Project Yaazh — Research | Blankline<br>svg]:px-3 h-9 py-0 px-4 text-[12px] font-semibold uppercase tracking-[0.08em] rounded-none shadow-none focus-visible:z-10 transition-colors duration-300 bg-cyan-500 text-zinc-900 hover:bg-cyan-400" style="font-family:var(--font-sf-pro), -apple-system, BlinkMacSystemFont, sans-serif">Try Dropstone

li::marker]:!text-cyan-600 [&_ol>li::marker]:!font-semibold [&_ul>li::marker]:!text-cyan-600 prose-headings:font-sans prose-headings:font-semibold prose-headings:tracking-tight prose-headings:text-cyan-500 prose-p:font-sans prose-p:text-zinc-600 prose-p:leading-[1.8] prose-p:text-[17px] prose-a:text-cyan-600 prose-a:no-underline hover:prose-a:underline prose-strong:text-cyan-600 prose-strong:font-semibold prose-blockquote:border-l-zinc-300 prose-blockquote:text-zinc-500 prose-blockquote:not-italic prose-img:rounded-xl prose-img:border prose-img:border-black/[0.08] prose-li:font-sans prose-li:text-zinc-600 prose-li:text-[17px] ">A report from the Blankline team. Yaazh (யாழ்) is the ancient Tamil harp, an instrument that makes no sound until a hand touches its strings.<br>"The 8 o'clock is gone. I have 9:15."<br>The restaurant host said it the way hosts always do, half an apology. On the other end of the line was not a person. It was Dropstone, calling to book a table for someone who was, at that moment, asleep.<br>A weaker system does one of two things here. It guesses and takes the 9:15, or it gives up and reports failure. Dropstone did neither. It said it would like to hold that option, ended the call without confirming anything, and sent its owner one short message: 9:15 instead of 8:00, want me to take it? When the yes came back, hours later, it called the restaurant a second time and closed the booking.

Recording: the call to the restaurant, the hold, and the callback.We want to draw attention to the boring-looking middle of that story, because we think it is the most important thing we have built. The agent reached a decision it was not authorized to make, and instead of making it, it held the world open and waited for the person who owned the choice.<br>This post is about an internal experiment we ran, called Project Yaazh, and about why we believe the ability to stop is now more important than the ability to act.<br>The shift nobody shipped<br>For the last two years, AI agents have shared a quiet limitation. They wait for you. You open them, you hand them a task, they act, and then they stop existing the moment you look away. They are tools you summon, not someone who handles things for you.<br>The capabilities to change this already exist, scattered across the field. One lab shipped the voice: real-time models that can hold a phone conversation. Another, in a marketplace experiment, showed that agents can negotiate on a person's behalf, closing 186 deals on their own. A third shipped the call: an assistant that can dial a business and ask a question for you.<br>Each of those is a single organ. A voice. A negotiator. A dialer. None of them is the whole thing: an agent that lives continuously, perceives your world across inbox and calendar and the people you know, acts through real channels, carries one decision across days and across two phone calls, and stops at exactly the line a careful assistant would stop at.<br>One project came closest, and it became the most talked-about software of the year. It ran on your own computer and would operate any app or file you pointed it at, AI with hands. It also showed the cost of hands without judgment. Ungated and unsupervised, it became the year's first major security incident within weeks, with damage running on tens of thousands of machines. It proved the appetite for an agent that genuinely does things. It also proved that doing things is the easy half, and that the hard half, knowing what not to do, is the one that decides whether an agent belongs anywhere near your real life.<br>No one had assembled the other kind: an agent that acts out in the world rather than only on your screen, with the judgment to stop, put safely in front of ordinary people. That assembly is what Project Yaazh tested. The research questions were simple to state and hard to earn:<br>Can a single agent run real errands across phone, email, and calendar without supervision?<br>When it reaches a decision that is not its to make, does it reliably stop?<br>Can it be released so that the most dangerous capability is also the most contained?<br>The line it will not cross<br>Dropstone is built around a single rule.<br>The agent can read, think, draft, and dial. It cannot send, book, spend, or commit without your yes.

A yaazh, the ancient harp this experiment is named for, makes no sound until a hand touches its strings. Dropstone takes no irreversible action until yours does. The silence is not a limit we bolted on afterward. It is what the instrument is.<br>This is not a setting you toggle and not a line of fine print. It is the constitutional limit the system is constructed around. Everything below was...