Build apps from a document, not a terminal.

deffo is a guided, PRD-first app builder. A grill-me chat turns your idea into a short product requirements doc, a connected task graph is derived from it, and agents execute the work against machine-checkable acceptance criteria — while live status flows straight back into the PRD.

Get the app See how it works Local-first · Postgres · runs on your machine
01 — How it works

From raw idea to running software in one loop.

No terminal views, no endless chat logs. You work on a document; the system does the rest and reports back into the same document.

1

Grill the idea

A chat that interrogates your idea — what it is, who it's for, what done means — and drafts a shortform PRD you can actually read in five minutes.

2

Derive the task graph

The PRD unfolds into a connected graph of epics → nodes → atoms. Every task, setting, and dependency links back to the document it came from.

3

Agents execute atoms

Autonomous agents pick up atoms that are ready — unmet dependencies self-block — and work in isolated git worktrees until every acceptance criterion passes.

4

Status flows back

Completion updates the PRD automatically. Edit the PRD and the work updates too — it's a two-way street, not a one-shot export.

02 — Why it's different

Done means verified. Never a ticked checkbox.

Generation and verification are separate workers — no implementer grades its own work. Everything else follows from that one rule.

Verdicts

Acceptance criteria, not instructions

Atoms carry machine-checkable criteria. Agents loop until they pass — and “done” is set only by a passed verdict, never by a claim.

Evidence

Diffs, not terminal dumps

Verification is a first-class surface: diffs, test results, and evidence cards you can skim — not a raw scroll of agent output to excavate.

Control

An autonomy slider per task

Ask me / edit with approval / fully autonomous — a property of each task, not a global mode you forget you set.

Memory

A lossless journal

Every state change is an append-only event. The PRD, board, and status views are pure functions of the journal — replayable, auditable, never lost.

Safety

Secrets by name, never by value

deffo stores secret names, domains, and policies. Credentials are injected at the transport layer through a proxy — the server never sees a value.

Speed

Deterministic where it matters

Scheduling, dependency blocking, status derivation, git commits — all plain code. LLMs are reserved for judgment: planning, implementing, reviewing.

03 — The loop

The document is the interface.

Edit the PRD
→
Work updates
→
Agents build
→
Verdicts pass
↻
04 — Under the hood

Opinionated on purpose.

One node store PRD, flow, and board are views of the same node tree — not separate silos.
Accepted is immutable Changes flow through reviewed proposals. No silent mutations, ever.
Agents under constitution Every agent run carries the ponytail + Karpathy rules: smallest change that works, verify, never trust claims.
Local-first Runs on your machine via docker compose; deploys to your own Postgres in the cloud. One React codebase — web, mobile, and a Tauri desktop app.

Point it at an idea. Watch the PRD fill itself in.

deffo is early — but the guided build loop already runs end to end: chat → PRD → task graph → verified atoms.

Get the app

deffo is in private beta. Leave your email and we’ll send an invite when a spot opens.