Secure eXecution Pen

Agents you can seal and check.

A Pen is a private workspace for an agent powered by a large language model (LLM). It works on your files and data inside, it can't get out on its own, and it writes down everything it did.

Bring it to your classSee what's inside
The Pen

Everything the agent needs, and nothing it doesn't

Every Pen is the same, so there is nothing to configure: open one and start working. It sleeps when nobody is using it and wakes where it left off.

sealed

No way out on its own

Each Pen runs in its own small virtual machine with no direct internet access and no keys inside. Every model call, search and query leaves through code outside the Pen, which carries it out and records it.

workspace

Your files, read properly

Upload PDF, Word, Excel, PowerPoint, CSV or text. Risky formats are opened in a separate, disposable reader, never inside the Pen. The agent searches, reads, counts and compares across all of them, citing file and line.

data

A database to question

Tables loaded by the instructor (CSV, JSON, spreadsheets) are searchable by full text and by SQL, read-only. The agent shows the queries behind its figures.

web

The web, on a short leash

Web search, and opening only the pages a search returned or the user typed. Everything else is refused, and the refusal is recorded.

record

A record of every step

Each answer ends with a check written by SXPnet, not by the model: what was called, what failed, what was saved. The audit lists every reply, tool call, search and page.

thorough

Claims it can back up

For questions about every file or every passage, the agent works through all of them and reports coverage, instead of answering from the first few matches.

Sealed by design

One way in, one way out

The person and the Pen talk through a Worker at the edge. The Pen has no other way out: anything it asks for goes through that Worker, which holds the keys, applies the rules and keeps the record.

Youa browser Workerholds the keys, appliesthe rules, keeps the record Penagent, workspace, notesno keys, no direct internet model · web search · data · files the internet
allowed, and recordedblocked
For classes

A course of its own

Each school or course gets its own SXPnet at its own address, with its own data, files and passwords. No data, files or passwords are shared between them.

  1. The instructor sets it upLoads the course's data and files once, and adds skills: plain instructions for how the agent should work and answer.
  2. Students open their own PensWith one class password and no accounts. Each student's Pens are private to them, and anonymous.
  3. The instructor can look inRead any Pen without disturbing it, see what each one cost, and clear out Pens nobody uses.
  4. Good work becomes a starting pointSave a Pen as an example and share it. Students read it, or start their own Pen from it.
How it's built

On Cloudflare's developer platform

Each Pen is a Container behind its own Durable Object; uploads and encrypted snapshots live in R2; the shared tables are SQLite in a Durable Object; the model is Claude, reached through Workers AI and AI Gateway. You decide where your data goes.

WorkersContainersDurable ObjectsSQLiteR2Workers AIAI Gateway