TokenFuse
Design direction · iOS 26

Hold the breaker on your agents.

A command deck for TokenFuse. Watch every agent's burn rate live, get hit the second one runs hot — and pull the kill switch, signed on-device by the Secure Enclave. One instrument, carried across every screen: the fuse — cool while you're under budget, warming to amber, red at the cap.

Palette · function, not decoration

ink
panel
within
warming
kill
iris
spent $18.30cap $25.00 · 73%

Type · the number is the hero

0.42$ / min
$18.30 / $25.00
run 7f3a2b · claude-opus-4-8 · step 41
SF Pro Display · tabularSF Mono

The fuse · one motif, every screen

list row34% · within
run detail73% · warming
Dynamic Island104% · over cap
9:41

Runs

acme · 3 gateways · live
Fleet burn rate
0.42$/min ▲ 2.1× baseline
spent today $18.30caps $25.00 · 73%
3 activesort · burn
O
7f3a2bover cap $1.90/m
opus-4-8 · step 41$26.10 / $25.00
S
b12e90near cap $0.31/m
sonnet · step 18$8.40 / $10.00
H
4c07aflive $0.06/m
haiku · step 6$1.20 / $8.00
Runs
Budgets
Alerts
Device
Screen 01
Runs · the deck
Summary before detail: fleet burn rate up top, then every run as a live fuse. The one over cap surfaces itself — ember, pulsing, sorted to the top.
9:41
‹ Runsrun 7f3a2b over cap
Spent
$26.10
of $25.00 cap · 104% · burning $1.90/min
Burn · last hournow $1.90/m
Steps
41
Calls
312
Model
opus-4-8
Slide to arm kill
Kill is signed by Secure Enclave · Face ID
Screen 02
Run · pull the breaker
The kill isn't a button — it's a physical breaker. Slide to arm, Face ID to fire. The request is signed on-device; the secret never leaves the phone. Set-budget lives one tap away.
9:41
Dynamic Island · compact
1.90$/m 104%
Long-press · expanded
run 7f3a2b · opus-4-8over cap
$26.10 of $25.00
Lock Screen · Live Activity
TokenFusenow
$26.10 / $25.00 $1.90/m
Screen 03
Always in view
The burn rate lives in the Dynamic Island and on the Lock Screen — pushed from the server every few seconds. You don't open the app to know an agent's running hot; you glance.
9:41
Pair this iPhone

Scan the code on your dashboard

A one-time code links this device to your org. It expires in 10 minutes.

Keys never leave this iPhone. A signing key is generated in the Secure Enclave — every kill is signed here, so a stolen token alone can't stop your agents.
Screen 04
Pairing · trust on-device
The security story, made concrete at first run. A one-time QR pairs the phone; the Enclave keypair is what actually authorizes destructive actions.
9:41
9:41
Thursday, 3 July
Tap a budget alert → Face ID → killed, without unlocking to the app.
Screen 05
Alerts that mean act
The server pushes the moment a run crosses its cap or gets killed. Deduped, specific, and actionable — a budget alert can go straight to a Face-ID kill.
Type SF Pro Display / Text · SF Mono Motion live burn tick · breaker drag · scan sweep — all honor reduced-motion Semantics mint within · amber warming · ember at the cap; iris = interactive only Next react to the direction → then B1 scaffolds this in SwiftUI