompt of your machine on your phone, with agent, action and time left. You answer with Block or Allow, and the machine takes your answer at once.
exec0: An agent wants to run a risky command
Your phone shows the command. Block stops it, Allow lets it run.
leak0: An agent wants to send a secret out
The prompt appears before the value leaves your machine. You decide whether it may go.
poison0: A change to the agent's memory is held
Allow keeps the change, Block discards it.
You answer at the machine or on a second phone
The first answer wins. The prompt closes on every other device.
Nobody answers in time
When the deadline passes, Block applies. Your machine stays protected.
Every prompt is encrypted on its way between your machine and your phone. Only these two devices can read it.
Block takes one tap. You confirm Allow with your fingerprint, face or PIN, so only someone who can unlock the phone decides.
Prompts go to the phones of the person whose agent is asking. Administrators see in the console which phones are paired and can revoke any pairing. Only you see the content of your prompts.
If no answer comes, Block applies. Your protection never depends on your phone having signal.
During pairing your machine checks that the keys sit in the phone's secure hardware and belong to the unmodified poison0 agent app.
poison0 agent is available as an Android app. You pair your phone with your machine once, and from then on the prompts arrive on their own.
Install the poison0 agent app on your Android phone. The guide shows every step.
Run poisonzero mobile pair on the machine, scan the QR code and compare the 6-digit code.
From now on the prompts of this machine reach you on your phone, wherever you are.
The guide covers installation, pairing and every setting.