The manifesto

Why every AI needs a revoke button

AI is getting memory. That part is good, and it is not up for debate. The only question that matters is whose memory it is.

Right now the answer is: not yours. The AI you talk to every day is starting to remember you. It learns your work, your turns of phrase, the shape of how you think. And every bit of that lives inside one company, on their terms, behind a door you do not hold the key to. You cannot pick it up and carry it to a different assistant. You often cannot even see it in full. And you certainly cannot make it stop.

We have a word for something a company keeps about you that you cannot move and cannot take back. It is not memory. It is a file on you. The friendliness of the interface does not change what it is.

Memory you cannot take back is not yours. It is a hold someone else has on you, wearing the face of convenience.

This is the fork the whole industry is walking toward without saying it out loud. Every lab is racing to make its AI remember you, because memory is what makes an assistant feel like it is yours. But memory is also the strongest lock-in ever invented. The AI that knows you is the one you cannot leave. So the same feature that serves you is the one that quietly traps you, and the company building it has no reason to let you carry it out the door.

We think that is backwards. We think the memory an AI has of you should work the way your own memory does. It should belong to you. It should come with you into any room, any tool, any assistant you choose. And it should end the instant you decide it ends.

What a revoke button actually is

A revoke button sounds like a small thing, a checkbox in a settings page. It is not. It is the entire difference between a profile a company keeps and a file a person carries. If you can revoke it, you own it. If you cannot, they do. Everything else is detail.

So we built the file, and we built the button. Your pupil is a living, portable read of who you are and how to work with you. You mint it for free in a few minutes. You deepen it by playing, not by filling out a form. Any AI can read it in one second, but only with your say-so, and only the parts you allow. Then, whenever you want, one tap kills every grant you ever gave. Not a request that a company get around to honoring. A cryptographic fact that any AI can check on its own, offline, in that moment: this person took it back.

Watch it happen. Sixty seconds.
An AI meets a stranger, then gets shut out
A fresh assistant greets someone by their consented pupil, on our best model. Then she revokes, and the same assistant goes blind mid task. The token is still valid. Access is gone anyway.

The three things people ask

Is this not creepy? The creepy version is the one that already exists, the profile you cannot see. Ours is the opposite by construction. You see every read. You choose every byte before it travels. You revoke in one tap. And the most sensitive layer, the part about how a person bends under pressure, is sealed so deep it is never shared with any AI, at any price, not even by you. What travels is only how to meet you well.

Can a read of a person even be accurate? It does not have to be a verdict, and it is not one. Your pupil is a file you co-author and edit, not a score handed down about you. It is right because you made it right, and you can change it any time the truth about you changes.

Will the big labs just copy this? They can copy the feature. They cannot copy the point. Portable, revocable memory is the one thing their business model forbids, because it is the thing that lets you leave. We can build the memory you take with you precisely because we are not trying to keep you.

The labs are building the memory that keeps you. We are building the memory you keep.

None of this is finished, and we are not a large company. We are a small one that thinks the ownership question is the one that will matter most, sooner than people expect. If AI is going to remember all of us, then all of us should hold the key, carry the file, and keep the right to say enough. That is the whole idea. A revoke button, and everything it implies.

Take your read, free See the demo
Pupul is the consented, revocable identity layer for AI. Read how it works.