wovu.
home coming soon GitHub

questions

The objections, answered.

Nothing here is about anyone else's product. Every answer is about what Wovu does, what it does not do, and what you would be able to check for yourself the day the repository opens. Where a number appears, we measured it on our own build.

nothing on this page has shipped. it is the specification the build follows, and every mono line names a real tool, table, column or command in it.

the obvious objections

Is this just git worktrees?

No, and it does not replace them. Keep your worktrees. They stop two agents writing over each other's files, which is a real job and a different one. Wovu is the part that carries something between them: one board both agents read and write, a run somebody else started that you can join and redirect, and a project that still has its thread six months later. A worktree ends when the shell does. The board does not.

Why isn't it a hosted service? That would be easier.

Easier to build, and much harder to get approved. Wovu is installed inside somebody's employer's network, and the person who approves it is rarely the person who asked for it. Companies say plainly that they cannot send proprietary source and prompts to a third party's servers, so a hosted version would fail at the one conversation that decides whether it gets used at all. Self-hosting is not a principle here, it is the shape that survives a security review.

Does my team have to change editors?

No. Everyone keeps the tool they are fast in. Wovu is not an agent and does not run one: it sits underneath whatever each person already chose. One command writes the config file for the four tools whose layout it knows, and anything that speaks MCP can connect by pasting two values.

What can Wovu actually see in my tool?

It varies by tool, and this page will not pretend otherwise. Claude Code has hooks, so file edits, shell commands and cost arrive live. Codex is read after the fact, from the state it already writes to disk. Everything else reports through the MCP stream itself, which is thinner, always present, and the reason the boundary can be the protocol rather than a list.

a screen with the live hook feed behind it is labelled a live session. one with only the MCP stream behind it is labelled activity. the naming is part of the build rules, not a preference.

Isn't a shared board just going to fill up with noise?

That is the failure mode to design against, so: entries are typed and scoped, an agent asking about one task is not handed the whole workspace, and search says out loud when it is running in a reduced mode instead of quietly returning less. Corrections a human makes in the review queue become rules with an owner, a count of the times they fired and a date they get looked at again, so nothing accumulates forever without somebody's name on it.

memory, and why this is not one

How is this different from a memory tool?

A memory tool saves notes and waits to be asked. That is two chances to fail: the note has to be retrieved, then it has to be obeyed. We measured it on our own build before writing a line of this page. With a shared board sitting there for the agent to query, it queried zero times. Not rarely. Zero.

Wovu does not wait to be asked. The work state lives outside the session, and a briefing is composed from the record and delivered before the agent's first turn. Nothing to search for, nothing to remember to read. The same knowledge that sat unread in a store arrives as the starting context instead.

the briefing is a deterministic view over the event log and the board, not a model summarising things: same inputs, same briefing, byte for byte.

If every agent shares one board, what stops a wrong lesson reaching all of them?

A gate, and it is the part nobody else ships. Before anything an agent writes counts as knowledge the fleet acts on, it is checked: does it contradict what is already there, do the files it refers to still exist, and does the recorded outcome of the run agree with the claim. Verdicts come from exit codes, test results and human decisions, never from a model's opinion, and no agent can write one about its own work.

When something later turns out to be wrong, the entry is retired and every session that read it is listed, so you know exactly what to look at again rather than guessing.

Is this not just a shared CLAUDE.md?

A file like that is a good instinct and it is where most teams start. It also has to be written by a person, kept current by a person, and read by an agent that may ignore it, and it grows until nobody trims it. The board is written as work happens, scoped so an agent asking about one task is not handed the whole workspace, checked before it counts, and superseded rather than edited, so the history of why something changed survives. If a file still works for your team, keep it. This is what to reach for when it stops.

If it is free, what stops it disappearing?

Nothing can stop a person losing interest, so the honest answer is the licence. MIT means the code you install is yours to keep, fork and run whatever happens next, and the data is in your own database on your own machine rather than in an account you would lose access to. That is the only guarantee anybody can actually give you at this stage, so it is the only one on this page.

your code, and whoever signs this off

What happens to my code and my prompts?

They stay where they are. Wovu starts an embedded database inside your repository and runs the same code against your own Postgres when you want it to. There is no cloud in the path, so there is no step where it phones home. Telemetry is off until somebody turns it on, and the switch is a command, not a support ticket.

What if an agent writes a secret to the shared board?

It gets refused rather than stored. Every write is scanned before it is committed, a confident hit is rejected, and the offending field is named back to the agent so it can try again without it. Nothing is written, and the audit row records that a write was blocked rather than recording the secret.

Who can see what?

Permissions are checked inside the services, once, for every way in, and the default is no. An agent carries its own scoped key and its own list of tools it is allowed to call, and it can never hold more than the person who issued it. An entry restricted to named agents is absent from everyone else's search results, not merely hidden from a list.

Can I prove afterwards what an agent was told to do?

Every instruction, approval, denial and admin action is a row in a hash chain, so a missing or altered row is detectable rather than invisible. It holds metadata only: who, what, when, and a reason. No content and no secrets, so the audit log can never become the thing that leaks.

What happens when somebody leaves?

Offboarding deactivates the member and keeps the knowledge. Their agents' entries, sessions and handoffs stay with the workspace, still attributed to them, so the person who inherits the project inherits the reasoning as well as the code.

when, and what to do now

When can I try it?

I do not know, and a date invented here would be the first thing on this site that was not true. The gate is a demo path that runs end to end: connect a real agent, watch it, redirect it, hand it off. When that runs, the repository goes public.

Why is the repository still private?

Two reasons, both boring. There is no demo path yet, so opening it today would ask people to evaluate a half-built thing from its file tree. And it gets a full history secret scan before it opens, because a repository is opened once and every commit that was ever in it opens with it.

What do I do if I want it now?

Two useful things. Watch the repository, so the day it opens you are not finding out from a launch post. And tell me what your team runs and what this would have to do before you would put it on your own box, because that answer is what decides the order the rest of it gets built in.

zubairaslam40@gmail.com

everything it does

The full list, by the question it answers.

Nineteen things, grouped under the four questions a team actually asks. The mono line under each label is the primitive that implements it.

"Has anyone already worked this out?"

One board per workspace, append only, written by the agents as they work and read by the next agent before it starts.

What the team already knows read_board
Typed entries, scoped to a task, a project or the whole workspace, so an agent asking about one thing is not handed everything.
Honest search search_memory
Keyword and vector search in one ranking, and with no embedding provider configured it says so in the response rather than quietly returning less.
Ask what was true last Tuesday effective_at
Every entry records when it became true as well as when it was written, so the board can answer for a date instead of only for today.
Keep an entry private visible_to
An entry restricted to named agents is absent from everyone else's search results, not merely hidden from the list.
It does not start empty wovu init
Seeds the board from what your repository already has, and every seeded entry is labelled as seeded, editable and removable in one action.
Already caught up SessionStart
The relevant entries load before your first prompt of the day, filtered by scope and permission. Ideally you never notice.

"Are we about to step on each other?"

Two people with agents are two people editing the same repository at machine speed. Wovu makes the other agents visible and the contended things claimable.

Who is working right now who_is_active
Agents and people, with liveness, not a list of everyone who ever connected.
One owner per task create_task
The second agent to reach for a task sees the claim and picks up something else.
Claim a file acquire_lock
Advisory locks with stale detection: if the holder dies the lock releases itself.
A warning, never a block radar_warning
When one agent starts touching files another is still changing, the warning arrives on its next step and names who, what and when. It warns. It never blocks, because anything that halts an agent mid task teaches the team to route around it.
Subagents, all the way down agent_path
No fixed depth. Presence, cost and blame roll up the tree for reading, while locks and warnings act at the finest level, where the collision actually is.

"Who said yes, and what did it cost?"

The output of a team of agents lands on a human who has to sign for it. This is the part your lead reads, and the part your security review asks about.

Ask a human first request_approval
Anything that destroys, deploys or moves data out of the building gates every time, and the request arrives as a Slack message with Approve and Reject on it.
A day of output, one screen needs_review
Approve, send back with the correction attached, or discard. Queue depth and time to resolve are counted, so a backlog is visible before it is a crisis.
What it cost, per person cost_records
Read from the usage logs your tools already write to disk. Estimated, never a billing claim. Warnings at 70, 85 and 95 percent of the monthly budget; at the cap the next run is refused with a reason.
A log that cannot leak audit_events
Every instruction, approval, denial and admin action is a row in a hash chain. Metadata only: who, what, when, and a reason.

"Why is it built this way?"

The question somebody asks six months later, usually about code no human wrote and nobody remembers reviewing.

Why this file exists wovu why
Point it at a file and it answers with the agent, the session, the decision being implemented, the alternatives rejected and a link to the replay. Code from before Wovu was installed says so instead of guessing.
Do not try that again auto_dead_end
An approach that failed is recorded with the reason, and the next agent heading down the same path is warned before it retries rather than after it has spent an hour rediscovering the same wall.
Correct it once convention
A correction made once in the review queue becomes a rule that loads into every agent's next session, with an owner, a count of the times it fired, and a date it gets looked at again.
The knowledge stays deactivated_at
Offboarding deactivates a member. Their agents' entries, sessions and handoffs stay with the workspace, still attributed to them.

none of this has shipped. the story it fits into is on the homepage.

still not answered

Ask the one that is missing.

If the question that would decide it for you is not on this page, that is the useful thing to send me. It goes on the page, and it moves the build order.