Skip to content
Aftercall
Menu
Download for MacDownload

For Mac · No bot joins your call

Meeting notes that follow through.

Notes apps send your calls to servers you can't check, and the follow-ups still wait on you. Aftercall records on your Mac and makes the notes in secure hardware it checks first. Then it drafts the recap and pays what was agreed, once you approve or by autopilot rules you set, within caps a NEAR contract enforces.

For founders and freelancers who agree work and payments on calls.

Download for MacTest build on NEAR testnet · macOS 14.2 or laterSee one call, start to finish
VERIFIED · IN SECURE HARDWARE ·

Verified in secure hardware, every run

  • Gateway 6
  • Whisper 9
  • Qwen 9
  • On the reply 5

24 checks before anything is sent and 5 on the reply, with one node per model.

Audio goes to NEAR AI over TLS and isn't end-to-end encrypted. The transcript is, or it isn't sent.

Aftercall's notes for Sync with Ada, marked Verified: Ada and Victor agreed the API fix ships before Friday's demo; Victor sends Ada a recap today and pays the designer a 50 USDC deposit to refresh the deck.

Paid Designer

designer.near

50.00 USDC paid 14:07

pay the designer the fifty dollar deposit today 02:14

Heard
fifty dollar → 50.00 USDC
Payee
Designer · on your list

Paying in 5… you can still take it back.

From your agent wallet

The Mac app on its built-in sample meeting. The payment card is drawn from the app's own; payments in the sample are simulated.

02 · In the call

Record any call. No bot joins.

Aftercall records both sides on your Mac, your microphone and the call's audio, kept apart, whatever app the call is in. Press ⌘⇧R in any app to open the record sheet. A small recorder sits above your call and the menu bar keeps time.

A call with Ada, with Aftercall recording it, 02:16 in. The floating recorder shows one meter for your mic and one for the call. You say: “Send Ada the recap after this call, and pay the designer the fifty dollar deposit today.” Your notes, typed during the call: “Fix before demo, no exceptions.” and “Deck: refresh with the designer, deposit now, rest when it's done.” After the call, that line becomes a 50.00 USDC payment to the designer, waiting for your approval.

Drawn from the app's own recorder, record sheet and notes. Sample call. Built and unit-tested; not all of it has run on a real call yet.

  • ⌘⇧R

    Opens the record sheet from any app, or your notes while recording. You can turn the shortcut off in Settings.

  • Your notes

    Type what matters as it happens. Your notes guide the summary; every follow-up still needs a quote from the call.

  • Every time

    Recording starts only after you tick “I've told everyone on the call”. Aftercall keeps that as your statement; it can't check it.

Audio is sealed on your Mac about once a second while recording, and deleted once the notes are saved.

03 · One call, start to finish

What happens after you press Stop.

Follow the sample meeting, Sync with Ada, from the end of the call to the payment. The times are illustrative; the steps and their order are the app's.

  1. Step 1 · Checked first

    Nothing leaves until the hardware checks out.

    Press Stop and make notes. Before any audio is sent, Aftercall checks NEAR AI's gateway and the Whisper and Qwen machines against a fresh nonce: 24 checks with one node per model. If the gateway or Whisper fails, or no Qwen node passes, nothing is sent.

    Audio then goes over TLS through the checked gateway; the transcript is end-to-end encrypted to the Qwen model, or not sent.

    Fundraise · Today · 3 min 12 s

    Sync with Ada

    1. Secure hardware checkedGateway, Whisper and Qwen TEEs, each against a fresh nonceIntel TDX quoteDebug offKey boundNonce boundSoftwareNVIDIA GPUs0.9 s
    2. TranscribedWhisper in secure hardware · You and Ada kept apart2.2 s
    3. Notes writtenTranscript sealed on this Mac for the attested Qwen TEE; each item needs a quote from the call31 s
    4. Signature checkedSigned over the exact request and response by the attested keyRequest hashResponse hashModel namedAttested signer0.1 s
    5. Audio deleted from this MacOnly the encrypted transcript and notes stay0.1 s
    6. Proof recorded on NEARA hash only; no meeting content goes on chain1.4 s

    Processing, as the app shows it. Times are illustrative. Proof recording runs on NEAR testnet.

  2. Step 2 · Notes, with the words behind them

    Every follow-up quotes the call.

    Whisper writes the transcript with you and the call kept apart. Qwen writes the summary, decisions and action items, and every follow-up has to carry the exact words it came from. The amount is read from those words, never from the model's number.

    Quotes are matched word for word, in any language the call was in.

    The Sync with Ada notes, marked Verified, with the summary.
    02:14

    Send Ada the recap after this call, and pay the designer the fifty dollar deposit today.

    Heard fifty dollar → 50.00 USDC

    The Mac app on its built-in sample meeting.

  3. Step 3 · The recap

    The recap waits in your own Mail.

    Draft in Mail, the default, opens the recap in your own mail app, ready to send: what you agreed, the action items, and a footer that says what was checked. Aftercall's servers never see it.

    Send through Aftercall is there if you want it; it hands the email to Resend, which keeps sent mail under its own policy.

    Recap to Ada

    ada@example.com · from your calendar

    Recap: API fix before Friday, deck refresh
    To
    Ada <ada@example.com>
    Subject
    Recap: API fix before Friday, deck refresh

    Hi Ada, thanks for the call. Here's what we agreed.

    1. Ship the API fix before Friday's demo.
    2. Refresh the deck with the designer, with a 50 USDC deposit now.

    Send Ada the recap · You · today
    Ship the API fix · You · by Friday

    Notes made by Aftercall in secure hardware on NEAR AI Cloud, checked by the app before anything was sent. The transcript was end-to-end encrypted to that hardware.

    Aftercall deletes the call's audio once the notes are saved.

    What was and wasn't checked →

    The recap the app builds for the sample meeting, as a draft in Mail. The footer is the one it writes when every check passed.

  4. Step 4 · The payment

    Approve once. Paid, within your caps.

    One approval pays the designer 50 USDC from your agent wallet, with five seconds to take it back. The 5,000 USDC from the full five thousand when the deck is done is over your caps, so the contract holds it until your own wallet approves.

    The app's own key can't raise a cap or add a payee.

    Paid Designer

    designer.near

    50.00 USDC paid 14:07

    pay the designer the fifty dollar deposit today 02:14

    Heard
    fifty dollar → 50.00 USDC
    Payee
    Designer · on your list

    Paying in 5… you can still take it back.

    From your agent wallet

    Pay Designer 5,000.00 USDC

    Over your caps. Only your wallet can approve it.

    the full five thousand when the deck is done 02:30

    Payments in the sample are simulated. The contract's caps are tested on a local NEAR node.

Fundraise · Today · 3 min 12 s

Sync with Ada

  1. Secure hardware checkedGateway, Whisper and Qwen TEEs, each against a fresh nonceIntel TDX quoteDebug offKey boundNonce boundSoftwareNVIDIA GPUs0.9 s
  2. TranscribedWhisper in secure hardware · You and Ada kept apart2.2 s
  3. Notes writtenTranscript sealed on this Mac for the attested Qwen TEE; each item needs a quote from the call31 s
  4. Signature checkedSigned over the exact request and response by the attested keyRequest hashResponse hashModel namedAttested signer0.1 s
  5. Audio deleted from this MacOnly the encrypted transcript and notes stay0.1 s
  6. Proof recorded on NEARA hash only; no meeting content goes on chain1.4 s

Processing, as the app shows it. Times are illustrative. Proof recording runs on NEAR testnet.

The Mac app on its built-in sample meeting.

The recap the app builds for the sample meeting, as a draft in Mail. The footer is the one it writes when every check passed.

Payments in the sample are simulated. The contract's caps are tested on a local NEAR node.

04 · Everything after the call

Every call you've had, a keystroke away.

Notes, transcripts, people and action items stay on your Mac, sealed with a key in your Keychain. Find them, ask them, and hand work to an agent, all from the keyboard.

What needs you, what's left on today's calendar, and your recent meetings, with recording one click or ⌘⇧R away.

Today: Record a meeting, and Needs you with the 50.00 USDC payment to the designer and the blocked 5,000.00 USDC one.

The Mac app on its built-in sample meeting.

  • Projects

    Keep a client's calls together, with their own action items.

  • Calendar

    Meeting names and recap addresses come from your calendar, read on this Mac only.

  • Warnings

    If your mic or the call goes silent, Aftercall says which side; after two quiet minutes it asks “Call ended?” and keeps recording.

  • Cost

    Each run shows an estimated cost from what NEAR AI reports, never a guess.

  • Sealed

    Audio, transcripts and notes are encrypted on disk with a key in your Keychain.

Reading a real calendar and the warnings firing on a real call are built and unit-tested, and haven't run in the Mac app yet.

05 · The agent wallet

Pays what was agreed. Never more than you allow.

Fund an agent wallet from your own NEAR wallet. Aftercall pays in USDC, only to people on your list, inside a daily cap and a per-payment cap that a NEAR contract holds. Every change to the rules is signed in your wallet.

Agent wallet Sample

Aftercall pays only the people below, within your caps. Every change is signed in your wallet.

Balance

Balance 205.00 USDCUSDC

Deposited 25.00 USDC

Spent today50.00 of 200.00

150.00 left today · paid the designer 14:07

Limits signed by you

Daily cap

200.00 USDC

Everything Aftercall pays in a day, together.

Per payment

100.00 USDC

Bigger payments wait in the contract for your wallet.

Payees

Designerdesigner.near
  • Over the cap

    A payment over your caps waits in the contract until your own wallet approves or declines it.

  • New payee

    Send a single-use claim link, and they say where they want to be paid.

  • Autopilot

    Optional, and off until you set rules. 60 seconds to undo, never more than the per-payment cap.

Tested on a local NEAR node and live on NEAR testnet. Payments in the sample are simulated.

06 · Limits, enforced in code

Built so it can't.

Four things Aftercall is built not to do, each held by code with tests. The spending limits hold even if the app itself is hijacked: they live in a NEAR contract.

  1. No quote from the call, no follow-up.

    Every follow-up needs an exact quote from the transcript, on whole words. Anything without one is dropped, listed on the meeting page and never acted on. Amounts come from the words spoken, and are kept only when the same value is in the quote.

    See the tests 3
    • keeps what the transcript backs up and drops what it doesn'tbuild.test.ts
    • an amount that isn't in the quote is dropped to nullbuild.test.ts
    • a quote must start and end on whole wordstranscript.test.ts

    1 item dropped · no exact quote in the transcript

    Book the launch venue for the demo

    Action item · quote not in the transcript

  2. It can't overspend.

    Payment rules live in a NEAR contract: listed payees, a daily cap and a per-payment cap. The key on your Mac can call only pay and record_proof, and open and release a deal held in escrow (on testnet, not yet run live); every rule change needs your own wallet. Anything over a cap waits in the contract for your wallet.

    Tested on a local NEAR node. The contract is live on NEAR testnet.

    See the tests 3
    • limited_key_cannot_change_rulessandbox.rs
    • one_yocto_rule_holds_even_if_key_lists_owner_methodssandbox.rs
    • over_cap_is_blocked_then_owner_approvessandbox.rs

    This Mac's key

    Can callpay · record_proof · open_escrow · release_escrow

    Can'traise a cap · add a payee · withdraw · change any rule

  3. It can't act without your say.

    Nothing runs until you approve it, with five seconds to undo, unless you set autopilot rules. Autopilot is off until you do, gives you 60 seconds to undo, and never runs anything that was queued when the app closed: that waits for you.

    See the tests 2
    • a queued follow-up read from disk at launch is held for you, never runautopilot.test.ts
    • follow_ups_are_saved_as_the_app_sent_them_and_ticks_keep_themnotes_file.rs

    Sending by autopilot in 0:52 · your rules

  4. It can't show your notes to agents.

    Connected agents are off by default and only read until you allow claiming and completing. They never send, pay or change rules, and never get your own notes. Each read, claim and refused request is listed on your Mac, with ids, never meeting content.

    See the tests 3
    • your_notes_and_their_salt_never_reach_agentsagents.rs
    • agents_read_only_by_default_and_are_told_which_switch_to_turn_onagents.rs
    • read-only by default: reads work, claim and complete are refused by nametools.test.ts
    Ship the API fixClaude Code · Agents are read-onlyRefused14:12

Each of the four maps to tests listed in the repolisted in the README's What is proven table.apos;s What is proven page.

07 · Check it yourself

Checked by name, every run.

Your Mac runs these checks on NEAR AI's secure hardware for every recording, and the Verify sheet lists them for each meeting. A proof's hash goes in a NEAR contract, so anyone with the link can re-check it in a browser at /verify; what a browser can't re-run is marked as recorded by the app.

Proof recording runs on NEAR testnet today; mainnet comes later.

VERIFIED · IN SECURE HARDWARE ·

30 checks with one node per model

25 before anything is sent. If the gateway or Whisper fails, or no Qwen node passes, nothing leaves your Mac. 5 more on the reply.

  • Gateway TEE7
  • Whisper TEE9
  • Qwen TEE9
  • On the reply5
See every check by name

Gateway TEE 7

  • Genuine Intel TDX confidential VM
  • Debug mode off
  • The TEE made its signing key
  • Evidence is fresh
  • Boot log matches the quote
  • Attested setup file matches the hardware
  • Gateway's TLS key is in its quote

Whisper TEE 9

The same six CPU checks, plus

  • Genuine NVIDIA confidential GPU
  • GPU evidence is fresh
  • GPUs in secure mode

Qwen TEE 9

The same six CPU checks, plus

  • Genuine NVIDIA confidential GPU
  • GPU evidence is fresh
  • GPUs in secure mode

On the reply 5

  • Transcript encrypted to the attested model
  • Signed over exactly what was sent
  • Signed over exactly what came back
  • Signed for the model asked for
  • Signed by an attested TEE

Audio goes over TLS pinned to the checked gateway's key and isn't end-to-end encrypted. The transcript is end-to-end encrypted to the checked model, or not sent.

Ran live once

On 1 Nov 2026 the Mac app made notes from another sample call, a designer kickoff, on live NEAR AI Cloud. All 29 checks passed, with one node per model. That run's proof isn't on NEAR yet, so it can't be re-checked from outside.

Check it in five minutes, once the source opens

  • pnpm install && pnpm verify --quick

    Typechecks every package and runs 502 core, 53 backend, 25 MCP server and 8 receipts tests, the desktop Rust tests and the contract's unit tests. Nothing calls NEAR AI.

  • pnpm dev:ui

    The whole Mac interface in a browser at localhost:1420, on the sample meeting. Recording is simulated there.

What it can't prove

  • The transcript can mishear; a quote is checked against what Whisper wrote.
  • Transcriptions aren't signed per response.
  • The notice to others is your statement.
  • What NEAR AI keeps is set by NEAR AI's policy.
How a call is handled, step by step
The Aftercall app icon

Your next call, private and followed up.

  1. Record, with no botBoth sides, on your Mac
  2. Notes, checked firstIn secure hardware on NEAR AI
  3. Recap and paymentOnce you approve, within your caps
Download for MacTest build on NEAR testnet · macOS 14.2 or later

MIT licence · Mac only, macOS 14.2 or later · Built for NEAR HACKATHON, November 2026