Build progress

• Telnyx connected with one click: calling profile, the call application, and webhook security keys all set up automatically. The button reports the live account balance
• Every call event Telnyx sends is checked for a forged signature and logged permanently. Fake or unsigned events are rejected and never touch the data (verified with real forged requests)
• New Numbers and dialing admin screen: see the Telnyx connection, search available numbers by area code, and buy an outbound caller ID with one click (about $1 a month)
• The answer-timing experiment is a button: paste in phone numbers the team controls, the system calls each one, measures how fast the carrier reports ringing and answer, and shows per-call results plus averages. This is the roadmap's Oliver experiment, automated
• Answered test calls hang up by themselves the moment the measurement lands, so a test barely interrupts anyone
• 7 new automated tests including real forged-signature attacks; 88 total pass
• Found and fixed during verification: the login wall was blocking Telnyx's events (they now pass through with their own signature security), and two Telnyx account quirks that only show up against the real API

Blocked: Built and verified except the live-fire step. Waiting on the Telnyx $50 top-up, then: open Numbers and dialing, buy a number (about $1), and run the answer-timing test.

• A gold Call button now sits right on the prospect card in the calling screen. One click dials the contact through the rep's headset - the browser is the phone, no desk phone, no cell
• Live call controls while on the line: a status pill (Dialing, Ringing, then On the call with a running timer), a Mute toggle, and a red Hang up button
• Each rep's browser gets its own private phone line credential behind the scenes, created automatically the first time they open the calling screen. Verified against the real Telnyx account
• The real call duration now drives the logging rules: a call that never gets answered logs itself as No Answer with zero clicks, a pickup under the campaign threshold logs itself the same way, and a real conversation opens the disposition bar with the true duration locked in
• The manual duration buttons (Under 10 sec / About a minute / 5+ minutes) disappear when a real call happened - the system knows exactly how long it was
• Every real call's Telnyx call ID is stored on the dial record, so Phase 2's recording and AI sessions can find the call later
• If browser calling is not available - Telnyx not connected, no caller ID bought yet, microphone blocked, connection dropped - the screen says exactly why in plain English and the manual logging flow keeps working untouched
• 12 new automated tests on the call-outcome rules; 100 total pass. Both dialer states verified in a real browser: the browser phone registered with Telnyx for real, and the no-caller-ID message shows when the workspace owns no number

Blocked: Built and verified except live dialing, which is gated on the same Telnyx $50 top-up as session 2. Once the $50 is loaded and a caller ID is bought on the Numbers page, click Call on the rep screen and we verify a real conversation end to end.

• Every campaign now has a Call recording setting on the Campaigns screen: Off (the default), One-party states only, or Every call. One click, saved instantly, and every change is written to the permanent activity log with who flipped it and when
• The one-party rule is enforced by the contact's actual phone number: the system maps the area code to a US state and only records where one person's consent is enough. Contested states, unknown area codes, and non-US numbers are never recorded - the system always errs on the side of not recording
• When a dialer call is answered, the compliance decision happens in that instant and the rep sees it on screen either way: a red Recording dot with the reason, or Not recorded with the reason
• Recorded calls are captured in dual-channel (rep on one side, prospect on the other), which is exactly what the transcription engine reads best
• The moment a recorded call ends, the recording flows through the same AI pipeline as a manual upload with zero clicks: the suggested disposition pre-selects itself, the notes draft themselves, listening tags land on the contact, and any referral heard pre-fills the referral form
• The rep screen says what the AI is doing: a gold panel while it listens (about half a minute), and a plain-English message if the analysis was skipped or failed - never a silent nothing
• Recordings of calls under the conversation threshold are not analyzed, so the AI spend only happens on real conversations
• 11 new automated tests on the consent rules and area-code mapping; 111 total pass. The recording toggle verified end to end in a real browser including the audit trail in the database

Blocked: Built and verified except the live recorded call, which needs the same Telnyx funding chain as sessions 2 and 3: load the $50, buy a caller ID, place a real call with recording turned on for a test campaign. Recording real prospects additionally waits on the attorney's consent review - that gate is Kevin's, not the platform's.

• A Power dialing panel now sits above the queue on the calling screen: one button starts a dial session, and the queue works itself in order from there
• Live session stats on screen the whole time: dials, connects, talk time, and a running session clock. The counters update in the same database transaction as each call log, so the numbers can never drift from the truth
• Auto-advance: after each logged call, a visible 3-second countdown fires the next dial. No-answers and short calls advance with zero clicks; picking a disposition on a real conversation fires the next dial
• The countdown is always cancellable, Pause and Resume work mid-session, and End session closes it with the final numbers. A session survives a page reload with its stats intact
• When the queue runs dry the session ends itself and shows the final tally on the Queue is clear screen
• The session is deliberately dumb: WHO gets called stays the queue's decision, WHAT happens after a call stays the trigger engine's. The dialer is just the arm - the design rule that keeps Phase 3 parallel dialing a swap, not a rewrite
• If the browser phone is unavailable (no caller ID yet, mic blocked, connection down), the session pauses itself and says exactly why - manual logging keeps counting into the same session stats
• Every session start and end lands in the permanent activity log with its stats, ready for the Reports screen
• 13 new automated tests on the session engine; 124 total pass. The whole lifecycle verified in a real browser: start, auto-pause with the honest reason, manual log incrementing the live counters, reload survival, resume, end, and the database audit trail

Blocked: The engine, controls, and stats are built and verified; the one thing that cannot fire yet is the actual auto-dial, which is gated on the same Telnyx funding chain as sessions 2-4 (load the $50, buy a caller ID). The moment a real call works, power dialing works.

• The Numbers page now has a Number health dashboard: per caller ID, dials in the last 24 hours against its cap, dials and connects over 7 days, connect rate, and a health chip (healthy / near cap / capped)
• Per-number daily dial caps are enforced: dialing always rotates to the least-used number in the last 24 hours, numbers at their cap sit out, and when every number is capped the dialer refuses with a plain-English explanation instead of burning a number's reputation
• The cap is editable inline on the dashboard (10 to 1,000 a day) and every change lands in the permanent activity log
• All usage numbers are derived from the permanent Telnyx event log rather than a second set of counters, so the dashboard can never disagree with what actually happened on the wire
• STIR/SHAKEN spelled out on the dashboard: numbers bought through the platform are Telnyx-owned, so every call is signed at level A (full attestation) automatically - nothing to configure
• A Caller ID reputation checklist for Kevin: register each number at the Free Caller Registry (free, ~10 minutes, covers the three big carrier analytics firms), what to put on the registration, how to spot a labeled number by its sliding connect rate, and when branded caller ID becomes worth paying for
• 12 new automated tests on rotation, caps, and health grading; 136 total pass. Dashboard, cap editing, the audit trail, and the capped-dialer refusal all verified in a real browser against seeded data

Blocked: The full end-to-end verification pass of every Phase 2 flow - a real call, recorded, analyzed, auto-advanced, counted against a real number's cap - is the last piece, and it needs the funded Telnyx account. One $50 top-up unblocks the live verification of sessions 2 through 6 in a single sitting.

• A Call screeners panel on the calling screen, modeled on Orum: record openers in your own voice right in the browser, preview them, name them, star one as the default, and remove them (with an are-you-sure step)
• The recorder is built into the page: press Record, say your name, press Stop, listen back, save. No files, no uploads, no other apps. Recordings are stored in the same permanent cloud storage as call recordings
• During a live call, one press of the O key (or the Play opener button) plays your default opener into the call - the screener hears your recorded name and you never have to speak
• The first opener you record becomes your default automatically; openers belong to the rep and follow them across workspaces
• Every miss is said out loud: microphone blocked, nothing recorded, no opener saved yet, opener too long - each shows a plain-English message
• Daily dial caps tightened to Kevin's 20-40 band (2026-07-07): new numbers default to 30 a day, the cap editor allows 10 to 100, and rotation keeps spreading the load automatically
• 6 new automated tests on the audio encoding; 142 total pass. Panel, recorder states, and the blocked-microphone path verified in a real browser

Blocked: Recording and managing openers works today, including on staging. The one step that needs the funded Telnyx account is the live playback: pressing O on a real call. Same $50 gate as everything else; Kevin should also record his real opener with his own headset once staging deploys.

• Keypad on the live call: a dial pad appears next to Mute during a call, so phone menus (press 1 for sales) are one tap instead of a dead end
• Redial: after a call to a contact ends, the Call button relabels itself Redial for that number
• Callback forwarding: a Callbacks setting on the Numbers page. When a prospect calls back one of your caller IDs, the call forwards straight to that number - your cell, most likely. Empty means callbacks ring out, exactly as before
• Audio settings on the calling screen: pick your microphone and speaker, test the mic with a live level bar, test the speaker with a tone through the chosen output. The choice is remembered on that computer
• Phone priority per campaign on the Campaigns screen: choose which of a contact's numbers gets dialed first (mobile, direct, or company, in any order). Verified numbers always beat unverified ones regardless of the order
• The contact's custom CSV columns now show on the calling screen's Details tab, up to 12 fields, exactly as imported
• 2 new automated tests on the phone priority rules; 144 total pass. Verified live in a real browser: flipping a campaign to direct-first changed which number the queue dialed for a contact with both types, flipping back changed it back; the callback number saves and normalizes; custom fields render on the card

Blocked: The keypad, redial, and callback forwarding involve live calls, so their on-call behavior verifies with the same Telnyx funding chain as everything else. Everything screen-side is verified and live on staging.

• The watchdog: every number's connect rate is compared against the rest of its workspace's fleet. A number that falls below half the fleet's rate over enough dials gets flagged - that pattern is the reliable symptom of a carrier spam label - and is benched from rotation automatically before it burns more dials
• Benching is automatic, un-benching is deliberately human: an Un-bench button on the Number health table puts a number back in rotation, and admins can also bench a number by hand (with an are-you-sure step). Every bench and un-bench lands in the permanent activity log with its reason
• A Reputation column on the Number health table: clear, watch, flagged, benched, or no data yet - hover any chip for the full explanation with the actual numbers
• The watchdog refuses to guess: numbers with too few dials, fleets too small for a baseline, and lists where nobody connects all read 'no data yet' instead of a false alarm
• Run check now button on the dashboard, plus a locked scheduler endpoint so checks can run automatically 1-3 times a day once the secret is set on Render
• External paid checkers (like Icehook Scout) have a ready plug-in slot: when Kevin buys API access, results flow through the same pipeline - same chips, same auto-bench, same audit trail
• 10 new automated tests on the detection rules and bench-aware rotation; 154 total pass. Verified end to end in a real browser with seeded data: a sick number (2% connect vs the fleet's 15%) was flagged and benched by one click of Run check now, dialing then refused with the plain-English watchdog reason when everything was benched, and Un-bench put the healthy number straight back to work

Blocked: The detector needs real dial volume to have anything to judge, which starts when the Telnyx account is funded and QA begins. Setting up the scheduled 1-3x daily run on Render (one env var + one cron job) happens then too, along with Kevin's decision on buying an external check API (research delivered: ArmorHQ-style ground truth cannot be self-served; Icehook Scout is the recommended paid proxy).

• Bridge mode on the calling screen: check 'Bridge mode (experimental)', start, and your browser phone parks into a conference - the panel shows 'Parked - your ear is live'. From there the system places the calls server-side; you never dial
• One-second live status: Dialing, Ringing, then On the call with a running timer, straight from the carrier's own events
• A human answers: joined to your ear near-instantly, recording compliance decided in the same moment. A machine answers: hung up and logged with zero clicks - voicemail auto-advance is born here. A call that ends without a conversation logs itself
• When a conversation ends, the disposition panel opens with the carrier-true duration locked in, pinned to the contact who was actually on the call - a queue reshuffle mid-call can never log against the wrong person (a real bug the browser walkthrough caught before launch)
• The Numbers page gained a Bridge parking number card: one click, about $1 a month, never shown to prospects, invisible to rotation and the watchdog
• A bridge session survives page reloads and resumes exactly where it was
• 13 new automated tests on the leg state machine; the whole lifecycle walked in a real browser against simulated carrier events

Blocked: One step left: a live call through the bridge to prove voice quality equals the direct path. First item on QA day, right after the caller IDs and parking number are bought.

• A Lines picker (1, 2, or 3) next to the bridge checkbox: 1 is single-line with voicemail auto-advance, 2-3 makes the calls race - first human to answer wins your ear, the other lines cancel the same moment
• The race has a referee: exactly one answered call can ever claim the rep, enforced atomically. A human who answers a losing line by a photo finish is hung up fast, counted loudly as an abandonment on screen ('keep this number tiny'), and logged honestly
• Cancelled lines that were already ringing count as dials (the prospect saw a missed call); lines the carrier never rang vanish without a trace
• The server fills the lines from the top of the queue itself - the queue stays the only brain deciding who gets called
• Per-line status rows on the session panel, Orum-style: each racing call with its contact name, state, and live talk timer
• When a whole round ends with nobody answering, one banner summarizes it and the queue advances - no click spam
• 6 new automated tests on the race rules (cancellation, abandonment, line fill); 173 total pass. The guard chain verified in a real browser: parked session, fan-out fired, refused with the plain-English reason when no caller ID exists, session paused itself with Resume waiting

Blocked: The race itself needs real carrier timing to verify - that is session 3's whole job, and it starts the moment QA day produces live calls through the bridge.