Warroom

The AI-native operating system that replaces operational headcount.

Existing software is built for humans to operate, with AI added as a feature. That makes people faster; it never makes them fewer. Warroom executes the workflow itself — the operator sets intent, approves what cannot be decided without them, and the schedule runs forward.

It was built to run one company. It is now a product that runs on its own — and the whole build is on this page, including the parts that broke.

Live figures · Production API + repository, 31 Aug 2026 17:00 UTC+8

59 seconds, no voice-over. Every figure in it is the same figure on this page, read from the production API and the repository on 31 August 2026.

Software made your team faster. It never made them fewer.

Every tool you already pay for assumes a person is driving it. Add AI to that and you get a person driving it slightly faster. The headcount stays, because the work between the tools — deciding what happens next, chasing what did not happen, checking that it actually went out — was never in any tool to begin with.

The queueWork sits waiting for one person to notice it. Nothing is broken, so nothing raises an alarm. You find out at the point it was supposed to have already gone out.
The handoffHalf of every process lives in someone's head. When they are away, the process is away. That is not a documentation problem — documents do not chase anyone.
The false greenA dashboard that shows a task complete when the call returned 200 and nothing happened. Silent success is the failure mode that costs the most, because you stop looking.
We did not build another tool for the operator. We built the thing that does the operating, and stops to ask when a decision is genuinely yours.

Four layers, one engine.

Warroom is not a social scheduler with AI bolted on. It is an execution graph with a governance layer, and distribution is only one of the things it can reach. The same engine runs the routine operating work of a company — quotes, follow-ups, reconciliation — because that is what it was built to do first.

InterfaceChat, decision cards on the operator's phone, a web console, or the customer's own agent over MCP.
AgentOne per tenant: model, tools, config, policy. Token modes: fully managed, bring-your-own-key, or MCP.
ToolsMCP-native and tenant-bound. This is where the guardrails live — because we do not control the customer's agent.
CapabilityDistribution, auto-cut, carousel generation, messaging automations, the rule engine, analytics.
It is a brain. You can attach many different hands and feet — Claude, Codex, whatever comes next.

Not a flowchart. A tree that grows.

Every piece of work I do hangs off one tree: a goal at the top, decomposed into a handful of pipelines, decomposed again into steps. Each step is one of four kinds of node — and knowing which kind it is decides who does it, what it costs, and whether it can be trusted to run alone.

⚙️ ExecutionThe system runs it. If it can be done without a model, it is done without a model — deterministic, repeatable, and close to free.
📏 CriteriaA threshold check against rules and data: did this piece clear its save rate? That question does not need intelligence. It needs a standard.
🧍 JudgementThe only place a human appears: approve, discuss, decide. The goal is to compress my week down to a few dozen minutes — and for all of them to be decisions only I can make.
🧠 KnowledgeA model is used where judgement is genuinely required, and every conversation, metric and correction is written back — so the next run starts better informed than this one.
In n8n or Make, every node stays the shape you drew it the day you drew it. Here, a node is a little smarter each week than it was the week before.

The workflow is executed by the system.
The human sets intent and approves.

PlanA revenue target is decomposed backwards into a weekly quota — price point, close rate, booking rate, leads per asset — with every assumption labelled default, industry or measured.
ProduceLong-form assets are cut into platform-native pieces with covers, titles, captions and first comments.
GateEvery asset passes a quality check before it can be scheduled. Hook missing, an open-ended question as the primary CTA, a claim with no matching visual, a lead magnet whose file does not yet exist — each is a block, not a warning.
PublishInstagram, YouTube, TikTok, Threads and Facebook, on schedule, with per-platform metadata.
CaptureKeyword-triggered messaging delivers the asset, optionally behind a follow gate, and writes the contact into the database with full attribution.
LearnPer-post metrics are snapshotted every six hours and scored against thresholds. What the data changes, it changes in the rules — not in someone's memory.

Autonomy without an audit trail is unsellable to a business. Warroom was built approval-first because its first operator was personally liable for everything it published.

The model is not the moat. The rules are.

78 rules are live in production today, inherited across three layers. System rules are the operating principles every tenant gets. Industry rules are the ones that keep a business legal — medical aesthetics, food and beverage, and creator-economy compliance ship as separate rule packs. Personal rules are what a specific operator has decided, accumulated one decision at a time.

Personal · 62Industry · 11System · 5
13
hard rules — the system refuses, it does not warn
65
advisory rules — flagged on the decision card, the operator decides
10
operating principles, and the product enforces a hard cap of ten — an eleventh requires deleting one
Code can be copied. Three years of tested judgement, versioned and inheritable, cannot.

Rules are versioned with history, never overwritten. Every change records what changed, why, and who signed it off — so a rule can be rolled back, and so the accumulated judgement is an asset rather than a habit.

Your know-how becomes an asset you can carry.

The three rule layers are not only inherited downwards — the top two can be packaged and handed on. Once I had run creator-economy operations end to end, that configuration was itself a product: the pipelines, the thresholds, the rules that keep it legal, lifted out as a pack someone else can install. Thresholds arrive labelled assumed until their operation earns real ones, because the moat is in the numbers, not in the shape of the tree.

Hire a person and the knowledge leaves when they do. Staff a Warroom position and the knowledge stays yours.

Installing a pack copies it. It does not subscribe to it — a seller revising their template must never reach into a line a buyer already has running.

I do not promise full automation.

There is no such thing as a fully automated AI tool, and chasing one is how you end up with a system quietly doing the wrong thing where nobody is watching. Warroom inverts it: the model's first job is to work out which parts it should take over and which parts genuinely need a person. What needs a person becomes a queue on my phone. I answer in one word — approve, revise, stop — and the day is fought.

An operator who has to watch the system has not been given anything. An operator who never has to look at it has lost control of it. The queue is the middle.

Describe your process out loud. That is the build step.

You do not need to write code. You have a process already — so say it. Talk your workflow through and the system separates it out for you: which steps a model can take over, which are threshold checks against a standard, and which need you to nod. What comes back is a draft. You add and remove as the work actually runs, and from then on the pipeline grows with you.

In development. Listed here because this log records what is being built, not only what has shipped.

Publishing is irreversible. The system is built around that.

Missing a post costs you one post. Publishing twice costs you the account's credibility, and cannot be undone — it has already been pushed, already been seen. Every trade-off in the reliability contract falls the same way: rather miss and alert than repeat.

No retriesAny call that creates something on a platform runs exactly once. A timeout is not a failure — the platform may have finished in the background.
UnconfirmedTimeouts enter a first-class unconfirmed state — not failed, not published. It is skipped by the retry sweep and escalated to a human, never silently retried.
No rollbackOnce a post is out, every downstream error path can only go forward: log and alert. It can never route back to republish.
Honest gapsWhen a data source fails, the system withholds the diagnosis rather than defaulting to zero — because a failed query looks exactly like “you did nothing”, and would confidently tell the customer to try harder.

Not a mockup. The console, this morning.

Captured from the production system on 31 August 2026. The interface is in Traditional Chinese because its first operator is in Taipei; the English descriptions below each capture explain what is on screen.

The decision queue
The decision queue. Everything the system will not decide alone, ranked by leverage against the north-star metric, each with a deadline. Item 4 in this capture is the system's own card asking its operator to decide whether to apply to Hub71 before 21 August.
Messaging automations, measured end to end
Messaging automations, measured end to end. Eight live flows. 2,276 triggers, 2,268 messages sent, 8 failures. Gated and ungated flows are counted separately, because a follow gate trades reach for list quality and you should be able to see the price you paid.
Per-post analytics with thresholds, not vanity
Per-post analytics with thresholds, not vanity. Every post is snapshotted every six hours and scored red / blue / green against engagement, save and share thresholds. The two outliers here — 55,675 and 30,040 reach — are what a single operator produced without an agency or ad spend.
The production board
The production board. Scripts carry their format rules with them. Status moves to-shoot → shot → shipped. The system knows what content exists before it promises to publish it.

Where it stands today

3
external operators running Warroom (manually provisioned; self-serve opens Q4)
3,479
followers on the operator account — 0 → 3,000 in the first 30 days, no agency, no ad spend, one person
967
subscriber list, built and segmented by the same pipeline
99.6%
messaging delivery — 2,642 triggers, 2,632 sent, 10 failures, across 9 live flows
36
posts under continuous measurement, snapshotted every six hours
5,493
sessions and 121 key events on the destination site, 17 Jul – 14 Aug 2026 — the pipeline's own output

In continuous production since 17 Jul 2026 · 45 days, no rollback

Two revenue lines. Both bootstrapped.

US$320K
first 10 months of operation — enterprise systems and AI-ERP deployment
US$48K
5 clients, AI-operated brand line
US$0
external capital raised to date
Revenue per employee: US$320K — from one person who also wrote the product.

It no longer needs me to run.

Warroom started as the system I built to run my own company without hiring the team I could not afford. That is no longer what it is. Every part of it that used to assume a single operator has been pulled apart into something a stranger can own.

Its own tenantIdentity is derived from the credential, never claimed by the caller. Every record, every list, every by-id operation is scoped. Verified with an isolation suite, because the five worst bugs we found were all correct with one tenant and catastrophic with two.
Its own accountsA customer connects their own platform accounts through a white-labelled flow and holds their own authorisation. Nothing publishes through ours.
Its own rulesSystem rules are inherited. Industry packs are chosen. Personal rules are written by the operator through conversation, versioned, and never overwritten by a template.
Its own agentFully managed, bring-your-own-key, or bring-your-own-agent over MCP. If a customer points their own model at it, the guardrails still hold — because they live in the tool layer on our side, not in their prompt.
Its own moneyPlan and quota model and the payment adapter are in. Automated provisioning is the remaining step before a stranger can buy it without me in the loop. Q4 2026.
The proof that it works is not a demo. It is that the founder no longer has to be the one running it.
Pricing

Priced on judgement, not on account count.

Charging per connected account is the matrix-account curve — high volume, low care per post. Our customers run five to eight accounts and care about every one of them.

There are no tiers. We sell judgement — the refusal to publish a piece that fails the gate — and judgement does not come in a thirty-piece version and a four-hundred-piece version. Tiering would make you ask the wrong question: how much judgement do I need? The quotas exist, but as ceilings against abuse, set where almost nobody reaches them.

Card details are entered on the payment provider's page, never ours. Provisioning is automatic: pay, and the console is open with your key on the next screen. Fourteen-day trial on every tier — we do not do refunds, we do a trial.

Warroom
NT$3,200 / month · US$99 outside Taiwan
One price. Everything included. 400 judgements and 12 accounts a month — ceilings against abuse, not a pricing ladder.
  • Scheduling across Instagram, Facebook, Threads, TikTok and YouTube
  • A quality gate that blocks — not warns — when a piece fails it
  • Decision cards on your phone; a thirteen-day batch approved in 48 seconds
  • Content production: long-form cut into platform-native pieces
  • Adversarial critique before you publish, not after
  • Comment keyword to auto-DM, with an optional follow gate
  • A daily brief that tells you what today is for, and why
  • Every assumption in your plan labelled measured or assumed
Need hands-on migration? That is a separate engagement — book a free 30-minute diagnostic, or write to service@brightstream.com.tw. Already a customer? Open your console.

Start with the workflow that costs you the most time.

Bring one process you currently run by hand. We map it into the tree, mark which steps need your judgement and which do not, and you see it execute before you decide anything else. No deck, no discovery phase.

Every plan starts with a 14-day trial and no card. Operators are onboarded by hand today — that is a deliberate constraint while the self-serve flow is finished, not a queue.

The roadmap, on the record.

A page that only lists what works reads like marketing. These four are in flight right now, with the same wording they carry in our own work orders — so you can hold us to the dates.

Self-serveTenant isolation is built and verified. The plan model and payment adapter are in. Automated provisioning and the onboarding conversation are not — today a new operator is set up by hand. Q4 2026.
AI repliesThe classification layer that routes an inbound message to auto-reply, warm-reply or the founder is built and running in shadow mode. Deterministic keyword automations are what is live and sending today.
EditingThe conversation layer accepts edit requests and stores them, and says plainly that it has not executed them yet. The cutting engine is defined at the interface but not connected.
Provider layerDistribution currently runs through a single execution partner. The abstraction that lets us replace it is specified but deliberately not implemented until there is scale to justify it.

Still shipping. Every day since July.

This is the engineering record, not a highlight reel. Every entry is dated from the repository and the production database — the days it grew, the days it shipped, and the days it broke. The broken entries are here on purpose. A system you are going to run your business on should be judged on what happened when it went wrong, and anyone deciding whether to trust it deserves to see the same log I do.

191
commits, first one 17 Jul 2026, 06:25
43,077
lines across 131 source files
17
days with commits, spread across 46 — the rest was operating it
1
person wrote all of it
729
tests across 47 spec files, green on every deploy
BUILTSHIPPEDBROKEGREW
23 Aug 2026BUILT

Fourteen days of production, scheduled with its reasoning attached

The full fourteen-day content line went into the war room, every slot carrying its judgement card — layer, audience, hook, CTA, metric. The product canon was settled in three parts: the node typology, the judgement queue on the phone, and workflows anyone can adopt. Twelve engineering tickets opened off the back of it.

22 Aug 2026GREW

The content methodology stopped being a document and became rules

Two rules went to version — how a topic is chosen, and the lifecycle a piece moves through — distilled from 166 competitor videos taken apart frame by frame. The reference library went in as retrievable intel. The methodology is no longer something I have to remember before I write.

15 Aug 2026SHIPPED

It ran a day I was not in

The first batch of future-dated work fired on its own: Threads, TikTok and YouTube, zero failures, no one at the keyboard. Up to this point the system executed today. From here it runs forward.

14 Aug 2026BUILT

Thirteen days, three platforms, one approval

Queued thirteen days of content across three platforms in a single operation. My total decision time for the batch was 48 seconds, from a phone. The fix that made it possible was unglamorous: media URLs were time-limited signatures that expired before a future-dated job ever ran. Changed to public URLs; the decision-card covers had the same bug, because a card lives 24 hours and a 12-hour signature does not.

7 Aug 2026BROKE

An error message that said nothing

The dispatch sweep was failing with an empty error string and was not wired into the retry path that already existed. Silent failure is the expensive kind — you do not go looking for what does not complain.

6 Aug 2026BROKE

A job had been sitting there for sixteen days

Added detection for approved work that never got scheduled, and immediately found one that had been orphaned for sixteen days. Same day: an adversarial test found a read-write race in the job log, so appends became atomic. Also shipped outbound link tracking and stall detection — if I stop publishing, the system is now supposed to say so.

4 Aug 2026BUILT

The longest day — twenty-seven commits

Three things at once. Multi-tenant isolation: identity derived from the credential rather than claimed by the caller, ownership checks on every by-id operation, and five leaks closed that were all correct with one tenant and catastrophic with two. Rule layering: architecture / industry / personal, with enforcement levels. And the coaching loop — the revenue path decomposition, the decision cards you can argue with instead of only approving.

4 Aug 2026BUILT

Read a competitor's entire codebase, took the specification and none of the code

Spent a day inside an open-source scheduler to learn how it survives in production. Took two things: never auto-retry anything with a side effect, and a timeout means unknown, not failed. Wrote both into a reliability contract that is deliberately engine-agnostic. Took no code — the licence would have cost us the company, and the specification was the valuable part anyway.

2 Aug 2026SHIPPED

The editing tool became a product

The auto-cut tool I had been using privately went out as its own release. The post announcing it — 'who edits Bear's videos? nobody, a tool I wrote does' — ran at 18.6% engagement. The product and the marketing for the product were the same object.

27 Jul 2026BROKE

The calendar was lying

A partial failure was reporting as a success, statuses were loose strings instead of an enum, and the calendar was showing work as done that had not gone out. Fixed all three. A dashboard that flatters you is worse than no dashboard.

21 Jul 2026BROKE

A false green light

The quality gate calls a model to check five things. When the model returned only three, the missing two were being counted as passes. A check that silently approves is worse than no check. Now a partial answer routes to a human, and there is a test holding that behaviour in place.

20 Jul 2026BUILT

The console stopped being a wall of tables

Sixteen commits rebuilding the interface around one question — what do I do today — and adding the automatic data layer underneath it: metrics on a schedule, insights generated overnight, and a source badge on every number so you can see whether a machine, an agent or a human put it there.

20 Jul 2026GREW

30,040 reach, 3,708 comments

'I'm a business owner. I don't sell courses.' The system delivered the asset to every one of those comments automatically. This is the week the list started building itself.

19 Jul 2026BUILT

The single source of truth

Twenty commits in a day. Plan, tasks, rules, intel and a three-state inbox all became one place, with a sync protocol on top. Agents got a rule from the first commit of this layer: what is not written back did not happen. And the handoff bus went in, so two agents could pass work between themselves and only escalate to me.

17 Jul 2026BUILT

First commit, 06:25

Warroom OS v0 — a thin orchestration layer over distribution: jobs, approvals, a daily brief, and decision cards delivered to my phone. 622 lines. The first production dispatch went out the same day.

14 Jul 2026GREW

55,675 reach

'One person, ten months, eight figures in revenue.' 1,347 comments. This was the post that proved the thesis was worth telling — and made the manual work of answering it impossible, which is what forced the next four weeks of building.

13 Jul 2026GREW

Day one

The first post published under the system, rather than by me. Everything on this page is downstream of that day.

This log is appended to as the system changes. Entries are never edited after the fact and never removed — including the ones that did not go well.

I was the market before I built the product.

Six years, four companies. Sole founder twice; co-founder and part-time CTO of a third; co-founder and principal of a fourth. Six years deploying enterprise systems and AI-enabled ERP — the operations Warroom automates are the ones I spent those years inside. Warroom was built end to end by one person.

The company runs with no fixed operations headcount: AI-executed workflows plus an on-demand bench of specialists in engineering, product, sales and advisory.

We run the company the way the product says you should.
Warroom is built and operated by Bear Don (Brightstream), Taipei, Taiwan.
Contact: service@brightstream.com.tw · Free diagnostic · All links
Figures on this page are read from the production system and updated as runs complete. Last update: 31 August 2026.