Proof-stamped desktop agents for regulated operations teams
The problem
Finance, insurance and BPO teams want agents operating their legacy desktop apps, but every AI action is unauditable: logs can be edited, and nobody can prove which model did what. The result is pilots that never reach production in regulated work, while the repetitive work stays manual.
The idea
Why now
Tencent's Hy4 (4 Nov 2026) adds vision plus CLI-and-GUI computer use to an open flagship, Anthropic's FlashProve (2 Nov) makes model identity cryptographically checkable, and Beacon (3 Nov) gives coding agents a memory that improves with use. The three pieces needed for auditable desktop agents all landed within one week.
What it combines
Hy4's computer use (operates real apps) + FlashProve's proof of model identity (proves which model acted) + Beacon's self-improving memory (remembers approved procedures). The combination is more than the sum: computer use without proof is unauditable, proof without computer use has nothing to prove, and memory turns one-off runs into a repeatable, approved workflow.
MVP
Weekend scope: one desktop workflow (invoice reconciliation in a spreadsheet + email client) on an open computer-use model, with Beacon-style memory of the approved steps and a FlashProve-style receipt per run. Deliberately skip: multi-app orchestration, scheduling, and any self-hosted deployment.
How it makes money
The moat
UiPath and other RPA incumbents cannot ship cryptographic model-identity proofs without model-provider cooperation and without undermining their closed orchestration story; their business is selling the platform that runs the bots, not receipts an auditor can verify independently of that platform.
Distribution
B2B wedge: sell to finance-operations and BPO team leads who already run RPA, starting with one workflow (invoice reconciliation, claims intake) inside a single team, then expand team by team on the strength of the audit trail.
Why it wins
RPA tools replay fixed scripts and keep editable logs; this proves, per task, which model acted and what it did, and it learns the workflow instead of requiring a consultant to script it.
Risks
Biggest risk: computer-use models still fumble real desktops, so early receipts would certify bad work. The MVP de-risks it by keeping a human exception queue and only auto-approving runs that match the memorized approved procedure exactly.
Build it with
- Tencent Hy4: 770B flagship that sees and operates a computer for the first timeVision + computer-use engine that operates real desktop apps
- Anthropic FlashProve: cryptographic proof of which AI model actually answeredCryptographic proof of which model produced each action
- Beacon: open-source, self-improving memory for AI coding agentsSelf-improving memory of approved procedures
Repo to start from
receipt-agents — an open toolkit that runs a desktop workflow on a computer-use model and emits a verifiable receipt per task.
Evidence
- Tencent Launches Hy4
- Anthropic FlashProve
- UiPath alternatives 2026 pricing
- Compliance cost and timeline
- Postman AI plugin leak discussion
Get the week's best AI launches, plus 3 ideas worth building
One email every Saturday. Ranked by traction, not hype. Free.