Signed agent documentation

Shadow is a user-directed assistant that operates the browser to get things done.

This page explains Shadow's purpose, behavior, ownership, and signed-agent verification details for websites, security teams, and bot directories.

Shadow signed agent

What Shadow Is

Shadow is a user-directed personal AI assistant that carries out practical online tasks in a real browser.

Shadow helps people get things done on the web through a conversational WhatsApp interface. A user can ask Shadow to research options, compare services, fill forms, navigate customer portals, make bookings, prepare checkouts, or manage other everyday online workflows.

Unlike a chatbot that only gives advice, Shadow is built for execution. It can operate a secure browser session, read pages, follow user instructions, and move through normal website flows on the user's behalf. The goal is to save people time on web tasks that are repetitive, fragmented, or difficult to complete on a phone.

Shadow acts as a signed agent: its activity is initiated by an end user, scoped to that user's request, and cryptographically signed so services can distinguish it from anonymous or deceptive automated traffic.

Shadow signed agent

Purpose And User Benefit

Shadow exists to give people a capable assistant for real online errands while keeping them in control.

The purpose of Shadow is to be an advanced execution-based personal assistant for browser tasks. Users delegate goals such as finding a suitable flight, comparing ticket options, checking availability, submitting a form, handling a renewal, or navigating an account flow.

Shadow is designed for legitimate user convenience. It does not crawl the web for bulk data collection, impersonate people without their direction, create unsolicited traffic, or attempt to evade a site's rules. Its browsing is tied to individual user requests and ordinary consumer workflows.

When a task reaches a sensitive decision, payment, login, or other high-impact moment, Shadow can pause and ask the user for confirmation or for secure input rather than making an irreversible choice silently.

Shadow signed agent

How Shadow Operates

Shadow uses browser automation to complete normal website flows for one user task at a time.

Shadow opens a managed browser session and interacts with websites in the same broad way a person would: reading page content, clicking controls, entering user-provided details, and waiting for pages to update.

The assistant uses persistent browser sessions where useful, so a user can continue long-running workflows without starting from scratch. It can also ask follow-up questions when instructions are incomplete or when a page requires a choice that should belong to the user.

Shadow's browser requests are signed with Web Bot Auth. The public key directory for those signatures is available at https://hal-e.io/.well-known/http-message-signatures-directory.

Shadow signed agent

Boundaries And Safety

Shadow is meant for user-authorized tasks, not undisclosed scraping, abuse, or bypassing user consent.

Shadow should only act in response to a user's request or an expected continuation of that request. It should respect website access controls, rate limits, and safety checks.

Shadow does not ask users to send passwords or payment details in ordinary chat. For sensitive entry steps, Shadow uses secure handoff flows so credentials and card details can be entered into the live browser without being stored in the assistant conversation.

The assistant may decline or stop tasks that appear unsafe, illegal, deceptive, abusive, or outside the user's authority. Users remain responsible for the actions they ask Shadow to take on their behalf.

Shadow signed agent

Identity And Contact

Shadow is operated by Sophon Labs, Inc. and identifies itself as a signed agent.

Shadow is operated by Sophon Labs, Inc. The public service website is https://hal-e.io.

Signed-agent verification directory: https://hal-e.io/.well-known/http-message-signatures-directory.

For questions about Shadow, its policies, or its signed-agent behavior, contact help@hal-e.io.