Penny, the Pacific Avenue Bowl booking concierge

Penny is the storefront host. She captures every inquiry at any hour, builds an itemized quote from human-confirmed prices, and STAGES it for a person to review. She never confirms a booking, never charges, and never sends on her own.

The fail-closed loop

Capture → Qualify (hot-route large corporate/buyout/fundraiser to a human) → Quote (staged) → [HUMAN APPROVE TAP] → Deposit link (fail-closed: no Stripe key means no link and nothing charged) → Confirm and remind (held until the sender is provisioned) → Review-ask → Reactivate. Every arrow that moves money or sends a message passes through the human gate.

Try the engine (CLI)

From the repo root:

node angel/bin/penny.mjs demo node angel/bin/penny.mjs stage-event --occasion birthday --date 2026-08-01 --window evening --headcount 18 --lanes 4 --food classic --addons glow,shoes --name "Guest" --phone "555-0100" --email guest@example.com node angel/bin/penny.mjs queue node angel/bin/penny.mjs approve <request-id> (fail-closed money rail: no key -> no link -> nothing charged)

Isolation

Pacific Avenue Bowl is its own tenant (slug pacific-bowl) with its own queue and placeholder sending identity. Penny never reads or writes another family's config, queue, number, or secret, and never sends from a shared number.