Imagine you hire a butler. Not a butler who answers the door once and forgets you exist — a butler who knows your calendar, has keys to your house and your office, remembers what you said last Tuesday, and occasionally taps you on the shoulder before you ask. That's the personal agent this paper is trying to build. The difference between nanoMuse and every chatbot you've used is the difference between a single function call and a persistent employee. Meta's Muse, launched September 2026, showed what this category looks like: one agent per person, access to accounts and devices, memory that persists across weeks, and the ability to speak first. But Muse is closed, cloud-locked, US-only. nanoMuse is the open-source attempt to reproduce the category under GPL-3.0. The paper's actual contribution is definitional and architectural, not empirical. It frames the personal agent around five questions — identity ("who are you?"), capability ("what can you do?"), memory ("what do you remember?"), initiative ("when do you speak first?"), and accountability ("can you explain what you did?") — and three time horizons. It then reverse-engineers Meta's Muse from public blog posts, a leaked production prompt, and inference about the system's structure. Each claim about Muse is footnoted by source type: official blog, production prompt, or author inference. This is unusually disciplined for a position paper. The nanoMuse architecture itself runs one agent per device — phone and desktop — connected through a relay server anyone can self-host. On mobile, the agent operates through screen-level interaction (tapping, swiping); on desktop, through native OS APIs. Every action passes through a "Sentinel" — a policy-enforcement layer that gates what the agent can actually do before it does it. Memory is stored as local files the user can read and edit, not opaque vectors in a vendor's cloud. The model powering the agent is the user's choice, not baked in. What's conspicuously absent is any evaluation. There are no benchmarks, no success rates, no comparison to existing open agent frameworks like AutoGPT, OpenDevin, or FRIDAY. The paper estimates costs and sizes but doesn't report measured performance on any task. The evaluation suite for screen-level actions is listed as a roadmap item, not a delivered artifact. The code is on GitHub, but the paper itself is a design document, not a results paper. The reverse-engineering of Meta's Muse is the most immediately useful section. The authors extract Muse's system prompt structure, its memory architecture (which appears to use a combination of conversation summaries and structured user facts), and its initiative logic (when the agent decides to message you unprompted). This is the kind of competitive intelligence that usually lives in blog posts, not arxiv — and having it footnoted with source types adds real value. The Sentinel concept — a separate policy layer that must approve every agent action — is the most architecturally interesting choice. It separates capability from authorization, which is the right abstraction for an agent that has access to your bank account and your email. Whether the implementation actually prevents the failure modes (hallucinated actions, unauthorized purchases, data exfiltration) is untested, but the design is sound in principle. The honest read: this is a manifesto with a GitHub link, not a research result. It defines a category, proposes an architecture, and ships code. That's valuable — the personal agent space needs an open reference implementation — but the paper cannot yet answer the question "does this work?" The roadmap items (open model for screen actions, evaluation suite, memory with provenance) are where the actual science will happen. Today, nanoMuse is a blueprint. Whether it becomes a building depends entirely on what ships next.
