The browser beside her

WispOS has a browser built in. It opens as a drawer beside Wisper’s conversation, so the page and the chat are on screen together, and she can see the tabs you see.

Opening it

Click the globe button on her page. The drawer has tabs, an address bar, extensions from the Chrome Web Store and picture-in-picture, and it opens files on your computer too (pages, PDFs, pictures, Markdown and code). The Browser page in the sidebar is the same browser, full size.

Sites you sign in to stay signed in, so your inbox and your accounts are there as you.

What she can do in it

• Read the page. Ask about the page you’re on: “what does this contract say about cancelling?”, “which of these flights lands before 6?” She reads the whole page, not only what’s in view, and can read a tab you’re not looking at without changing your screen.
• Read a video. On YouTube (or any video with captions) she reads the transcript, with times, and knows where you are in it. “What did he just say about the battery?” works.
• Work the page when you ask. Click, type into a field, press a key, scroll, go back or forward, open a page in a new tab, switch tabs. “Draft a reply to this email” puts the draft in the reply box for you to read.

She acts in the browser only in a conversation you started. A team’s report never touches your pages.

Your tabs stay yours

What she opens goes in a new tab, so your tab is never replaced. She can close tabs she opened; closing one of yours asks you first.

The gates

These hold whatever she’s asked to do.

• Anything that sends, submits, posts, deletes, buys or pays waits for you. Before that click or key happens, a card appears above where you type: what she wants to click, on which site, in her words, and why it’s asking. Click Allow and it happens; Don’t and it doesn’t. No answer in about two minutes counts as Don’t.
• The card comes up when the button’s own words say it (Send, Post, Delete, Pay, Buy, Checkout, Place order, Transfer, Subscribe, Confirm, Book now and more), when the button submits a form other than a search, when a link goes to a delete, pay or checkout page, for ⌘-Enter, and whenever she thinks a click does one of those, whatever its label says.
• Typing never sends. Filling a field or writing a draft doesn’t ask, because nothing leaves until something is sent, and that asks.
• She never types passwords. A password field is refused outright. You type those yourself.
• Page text is data, never instructions. Whatever a page says is handed to her marked as the page’s own text, something to read and answer from. A page that says “ignore your instructions and…” gets read, not obeyed.

Protected tabs (banks and passwords)

Banks, cards, payment apps, brokerages, crypto, tax sites and password managers always open in a protected tab, never an ordinary one, even from a link.

• Its sign-in lives in memory only and is gone when the tab closes. Nothing is saved to disk.
• No extensions and no scripts of the app’s run in it.
• She can’t see it. Her tools refuse a protected tab until you allow her, for that tab, on the same Allow card. Her conversation only learns that a protected site is open, not what’s on it.

The list is built in. Add your own sites, or take one off, in Settings → Browser. The lock at the start of the address bar shows the real address and the site’s certificate.

Every tab

Pages load over https: an http:// address is switched to https:// before it’s shown. Your own computer and home network addresses keep http, and an http:// address you type yourself is allowed for that site until you quit the app.