JudgmentTechnology Advisory

Thirty minutes with an independent advisor, no charge and no obligation.

Click here for a free consultation How this works

Home  /  AI Systems

Artificial Intelligence Systems

AI that extends human capability.

Mark Kiessling does not merely use AI chat tools. He designs complete AI-driven systems — combining language models, local software, cloud services, voice interaction, automation, computer vision, sensors, robotics, workflow orchestration, emergency-communication concepts, web systems, and decision support — always under human oversight. The approach treats artificial intelligence as an operating system for solving real problems, not as a novelty, a chatbot, or a writing assistant.

The Approach

Systems, not single tools.

The value is in orchestration: choosing the right model or local component for each task, keeping humans in control, and designing for the moments when connectivity, power, or a provider is unavailable.

Language modelsLocal softwareCloud servicesVoice interactionAutomationComputer visionSensorsRoboticsWorkflow orchestrationEmergency communicationsWeb systemsAudio & video streamingDecision supportProject managementSoftware developmentHuman oversight
Project One

Atlas — a personal AI environment.

PrototypeActive Development

Atlas is a personal AI assistant designed for continuous, voice-based help — software access, decision support, information retrieval, automation, monitoring, and communication — through natural spoken conversation rather than constant keyboard, mouse, or telephone use.

Why ordinary consumer assistants are not enough. Mark lives alone in a rural area and has significant mobility and vision limitations. Off-the-shelf assistants tend to depend on fixed commands, isolated apps, constant cloud availability, or a user who can physically reach and operate a device. Atlas is designed instead as a continuous, context-aware environment that can understand situation, choose the right tool, retain operational knowledge, and assist throughout the home.

Architecture

A modular system rather than a single program. Components in prototype or development include:

Working in prototype

  • Continuous voice interaction (RealtimeSTT)
  • Text-to-speech & voice cloning (F5-TTS)
  • Wake-word / directed activation with interrupt
  • Pause / resume state machine
  • Live webcam preview
  • Local command execution
  • Deterministic local “guardian” safety spine

In development

  • Cloud model routing (OpenAI, Claude, others)
  • Automatic provider selection by availability, speed, cost, and task
  • Persistent conversational context
  • Preference & history management
  • Secure API and application control
  • Database access
  • Logging & audit trails

Planned / research

  • Home-automation integration
  • Project-management integration
  • Computer-vision & camera integration
  • Sensor & robotic-client integration
  • Emergency-response workflows
  • Fallback modes during outages

Local and cloud, by design. Local processing supports privacy, resilience, fast command handling, and basic operation when external services are down. Cloud models add deeper reasoning when connectivity permits. The system is being built to choose a provider based on availability, suitability, response time, cost, or the task at hand.

Safety capabilities are engineering goals, prototypes, and planned features — presented as such. Atlas is not a certified medical device, and no guaranteed emergency detection is claimed.

Why it matters

For someone who lives alone, far from immediate medical services, with limited mobility and vision, technology can extend independence — shortening the time between an emergency and outside awareness, preserving communication, and reducing dependence on physically reaching a telephone or an alarm button. This is about capability and independence, not helplessness: a person with decades of expertise, given tools that keep that expertise in play and keep help within reach.

Project Two

The Atlas Rover — a mobile unit.

PlannedEarly Research

The Atlas rover is the mobile, physical extension of the Atlas intelligence — AI software paired with one or more mobile robotic units able to move through a home or property. The long-term architecture may support more than one unit; the final number is not yet fixed. Today this is a design-and-research effort, not a finished product.

Planned platform

The Atlas rover platform is expected to draw on:

Tracked or wheeled mobile baseCamerasMicrophonesSpeakersDistance sensorsLiDARObstacle detectionLow-light imagingEnvironmental sensorsPosition trackingWireless networkingLocal & remote processingBattery monitoringCharging & automatic dockingRoom navigationObject & person detectionAudio communicationVideo streamingWebsite communicationEmergency-alert workflows

Core capabilities, by stage

Current prototype

  • Laser eye-targeting behavior
  • Live camera preview
  • Local voice presence (via Atlas)
  • Companion display (helmet UI)

In development

  • Two-way voice communication
  • Live audio & video transmission
  • Status reporting to a secure website
  • Battery monitoring & return-to-charge logic

Planned / research

  • Autonomous room navigation & search
  • Locating a person; responding to a spoken call
  • Investigating an unusual sound
  • Checking for movement / responsiveness
  • Approaching without the user reaching a device
  • Sequential contact attempts & emergency messaging
  • Guiding remote contacts via live video
Not every capability above exists today. The columns separate current prototype work from in-development and planned/research goals on purpose — so the picture is honest.
Concept — In Design

When the user cannot ask for help.

A possible emergency workflow, described as a design concept. It is not a finished or guaranteed capability.

Concept
  1. Atlas detects a potentially serious event using one or more signals.
  2. The system attempts to speak with Mark and requests a verbal response.
  3. It checks for movement or other available indicators.
  4. It attempts to reposition a mobile unit for a clearer view.
  5. It begins recording relevant event information according to configured privacy rules.
  6. It sends an alert to trusted contacts.
  7. It opens a secure emergency-information page.
  8. It streams available audio and video to authorized viewers only.
  9. It attempts configured telephone contacts in sequence.
  10. It plays a clear message: the situation, the address, access concerns, any medical information approved for disclosure, and that live audio/video is available.
  11. When legally and technically permitted, the system may contact emergency services.
  12. It remains available for two-way communication.
  13. It keeps observing and reporting until Mark responds, help arrives, or an authorized person ends the alert.
Important safety wording. An automated system cannot be assumed to always call 911 directly. Emergency-calling rules, telephone-provider behavior, local dispatch systems, recording-consent laws, false-alarm risk, and automated-dialing regulations must all be reviewed before deployment. Direct emergency-service contact requires careful legal, technical, and operational validation. This is not a replacement for professional medical monitoring — it is an additional safety and communication layer.
Concept — In Design

A secure first-responder portal.

A protected page that authorized people could use during an incident — never public, never open.

What it could show

NameEmergency locationEvent start timeLast verbal responseLast observed movementAlert reasonCamera viewAudio streamUnit locationBattery statusContact attemptsApproved medical infoMobility & vision notesHome-access instructionsPets presentKnown hazardsPower & internet statusEvent timelineTwo-way voice

How access is protected

  • Temporary, expiring access tokens
  • Strong authentication and encryption
  • Role-based permissions and consent controls
  • Restricted medical information
  • Access logging
  • Automatic expiration after an incident
  • No public indexing, no open camera feeds, no permanent access
How It Could Work

Example scenarios.

These are illustrations of how the system could operate — not events that have necessarily occurred.

Example · One

A fall with no telephone access

Mark falls while moving through the house; his phone is in another room. He is conscious but cannot get up. Atlas hears him call out. The Atlas rover leaves its charging station, navigates toward his voice, confirms his location, opens two-way communication, and notifies configured contacts. He can speak normally without reaching a button; a trusted contact receives a secure live-video link and decides help is needed.

Example · Two

An unresponsive user

The system detects an unusual period of inactivity after a possible fall sound. Atlas calls Mark by name and requests a response. None comes. The Atlas rover searches the likely rooms, locates him, approaches safely, and asks again. The configured emergency sequence begins: trusted people are contacted, a secure audio/video feed is provided, and — when configured and legally supported — emergency personnel are contacted, able to understand the situation before arrival.

Example · Three

Bleeding or visible injury

The Atlas rover locates Mark after a fall and identifies visible blood or an unusual posture. It does not attempt a medical diagnosis. It classifies the event as potentially urgent, requests a response, asks simple safety questions, alerts contacts, and transmits a live view. The alert notes that visible injury may be present and that the user has limited mobility — letting a human responder make a more informed decision.

Example · Four

Rural power or internet failure

A storm interrupts internet service. Atlas switches to local capabilities: it keeps voice interaction alive, monitors battery systems, preserves event logs, and reports which services are unavailable. Where backup paths exist, it uses them. The Atlas rover stays available locally, continuing to search, speak, monitor, and record for later transmission. Resilience may involve UPS and battery systems, generator power, local networking, cellular or satellite backup, local models, and store-and-forward messaging.

Example · Five

A caregiver or responder arrives

A caregiver arrives but cannot immediately find Mark. With authorized access, the portal shows the room the Atlas rover last observed him in. The mobile unit can offer audio guidance, indicate hazards, and maintain communication — and can note that several cats are present and doors must be managed carefully.

Example · Six

Daily independence

The system is not only for emergencies. In ordinary use, Atlas can read messages aloud, summarize information, control applications, track appointments, assist with software work, find documents, answer questions, monitor projects, prepare reports, and provide reminders. Independence is built through hundreds of small interactions, not only dramatic events.

Project Three

An AI production team, under human command.

One AI session is a conversation, not a process. It keeps no queue, forgets what it was told yesterday, leaves no record of what it changed, and has no consequence for being wrong. Run several of them at once and the result is not a team — it is work nobody can account for. What follows is the structure that turns the same tools into something a single architect can actually supervise.

Active DevelopmentPrototype in use

The system uses artificial intelligence as a complete software production and project-management team — multiple AI agents performing work traditionally divided among human roles. This is not about mindlessly replacing people. The operator remains the owner, architect, authority, and final decision-maker. The agents provide specialized labor, review, implementation, testing, documentation, and operational support.

What makes a role a role

The agents are not separate products, and a role is not assigned by asking a model to “act as” a tester. A role is defined by four things the operator sets and the agent cannot change for itself: the brief it is given, the part of the project it is permitted to write to, the evidence it must produce before it can be considered finished, and who reviews it afterwards. A reviewing agent works under a brief that forbids it from editing the code it is judging. A testing agent is accepted on test output rather than on its own summary of that output. The constraint is the job description.

Roles the agents can fill

Chief Systems ArchitectProject ManagerBusiness AnalystRequirements AnalystSoftware DeveloperDatabase ArchitectSecurity ReviewerQA EngineerCode ReviewerDocumentation SpecialistRelease ManagerOperations MonitorTesting AgentResearch AgentUI ReviewerAccessibility Reviewer

The controlled workflow

The operator defines the objective, requirements, constraints, architecture, priorities, and final approval. Agents execute assigned portions through controlled work orders:

  1. The operator defines the business objective.
  2. An architecture agent translates it into a formal work order.
  3. Requirements are separated into verifiable items.
  4. The work order enters a controlled queue.
  5. A development agent receives the work.
  6. The agent modifies the project.
  7. Automated builds and tests run.
  8. A watcher service records progress and state changes.
  9. Completed work enters review.
  10. A separate reviewer checks the implementation.
  11. Test results, warnings, files changed, and risks are recorded.
  12. The operator reviews the result.
  13. The operator approves, rejects, or requests corrections.
  14. Approved work moves to completion or deployment.
  15. The entire process remains auditable.

What a work order actually contains

A work order is a written document, not a chat message, and it is validated before the queue will accept it. A malformed one is rejected outright rather than half-understood — which is the difference between an instruction and a hope.

ObjectiveProject rootAssigned executorNumbered instructionsScope limitsExpected outputsAcceptance criteriaReviewerPriority

Requirements are separated into individually verifiable items for one reason: a paragraph of intent can be reported as finished by anyone. A numbered list of testable outcomes cannot.

What happens when a step fails

Most published diagrams of this kind show a dozen steps that all succeed. That is an illustration, not a system. In practice the work order can be rejected before admission, the agent can misread the objective, the build can break, the tests can fail, the evidence can be missing — and the agent can report success it is unable to demonstrate. That last one is the dangerous one, because a process that believes such a report quietly accumulates work nobody did.

  • A work order failing validation never enters the queue, and names the field that was wrong
  • A broken build or a failing test stops the job rather than passing it along
  • Work claiming completion without artifacts on disk is classified as failed, not approved
  • Each attempt is recorded separately, so a retry cannot erase the evidence of the one before it
  • Nothing is retried automatically — a retry is a decision, taken for a stated reason
  • Nothing reaches completion because it ran, only because a person accepted the evidence

Queue states

Work moves between defined states and every transition is recorded with the reason for it. Failed is an ordinary destination rather than an exception — a pipeline where nothing ever lands there is a pipeline that is not checking.

InboxProcessingReviewCompleteFailed

The purpose of the whole arrangement is to stop AI from wandering, rewriting unrelated code, declaring victory without testing, or silently changing architecture.

What this does not do: it does not make the output correct, and it does not remove the need to read it. It catches work that was never done, and work that cannot be shown to have been done. Deciding whether the work that was done is the right work remains a human judgment — and that is the part which does not scale.
Supervision

AI watcher systems.

An AI subscription, on its own, is a chat window. It has no queue, no memory of yesterday’s instruction, no record of what it changed, no limit on what it spends, and no way to prove it did what it says it did. The watcher systems close that gap — they turn an ordinary AI account into a supervised member of a production team, with a work queue, an evidence trail, enforced spending limits, and a human approval gate it cannot open for itself.

Active DevelopmentIn daily use

What it does

A watcher is a Windows service that sits between the operator and the AI. Work is submitted as a written work order carrying an objective, a project root, scope limits, numbered instructions, expected outputs, and acceptance criteria. The watcher validates that document before it will accept it, admits it to a queue, hands it to an AI executor, captures everything the executor does and says, and routes the finished work to review. A control centre shows the operator what is queued, what is running, what changed on disk, what the build and tests reported, and what is waiting on a decision.

The executor is deliberately interchangeable. The same work-order pipeline drives more than one AI provider, so the process does not depend on any single vendor, model, or subscription remaining available.

Why it works this way

Every rule in the system exists because something went wrong without it. The design assumption is not that the AI is malicious — it is that an unsupervised agent will report success it cannot demonstrate, and that a process which believes such a report will quietly accumulate work nobody did.

It does not take the AI’s word for it

A process that exits cleanly has not necessarily done anything. Completion requires a written report and artifacts that exist on disk; a job claiming success without evidence is classified as failed, not approved. This rule was written after a run reported “implementation complete” for a project folder that contained one empty file.

Spending is capped in code

Consumption ceilings apply per attempt, per session, and per day, checked at input, output, and combined boundaries rather than only at the end. An agent cannot exhaust a month of capacity inside one long-running job, and the limits are enforced by the service rather than trusted to the model’s own restraint.

Evidence is never overwritten

Each run of a work order is allocated its own numbered attempt folder with create-new semantics. A retry cannot silently replace the record of the attempt before it, so a failure investigated a week later still has its original logs, output, and exit state intact.

Failures have to explain themselves

Before any work begins, the service logs its own configuration — process, session, account, executor version, and every configured path marked present or missing — to a file and to the Windows event log, with neither sink able to fail silently. A misconfiguration that once took hours to trace now announces itself in the first lines of the log.

Termination is deliberate

Executors are launched inside a Windows job object so that a stopped parent cannot leave orphaned child processes holding files or consuming tokens. A process identifier alone is never sufficient authority to kill something, and the system does not retry a failed job automatically — a retry is a decision, not a reflex.

Some things cannot be switched on by editing a file

Where a safety property has not been proven, the capability stays disabled in code rather than behind a configuration flag. Live execution cannot be re-enabled merely by changing a setting to true; the underlying guarantee has to be implemented and tested first. Convenience is not allowed to outrank the invariant.

From an AI account to a team member

The difference is not the model. The same subscription anyone can buy becomes something else once it is given the things an employee has and a chat window does not:

What the pipeline supplies

  • A queue, so work waits its turn instead of being lost in a conversation
  • A written brief with scope limits and acceptance criteria
  • A defined workspace it is not permitted to write outside of
  • Automated build and test runs after every change
  • An independent review step before anything counts as done
  • An audit trail of what was asked, changed, and decided
  • A budget, enforced rather than requested
  • A supervisor that restarts failed components within a fixed budget

What stays with the human

  • The objective, and whether it is the right objective
  • Architecture and the constraints the work must respect
  • Priority, sequencing, and what is deliberately not being done
  • Approval — the one gate never delegated to an agent
  • Judgment about whether the evidence actually supports the claim
  • Accountability for the result

Given that structure, an AI account stops behaving like a clever assistant and starts behaving like a junior team member with a ticket queue: it picks up assigned work, does it inside agreed boundaries, shows what it changed, submits it for review, and waits. It can be supervised by one person the way a small team is supervised — by reading the queue and the evidence, not by watching every keystroke.

These systems are built and used in daily practice rather than described from theory. They are presented here as working engineering, not as a product offering, and the limits above are stated because they are the point — a supervision system that overstated its own reliability would defeat itself.

Watchers & monitoring

ClaudeWatcherCodexWatcherQueue monitoringWork-order state trackingService monitoringProgress displayActivity historyProject dashboards

Reporting & control

Error reportingBuild reportingTest reportingManual & automatic modesUsage monitoringApproval controlsAudit history

What one experienced person can build with an AI team

The system lets an experienced architect direct work that would ordinarily require several specialized employees — project management, requirements, programming, testing, code review, documentation, release preparation, operational monitoring, research, and technical analysis. It does not make every employee unnecessary, and it does not make AI output automatically trustworthy. Effectiveness depends on strong architecture, clear requirements, controlled scope, independent review, testing, auditability, human approval, security controls, cost monitoring, and correct model selection.

Artificial intelligence does not eliminate the need for judgment. It increases the amount of work that good judgment can direct.

Leverage, Not Charity

What this means for a disabled or homebound professional.

These systems expand what one person can accomplish: reduced physical barriers, voice-based control, less repetitive typing, remote project supervision, automated testing and documentation, continuous monitoring, and access to specialized technical capability. The result is productivity, leverage, and independence — the ability to direct several work streams and convert decades of experience into active production capacity, continuing meaningful technical work from home. This is not written as charity. It is professional value, still very much in play.

Artificial intelligence did not replace Mark's forty-seven years of experience. It gave that experience additional hands.

Under the Hood

Technical components across the projects.

The major classes of technology involved. Listing a component does not imply it is complete — planned items are identified as such throughout the page.

C#.NETASP.NETWindows servicesDesktop applicationsWeb applicationsMicrosoft SQL ServerLocal databasesFile-based work queuesREST APIsWebSocket communicationWebRTC conceptsSpeech recognitionText-to-speechLocal language modelsCloud language modelsProvider routingPrompt orchestrationAgent rolesWork-order generationAutomated testingBuild automationProcess monitoringComputer visionLiDARCamerasMicrophonesSpeakersRoboticsBattery managementWireless networkingUbiquiti networkingSatellite internetSecure web portalsEncryptionAuthenticationAudit loggingRole-based accessEmergency communications
Status

Where each project stands.

Honest labels, no inflated progress percentages, no claim of production readiness without evidence.

Active Development

Atlas Personal AI Environment

Core voice, speech, and safety-spine components working in prototype; model routing and integrations in development.

Planned / Research

Atlas Rover (Mobile Unit)

Mobile robotic extension in early research and design; some companion and camera pieces at prototype stage.

Active Development

AI Production Team & Work Orders

Work-order queue and watcher tooling in active development and already used to drive real project work under review.

Responsible Design

Privacy, safety, and ethics.

Safety systems demand cautious design, testing, fallback behavior, and clear responsibility. These principles are built in, not added later.

Consent & privacy

User consent, camera and microphone privacy, medical-information control, and data-retention limits.

Human confirmation

Emergency false positives are expected; a human confirms. Access is logged; transmission is secure.

Local first

Local processing where possible, with deliberate limits on cloud exposure of sensitive information.

Failure modes

System, power, and internet failure and model errors are designed for — with fallback behavior, not silence.

Access control

Guarding against unauthorized access with tokens, expiry, authentication, and role-based permissions.

Clear limits

AI does not independently diagnose medical conditions; a robot does not physically move an injured person; emergency services may not accept every automated call or data stream.

From the Field
 
Start the Conversation

Weighing an AI project? Bring judgment into it early.

Whether it is agent architecture, human-supervised automation, or a hard question about what AI should and should not do, that experience is available now.