Starfish Station

The service behind a family-only practice-money habitat. A child is the Commander of an underwater/space station; her parents are Mission Control. This deployment hosts the companion's tool contract, the parent actions, and the operator console — the two SwiftUI apps talk to it.

The one safety property: the voice companion can never move real money. Every value-touching tool it can call creates only a pending record; turning that into a ledger debit requires a parent co-sign. There is deliberately no grant_cells, commit_exchange, or debit tool.

Surfaces

Commander

iPad app. Balances, missions, the specimen journal, and the voice companion.

Dock

iPhone app. Send allowance, confirm missions, co-sign exchanges, edit canon.

Station API

This service. Tool contract, co-sign broker, task-transform, token minting.

Mission Control

/admin — the web console. Read-only observability over the ledger, plus curated content.

Private service. Not a public product.