Greenroom · functional surface
See what comes out. Then run your own.
The coaching bundle below is real output from a 41-second rehearsal recording, generated live by the Anchored Receipt Engine and pinned here so the engine output is visible before any decision to buy. The recording is downloadable; so are both bundles. Every artifact is hash-anchored to the Knox event chain plus an OpenTimestamps Bitcoin proof — bundle integrity verifies from the bundle bytes alone.
Real engine outputKnox event-chain anchorOpenTimestamps Bitcoin witnessFRE 902(13)/(14)-shaped self-authenticatingStandalone verifier CLI
One Stripe charge, 5 coaching-pipeline runs. Each run accepts up to 32 MiB of audio. Credit consumed at the receipt step. Stripe-hosted checkout; no card data touches Bonis.
Real engine output · 41-sec rehearsal recording
What the engine produced.
A short rehearsal recording was generated via macOS say with intentional fillers and one hedging phrase, run through POST https://arc.bonissystems.com/v1/receipts, and the resulting bundle was passed to POST https://arc.bonissystems.com/v1/coaching. The output below is the live response. Every chart and rewrite is re-derivable from the JSON bundle; the bundle itself is independently anchored.
Energy + clarity · LLM
0-100 score, with the coaching summary
Coaching summary
The speaker clearly conveys the core value proposition of tamper-evident bundles and offline verification, which is the strongest part of the delivery. However, hedging language ('sort of', 'I think maybe'), filler words ('Um', 'Like', 'Right', 'So'), and trailing sentence fragments undermine credibility and reduce listener confidence. Tighten the mid-section, eliminate hedges, and give the closing more punch.
Filler counts · deterministic
5 phrases flagged
um
1
you know
1
like
1
sort of
1
right
1
Pacing · deterministic
Words per minute over the recording
fast 4
slow 3
in band 9
avg 153 wpm · 106 words
Weak-phrase rewrites · LLM
5 hedging phrases → concrete rewrites
before
Um, every artifact is hash-anchored
after
Every artifact is hash-anchored
Filler 'Um' erodes confidence before the key technical claim.
at 0:05
before
So, you know, bundle integrity verifies
after
Bundle integrity verifies
'So, you know' is a filler hedge that dilutes the strength of this important guarantee.
at 0:11
before
Like, when a reviewer needs to confirm
after
When a reviewer needs to confirm
Conversational 'Like' weakens a professional technical statement.
at 0:20
before
they can do that, sort of, independently.
after
they can do so fully independently.
'Sort of' introduces doubt into a feature that should be presented as a certainty.
at 0:25
before
I think the binary maybe also runs offline.
after
The binary runs fully offline.
'I think' and 'maybe' together signal the speaker is unsure of a core product capability — very damaging.
at 0:28
Drift moments · LLM
2 moments where focus slipped
“Right.”
Isolated filler word with no informational content; breaks flow without transitioning to anything.
at 0:37
“So.”
Another isolated filler; the speaker appears to lose their thread entirely before the closing.
at 0:39
Cue cards · LLM
7 cards for the live show
- 0:00Anchored Receipt Engine: recording in → tamper-evident bundle out.
- 0:05Every artifact hash-anchored: Nox event chain + Bitcoin OpenTimestamps proof.
- 0:11Verification is self-contained — bundle bytes alone, zero runtime dependencies.
- 0:20Reviewers verify independently, any time, with no external contact required.
- 0:28Standalone verifier 'klee' ships with engine; runs fully offline.
- 0:35Greenroom: the coaching interface built on top of this engine.
- 0:40Dead simple workflow: drop a recording, get a verified bundle.
Anchors · Knox + OpenTimestamps
Each artifact independently witnessed
Raw coaching bundle JSON
{
"coachingBundle": {
"bundleFormat": "anchored-receipt-engine.greenroom",
"bundleFormatVersion": "1.0",
"source": {
"receiptBundleManifestHash": "5f37cec3c7ad2eee7d31567ca0c7fec5c040a2b3dc790cd686e2083ce0d25b6c",
"receiptId": "arc_5b1088e2-c475-45c6-b1b2-fcec9546983d"
},
"generatedAt": "2026-05-01T03:56:24.103Z",
"metrics": {
"fillers": {
"totalCount": 5,
"byPhrase": {
"um": 1,
"you know": 1,
"like": 1,
"sort of": 1,
"right": 1
},
"hits": [
{
"phrase": "um",
"segmentIndex": 2,
"segmentTimestamp": 5.840000152587891
},
{
"phrase": "you know",
"segmentIndex": 4,
"segmentTimestamp": 11.640000343322754
},
{
"phrase": "like",
"segmentIndex": 6,
"segmentTimestamp": 20.200000762939453
},
{
"phrase": "sort of",
"segmentIndex": 7,
"segmentTimestamp": 25.799999237060547
},
{
"phrase": "right",
"segmentIndex": 11,
"segmentTimestamp": 37.70000076293945
}
]
},
"pacing": {
"overallWordsPerMinute": 152.52,
"totalDurationSeconds": 41.7,
"totalWordCount": 106,
"segments": [
{
"segmentIndex": 0,
"startSeconds": 0,
"endSeconds": 4.84,
"durationSeconds": 4.84,
"wordCount": 13,
"wordsPerMinute": 161.16,
"flag": "ok"
},
{
"segmentIndex": 1,
"startSeconds": 4.84,
"endSeconds": 5.84,
"durationSeconds": 1,
"wordCount": 2,
"wordsPerMinute": 120,
"flag": "ok"
},
{
"segmentIndex": 2,
"startSeconds": 5.84,
"endSeconds": 10.48,
"durationSeconds": 4.64,
"wordCount": 14,
"wordsPerMinute": 181.03,
"flag": "ok"
},
{
"segmentIndex": 3,
"startSeconds": 10.48,
"endSeconds": 11.64,
"durationSeconds": 1.16,
"wordCount": 2,
"wordsPerMinute": 103.45,
"flag": "ok"
},
{
"segmentIndex": 4,
"startSeconds": 11.64,
"endSeconds": 17.72,
"durationSeconds": 6.08,
"wordCount": 15,
"wordsPerMinute": 148.03,
"flag": "ok"
},
{
"segmentIndex": 5,
"startSeconds": 17.72,
"endSeconds": 20.2,
"durationSeconds": 2.48,
"wordCount": 5,
"wordsPerMinute": 120.97,
"flag": "ok"
},
{
"segmentIndex": 6,
"startSeconds": 20.2,
"endSeconds": 25.8,
"durationSeconds": 5.6,
"wordCount": 15,
"wordsPerMinute": 160.71,
"flag": "ok"
},
{
"segmentIndex": 7,
"startSeconds": 25.8,
"endSeconds": 28.66,
"durationSeconds": 2.86,
"wordCount": 7,
"wordsPerMinute": 146.85,
"flag": "ok"
},
{
"segmentIndex": 8,
"startSeconds": 28.66,
"endSeconds": 33.5,
"durationSeconds": 4.84,
"wordCount": 15,
"wordsPerMinute": 185.95,
"flag": "ok"
},
{
"segmentIndex": 9,
"startSeconds": 33.5,
"endSeconds": 35.1,
"durationSeconds": 1.6,
"wordCount": 3,
"wordsPerMinute": 112.5,
"flag": "ok"
},
{
"segmentIndex": 10,
"startSeconds": 35.1,
"endSeconds": 37.7,
"durationSeconds": 2.6,
"wordCount": 7,
"wordsPerMinute": 161.54,
"flag": "ok"
},
{
"segmentIndex": 11,
"startSeconds": 37.7,
"endSeconds": 38.7,
"durationSeconds": 1,
"wordCount": 1,
"wordsPerMinute": 60,
"flag": "ok"
},
{
"segmentIndex": 12,
"startSeconds": 38.7,
"endSeconds": 39.7,
"durationSeconds": 1,
"wordCount": 1,
"wordsPerMinute": 60,
"flag": "ok"
},
{
"segmentIndex": 13,
"startSeconds": 39.7,
"endSeconds": 40.7,
"durationSeconds": 1,
"wordCount": 3,
"wordsPerMinute": 180,
"flag": "ok"
},
{
"segmentIndex": 14,
"startSeconds": 40.7,
"endSeconds": 41.7,
"durationSeconds": 1,
"wordCount": 3,
"wordsPerMinute": 180,
"flag": "ok"
},
{
"segmentIndex": 15,
"startSeconds": 41.7,
"endSeconds": 41.7,
"durationSeconds": 0,
"wordCount": 0,
"wordsPerMinute": 0,
"flag": "ok"
}
]
},
"sha256": "bb935e2257e4973eae28ce422682a6e8aef233d4c29384cfd0ad702c947c3b71"
},
"coaching": {
"model": "claude-sonnet-4-6",
"modelInvokedAt": "2026-05-01T03:56:07.072Z",
"energyClarityScore": 42,
"summary": "The speaker clearly conveys the core value proposition of tamper-evident bundles and offline verification, which is the strongest part of the delivery. However, hedging language ('sort of', 'I think maybe'), filler words ('Um', 'Like', 'Right', 'So'), and trailing sentence fragments undermine credibility and reduce listener confidence. Tighten the mid-section, eliminate hedges, and give the closing more punch.",
"weakPhrases": [
{
"segmentIndex": 2,
"segmentTimestamp": 5.84,
"before": "Um, every artifact is hash-anchored",
"after": "Every artifact is hash-anchored",
"why": "Filler 'Um' erodes confidence before the key technical claim."
},
{
"segmentIndex": 4,
"segmentTimestamp": 11.64,
"before": "So, you know, bundle integrity verifies",
"after": "Bundle integrity verifies",
"why": "'So, you know' is a filler hedge that dilutes the strength of this important guarantee."
},
{
"segmentIndex": 6,
"segmentTimestamp": 20.2,
"before": "Like, when a reviewer needs to confirm",
"after": "When a reviewer needs to confirm",
"why": "Conversational 'Like' weakens a professional technical statement."
},
{
"segmentIndex": 7,
"segmentTimestamp": 25.8,
"before": "they can do that, sort of, independently.",
"after": "they can do so fully independently.",
"why": "'Sort of' introduces doubt into a feature that should be presented as a certainty."
},
{
"segmentIndex": 8,
"segmentTimestamp": 28.66,
"before": "I think the binary maybe also runs offline.",
"after": "The binary runs fully offline.",
"why": "'I think' and 'maybe' together signal the speaker is unsure of a core product capability — very damaging."
}
],
"driftMoments": [
{
"segmentIndex": 11,
"segmentTimestamp": 37.7,
"text": "Right.",
"reason": "Isolated filler word with no informational content; breaks flow without transitioning to anything."
},
{
"segmentIndex": 12,
"segmentTimestamp": 39.7,
"text": "So.",
"reason": "Another isolated filler; the speaker appears to lose their thread entirely before the closing."
}
],
"cueCards": [
{
"segmentIndex": 0,
"startSeconds": 0,
"bullet": "Anchored Receipt Engine: recording in → tamper-evident bundle out."
},
{
"segmentIndex": 2,
"startSeconds": 5.84,
"bullet": "Every artifact hash-anchored: Nox event chain + Bitcoin OpenTimestamps proof."
},
{
"segmentIndex": 4,
"startSeconds": 11.64,
"bullet": "Verification is self-contained — bundle bytes alone, zero runtime dependencies."
},
{
"segmentIndex": 6,
"startSeconds": 20.2,
"bullet": "Reviewers verify independently, any time, with no external contact required."
},
{
"segmentIndex": 8,
"startSeconds": 28.66,
"bullet": "Standalone verifier 'klee' ships with engine; runs fully offline."
},
{
"segmentIndex": 10,
"startSeconds": 35.1,
"bullet": "Greenroom: the coaching interface built on top of this engine."
},
{
"segmentIndex": 13,
"startSeconds": 40.7,
"bullet": "Dead simple workflow: drop a recording, get a verified bundle."
}
],
"sha256": "ebc591227cde67e3a45962f481deea18b212db4bfcc5f9dadf113bc4acb35af1"
},
"coachingAnchor": {
"anchorId": "cmomdrzoc000zoie1h0v18ra9",
"anchorHash": "2f5a012d57d845f64cc6ee7d06e9dc9fc5dc4f49d87bf602a0cca1150c727b74",
"sequence": 81,
"timestamp": "2026-05-01T03:56:23.004Z",
"verifyUrl": "https://bonissystems.com/api/knox/verify?hash=2f5a012d57d845f64cc6ee7d06e9dc9fc5dc4f49d87bf602a0cca1150c727b74",
"affidavit": "AFFIDAVIT OF CRYPTOGRAPHIC EXISTENCE\nSubmitted under FRE 902(13) / 902(14) — self-authenticating electronic records\n\nI, the undersigned Bonis Systems LLC (Wyoming, UEI R2BPJDC5CBA3, CAGE 1TSP2),\noperator of the Knox cryptographic anchoring system (USPTO provisional\n64/038,359, priority date 2026-04-13, inventor Jonis Aaron Fields), attest\nas follows:\n\n1. At the timestamp recorded below, a file with the following\n characteristics was presented to the Knox public anchoring endpoint:\n\n Filename: arc_5b1088e2-c475-45c6-b1b2-fcec9546983d.coaching.json\n Size (bytes): 0\n MIME type: application/json\n SHA-256 digest: ebc591227cde67e3a45962f481deea18b212db4bfcc5f9dadf113bc4acb35af1\n\n2. The file's SHA-256 digest was hash-chained into the Knox anchor\n sequence with the following identifying records:\n\n Knox anchor ID: cmomdrzoc000zoie1h0v18ra9\n Payload hash: 2f5a012d57d845f64cc6ee7d06e9dc9fc5dc4f49d87bf602a0cca1150c727b74\n Timestamp (UTC): 2026-05-01T03:56:23.004Z\n\n3. The payload hash above was incorporated into Knox's hourly Merkle\n aggregation and published to the Bitcoin blockchain via the\n OpenTimestamps protocol. Any party can independently verify the\n existence and timestamp of the digest above without contacting\n Bonis Systems.\n\n4. Verification endpoint (no authentication required):\n https://bonissystems.com/api/knox/verify?hash=2f5a012d57d845f64cc6ee7d06e9dc9fc5dc4f49d87bf602a0cca1150c727b74\n\n5. The Knox anchoring primitive is model-checked under a publicly\n downloadable TLA+ specification at:\n https://bonissystems.com/bonis/spec\n\n6. This affidavit is generated automatically from cryptographic state.\n The digest above cannot have been altered after the Timestamp without\n invalidating both the Knox hash chain and the Bitcoin block header.\n\nOperator: Bonis Systems LLC\nJurisdiction: Wyoming, United States\nPatent: USPTO provisional 64/038,359\nGenerated: 2026-05-01T03:56:23.058Z\n",
"payloadKind": "extraction",
"payloadSha256": "ebc591227cde67e3a45962f481deea18b212db4bfcc5f9dadf113bc4acb35af1",
"otsProofBytes": "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",
"otsCalendars": [
"https://a.pool.opentimestamps.org",
"https://b.pool.opentimestamps.org",
"https://a.pool.eternitywall.com",
"https://ots.btc.catallaxy.com"
]
},
"metricsAnchor": {
"anchorId": "cmomdrzob000xoie19piay80p",
"anchorHash": "ac52dcd8d124ecb4f1eaf42d94f72fabe98361b1a9ca1c8cbb540743d9656fb2",
"sequence": 81,
"timestamp": "2026-05-01T03:56:23.000Z",
"verifyUrl": "https://bonissystems.com/api/knox/verify?hash=ac52dcd8d124ecb4f1eaf42d94f72fabe98361b1a9ca1c8cbb540743d9656fb2",
"affidavit": "AFFIDAVIT OF CRYPTOGRAPHIC EXISTENCE\nSubmitted under FRE 902(13) / 902(14) — self-authenticating electronic records\n\nI, the undersigned Bonis Systems LLC (Wyoming, UEI R2BPJDC5CBA3, CAGE 1TSP2),\noperator of the Knox cryptographic anchoring system (USPTO provisional\n64/038,359, priority date 2026-04-13, inventor Jonis Aaron Fields), attest\nas follows:\n\n1. At the timestamp recorded below, a file with the following\n characteristics was presented to the Knox public anchoring endpoint:\n\n Filename: arc_5b1088e2-c475-45c6-b1b2-fcec9546983d.metrics.json\n Size (bytes): 0\n MIME type: application/json\n SHA-256 digest: bb935e2257e4973eae28ce422682a6e8aef233d4c29384cfd0ad702c947c3b71\n\n2. The file's SHA-256 digest was hash-chained into the Knox anchor\n sequence with the following identifying records:\n\n Knox anchor ID: cmomdrzob000xoie19piay80p\n Payload hash: ac52dcd8d124ecb4f1eaf42d94f72fabe98361b1a9ca1c8cbb540743d9656fb2\n Timestamp (UTC): 2026-05-01T03:56:23.000Z\n\n3. The payload hash above was incorporated into Knox's hourly Merkle\n aggregation and published to the Bitcoin blockchain via the\n OpenTimestamps protocol. Any party can independently verify the\n existence and timestamp of the digest above without contacting\n Bonis Systems.\n\n4. Verification endpoint (no authentication required):\n https://bonissystems.com/api/knox/verify?hash=ac52dcd8d124ecb4f1eaf42d94f72fabe98361b1a9ca1c8cbb540743d9656fb2\n\n5. The Knox anchoring primitive is model-checked under a publicly\n downloadable TLA+ specification at:\n https://bonissystems.com/bonis/spec\n\n6. This affidavit is generated automatically from cryptographic state.\n The digest above cannot have been altered after the Timestamp without\n invalidating both the Knox hash chain and the Bitcoin block header.\n\nOperator: Bonis Systems LLC\nJurisdiction: Wyoming, United States\nPatent: USPTO provisional 64/038,359\nGenerated: 2026-05-01T03:56:23.104Z\n",
"payloadKind": "extraction",
"payloadSha256": "bb935e2257e4973eae28ce422682a6e8aef233d4c29384cfd0ad702c947c3b71",
"otsProofBytes": "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",
"otsCalendars": [
"https://a.pool.opentimestamps.org",
"https://b.pool.opentimestamps.org",
"https://a.pool.eternitywall.com",
"https://ots.btc.catallaxy.com"
]
},
"manifestHash": "1c08e1fa1173156cd6937cda2b8557508b50aae462f65a616d6f0e8360d1b830"
}
}Run your own
$9.99 for 5 runs.
One Stripe charge buys a 5-run pack. On checkout success the page hands over a session-bound redemption link — drop a recording, the engine returns the coaching bundle and one credit is consumed. No subscription, no recurring billing, no account; the pack is tied to the Stripe Checkout session that purchased it.
5-run pack
Each run: one recording in (mp3, m4a, wav, webm, mp4, or mov · up to 32 MiB) → coaching bundle out, anchored to Knox + OpenTimestamps.
$9.99
Already have a bearer
Embedder API — direct against arc.bonissystems.com.
The Anchored Receipt Engine is bearer-gated. Embedders with their own token call the engine directly without going through this surface — same coaching bundle, no intermediation. Bearer issuance for embedders is handled out-of-band via founder@bonissystems.com.
# 1. Emit a receipt bundle from a recording
curl -X POST https://arc.bonissystems.com/v1/receipts \
-H "Authorization: Bearer YOUR_TOKEN" \
-F "recording=@meeting.mp4"
# → returns: { bundle: { ... } }
# 2. Pass that bundle to the Greenroom coaching pipeline
curl -X POST https://arc.bonissystems.com/v1/coaching \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"bundle": <paste-bundle-from-step-1>}'
# → returns: { coachingBundle: { ... } }What this is not
Greenroom is infrastructure, not a webinar platform.
Greenroom does not replace LiveKit, Zoom, Riverside, or Loom. The recording is forwarded to the Anchored Receipt Engine for the duration of the request and is not retained on Bonis infrastructure beyond that. Audio is processed by OpenAI Whisper for transcription as part of the engine pipeline; the recording is not retained by OpenAI beyond the request. The engine is stateless: every request is processed and discarded. Embedders are expected to front the engine with their own identity layer (SSO / IAP / VPC ingress).