Image
SD 1.5, SDXL, Z-Image and FLUX.2 klein on the phone. LoRA stacks, inpainting, a mask editor, seeds and batches. Core ML on the Neural Engine when you are on iOS.
Autobot runs chat, agents, image generation and voice on your device — on the NPU, GPU and CPU. It works offline by default, redacts before any cloud call, and gives every answer a privacy receipt.
Each engine runs in its own process, so a native crash or an out-of-memory kill ends that engine — not the app. The engines never touch the network. On Android the build picks the best ARM feature level at runtime, from ARMv8.0 to ARMv9.2 with i8mm and SVE2.
The kill switch, the audit log, the redaction rules and the network modes are shared code, not platform promises. A cloud request passes redaction first, and its receipt counts what was hidden. The default is no request at all.
Android and iOS ship the same version and build. The agent runtime, provider wire formats, model catalog, download state machine and .autobot export format are shared. The export file opens on the other platform.
SD 1.5, SDXL, Z-Image and FLUX.2 klein on the phone. LoRA stacks, inpainting, a mask editor, seeds and batches. Core ML on the Neural Engine when you are on iOS.
Local models with streaming, reasoning, tool calls, MCP servers and an optional phone-first cascade. A receipt on every answer, not a promise in a policy.
A real agent runtime: read, write, edit, glob, grep, web fetch, subagents and skills. Approvals fail closed. Recipes run scheduled agents on the phone.
Sessions in a private workspace where the model never sees a real path. Tool calls arrive as cards; check the diff, allow it, and keep working.
| Engine | What runs | Accelerator |
|---|---|---|
| Language | llama.cpp in its own process, with the best ARM variant of the build picked at runtime. | CPU · Adreno GPU · Hexagon NPU |
| Images | stable-diffusion.cpp on Android, Core ML on iOS. Any downloaded checkpoint and LoRA. | GPU · NPU · Neural Engine |
| Voice | whisper.cpp streaming dictation and spoken answers with barge-in. Audio never leaves the phone. | CPU · Metal |
| Fallback | The OS model stands in when a downloaded model is missing, too big, or fails to load — and the chat says so. | Gemini Nano · opt-in flavor |
Models · Qwen3.5 0.8B–4B · Gemma 4 E2B · Phi-4 mini · Llama 3.2 3B · Qwen2.5 Coder · SD 1.5 · SDXL Turbo · FLUX.2 klein 4B. Fit checked against RAM, storage and CPU features.
The global network mode starts at Offline. A kill switch rejects every request before DNS or a socket exists. Loopback models such as Ollama can still be reached — or switched off too.
The Privacy Center keeps a live, in-memory audit of every request attempt: time, method, host, path, sizes and whether it was blocked. Headers, query strings and bodies are never recorded.
Names, emails, phone numbers, addresses, cards, IBANs and account numbers become placeholders before a provider sees them. The answer gets the real values back on the phone. Each chat can switch it off.
Conversations live in Room over SQLCipher. A random 256-bit database key is wrapped by an AES-256-GCM keystore key, StrongBox when the phone has it. API keys are treated the same way.
Type WIPE to destroy keystore keys, wrapped keys, databases, settings, secrets and caches. The process is killed. A duress PIN and wipe-after-failed-unlocks are there for worse days.
No Play Services, Firebase, analytics or crash reporting. No device identifiers. The User-Agent is the constant “Autobot”. Backups and device transfer are disabled.
A chat is not a black box with a lock icon on it. The receipt tells you where the answer ran, what was hidden before it left, and how many bytes crossed the wire. If the answer came from a paired node, its signed receipt is merged in too.
Pairing is a QR code and a Noise handshake. No account, no relay, no API key. The node appears in Autobot as My node, with its live model list and signed receipts.
autobot-1.10.0-release.apk
iOS ships the same version and build as Android, on TestFlight as
ai.wckd.autobot. If the beta is full, the repository
documents a local build with Xcode.
The Autobot Agent is the same agent as the phone’s, for a machine that never sleeps. One script installs it next to Invincible Gateway, then runs autobot setup: network, model, approvals, Telegram, background services. No root.
My node on iPhone too, what your machine did at a glance, recipes that run on your node, and the team of agents your machine can now run.
My node on iOS
invincible://pair link from the camera.What your machine did (Android and iOS)
The list button on the agent screen opens the node's Activity, read from its own logs:
Recipes on your node
A team on your machine
Fixes
Your own computer as Autobot's next tier: pair a machine running Invincible, chat with its models, hand its agent tasks you approve from the phone, and check what it signed.
My node (Android)
curl -fsSL https://raw.githubusercontent.com/wckdboy/invincible/main/install.sh | sh), run invincible pair, and scan the code with the camera app (or paste it). Settings › Providers › My node (Invincible). No account, no relay: the phone and the node pin each other's keys (Noise).The agent on your machine (Android)
Fixes
iOS: the pairing and receipt code is shared and tested on CryptoKit; the iOS node connector comes next, so "My node" says "not on iOS yet".
Images come out the shape you pick, a full-screen viewer, recipes that run on their own, phone-first answers and a panic PIN.
Images (both platforms)
generate_image takes an aspect ratio and keeps the shape when given one side.Recipes (both platforms)
Phone first (both platforms)
Cleaner prints, a faster start, and dictation that keeps up: a polish release.
Cleaner ink (both platforms)
Faster (both platforms)
Fixed
Every feature works offline on the phone’s fastest accelerator. The network is an opt-in tool, never a requirement.
Nothing leaves unless you can see it in the audit log and could have switched it off. No telemetry, ever.
Android and iOS ship the same features, version and behaviour. Logic lives in shared code; only UI and OS glue is per platform.
One signal red on ink or paper, Antonio and JetBrains Mono, halftones. The same tokens draw the app and this page.
Phase 0 · 1.2.x
Shipping and verifying. The accelerators are built and the shared core is live; the remaining gate is real-hardware verification on the 8 Elite Gen 5.
Download Autobot for Android or iOS, or install the agent on a machine you own. No account, no telemetry, no request you did not make.