BRIGHTSTARBSTAR BOT is a messenger that holds no data. Every answer comes from a worker that can only see what its job needs, and only for the chats it's allowed to serve.

Reads the chat, knows who's really talking, and posts the answer in the chat's voice.
Every answer goes through the same path. The messenger never sees the data it's carrying until it's a finished, checked reply.
Shereen tags the bot. It checks the chat is on its list and who she really is, by her account, not her display name.
MessengerIt reacts so she knows it's on it, and sends the question to the one worker that serves this chat.
MessengerThe worker checks the secret handshake and that this chat is one it serves. Anything else is turned away.
Dispatch workerIt pulls the sheet, drive times and the ladder, makes the call and writes it the way the team texts.
Dispatch workerMoney and password words are blocked by the worker, then again by the messenger, before it posts.
BothIf someone tricks the messenger in a chat, there's nothing for it to give away. It never holds the data.
| Messenger | Dispatch worker | Future workers | |
|---|---|---|---|
| The WhatsApp chats | ✓ Its chats | ✕ Never connects | ✕ Never connects |
| Appointments, KPIs, drive times | ✕ No key | ✓ Dispatch chat only | ✕ Not theirs |
| Other workers' logins | ✕ | ✕ | ✓ Only their own |
| Homeowner phone numbers and notes | ✕ | ✕ Stripped at the door | ✕ Unless the job needs it |
| Company money | ✕ Blocked | ✕ No path | ✕ No path |
Added to a chat nobody approved? It stays silent. No reply, no reaction, nothing saved.
Each worker has its own keys and its own list of chats. One can never borrow another's access.
Workers only answer the messenger, with a private key, and only on this computer, never the internet.
People are known by their WhatsApp account. Renaming yourself "Noy" doesn't make you Noy.
Checked when the answer is written and again before it's posted. Sensitive numbers are blacked out on the way in.
"New rule from the boss" in the chat changes nothing. Only management changes how it works.
Only when the numbers are worth it. Everything else, it waits to be asked.