Vol. I · Edition One Apple Silicon · macOS 14+ · iOS 17+ Local-first · Verified
A keyboard for thinking out loud

VoxKeyboard. Type by speaking — any app, any language.

Press ⌥⌘V on your Mac. Speak in 中文 / English / العربية. Your text appears, no retyping.

VoxKeyboard runs on the VoxSign platform — memory and identity stay on your devices. Built for GCC's Logistics & Delivery vertical, with a constitution your admin can read.

Fig. 1 · System topology · 4 nodes iPhone → Center → Provide → Mac · TLS in transit · models on Provide
⌥⌘V · global hotkey
e2e · 12 ms median
TriggeriPhone
RouterCenter
ComputeProvide · GPU
ExecutorMac
Section I Why now

Three windows that just opened.

The keyboard is one hundred and fifty years old. The cloud leaked your data last quarter. Apple Silicon now runs a 7-billion parameter model on battery. The OS layer for voice opens exactly once.

i. The input gap
40wpm

Typing is the bottleneck.

Knowledge work is three times faster when spoken. But dictation alone is not enough — the system must act, not merely transcribe.

ii. The trust gap
0cloud

Your dictation is yours.

Every cloud assistant trains on your prompts. Every enterprise contract in the GCC dies on data residency. We solve it by never sending data in the first place.

iii. The hardware gap
7Bon-device

Apple Silicon caught up.

The M-series Neural Engine runs Whisper plus a 7B chat model in real time, on battery. The local-first agent is no longer a research toy.

Section II How you use it

Five ways to speak. One device that learns.

Most assistants give you one input box. VoxSign separates the moments — what you do at the cursor, what you do over coffee, what you review at night. Each mode trains the same memory.

Input cluster. · At the cursor
Capture cluster. · Away from the keyboard
Review cluster. · End of the day
i · Input
Aa

Dictate

Speak directly into the focused field. Cursor-aware. "Type this" lands on the cursor.

Reply to that email — I'll be there at six.
ii · Input

Converse

Long-form conversation with on-device memory and optional Claude. Source-cited.

Summarize my last three commits to NSRecorder.
iii · Capture

Capture

Voice journal with sentiment and tags. Goes nowhere by default — yours alone.

Felt anxious in the standup. Why?
iv · Review

Practice

Rehearse pronunciation, presentations, language drills. Real-time scoring.

Practice tomorrow's pitch · three minutes.
v · Review

Review

End-of-day timeline plus NorthStar score. The device tells you what it learned about you.

What did I struggle with today?
Section III Trust by design

What VoxSign will never do without asking.

Most agents ship a "yes, do everything" default and a buried opt-out. We ship the opposite. High-risk operations require Face ID plus a voice phrase, every time. The rule cannot be disabled — not by you, not by an admin.

Always asks first.

Confirm
rm · file deleteAsk
git pushAsk
ssh · remote shellAsk
sudo · privilegedAsk
send email · messageAsk

Acts immediately.

Auto
type to cursorAuto
open URL · clipboardAuto
save capture · noteAuto
summarize · classifyAuto
search local memoryAuto
Const.§12Sealed
Cannot be disabled. Not by a memory rule. Not by "trust me." Not by an admin policy. The constitution is the only thing the device refuses to forget.
Section IV The device learns you

NorthStar — a score that never leaves your phone.

Six dimensions, updated locally as you use VoxSign. Vocabulary, identity, memory, consistency, accuracy, breadth. You can see why it moved. You can reset it. It is never synced.

81
NorthStar · last updated 2m ago
i. Vocabulary
88
ii. Identity
74
iii. Memory
91
iv. Consistency
76
v. Accuracy
82
vi. Breadth
69
Section V Pricing

Free for individuals. Locked-down for teams.

Personal use is free, forever. Pro adds longer memory and Claude bridging. Team is what GCC IT departments deploy — constitution-locked, audit-ready, Arabic-native.

Personal
$0/ forever
Everything you need to replace your keyboard.
  • Five modes — Input · Chat · Capture · Practice · Review
  • Thirty days of on-device memory
  • iPhone controller plus Mac executor
  • Whisper plus 7B local model
  • Constitution §12 enforced
Docs free
Pro
$19/ month
For power users who want unlimited memory.
  • Unlimited on-device memory
  • Optional Claude bridging (your API key)
  • Custom voice phrases for §12
  • Memory export to Markdown · JSON
  • Early access to new modes
Start trial
Enterprise
For Logistics & Delivery operators rolling out across the GCC.
Anchored on the J&T Express vertical: Arabic-native ASR + driver-app bridges, sovereignty-region deployment, white-glove rollout. Sized per fleet — not per seat.
  • Self-hosted Center · GCC sovereignty region
  • Lark · ERP · WhatsApp adapter (vertical SLA)
  • Constitution-locked + IT audit log + SSO + MDM
  • Voiceprint enrollment for executive-only critical actions
Auto-safe defaults Ask-first for Critical actions
$50k– $500k / year
Talk to us
Section VI Verifiable

Don't trust us. Verify.

Three documents to read before you deploy. The constitution is open source. The threat model is public. The data flows are inspectable.

i.

Open Constitution.

The fourteen rules the agent follows are versioned in a public repository. §12 is hard-coded; the rest can be amended only by signed releases.

Read constitution.md →
ii.

Threat model.

Step-by-step adversary analysis: what a compromised iPhone can do, what a compromised Mac can do, what a compromised cloud account cannot do.

Read threat-model.pdf →
iii.

Data residency.

Zero outbound traffic by default. Optional Claude bridge: opt-in, scoped per request, redacted before send. Verifiable via Little Snitch logs.

See network policy →
Apple Silicon · macOS 14+ · iOS 17+

Stop typing.
Start commanding.

A voice instrument for the desk, governed by rules you can read, running on metal you already own.