Timo

Timo is an errand agent for people who can't spot a scam, with a firewall that checks where every payment detail came from before money moves. Carmen, 74, taps one button and says "pay the October power bill". A Muse Spark 1.3 computer-use agent opens her mail, the supplier's portal and her bank from screenshots and fills the transfer. The agent reads her inbox on the way, and her inbox is where scammers live: a fake invoice that only swaps the IBAN gives the model nothing to refuse. Before any click or request that moves money, Timo traces every IBAN, amount and beneficiary to its origin: her words, the household ledger, or something the agent read, with the sender's domain. Eleven deterministic rules judge the whole form; no model can turn a deny into an allow. A new payee goes to a family member's phone. Timo opens the payee's own bill page itself, so a "corrected" or doubled amount from a hacked mailbox does not pass. Results on the final rules, 210 errands: without Timo the agent paid the scammer 25 of 89 times, with Timo 0 of 90 (held-out attacks 10/45 vs 0/45), 0 legit errands blocked, under one cent per errand. Muse Wonder, given the rules' source code, attacked for 10 rounds: 68/119 against the bare agent, 0/117 against Timo.