An Encrypted Atelier · Wyoming, USA

We fix it.
We never see it.

Moreslot is an encrypted IT atelier. Firewalls, server migrations, control panels, scripts, databases — commissioned by chat, completed by an AI agent inside a sealed, three-layer cipher. Old-world trust. New-world speed.

I · The Wire II · The Key III · The Seal
Response window
30 min — 24 hours
Architecture
Zero-knowledge by design
Registered
Wyoming, USA
Operated by
AI agent, human-overseen
§ I  ·  The Architecture

The Triad.

Three independent locks. Three independent secrets. None of which Moreslot — or any single Moreslot system — holds in full.

I
Transport Layer

The Wire

A WireGuard-encrypted mesh tunnel. All SSH, console, and control traffic transits a private overlay between your server and our agent. Your infrastructure is never exposed to the public internet during a commission.

Protocol
WireGuard
Cipher
ChaCha20-Poly1305
Key rotation
Per session
II
Identity Layer

The Key

A sovereign master key generated client-side and bound to your account. Hardware-backed where available. Moreslot servers never hold the plaintext — only encrypted envelopes that we cannot open. Lose it, lose access. By design.

Generated
Client-side
Storage
Hardware-bound
Zero-knowledge
Yes
III
M
Communication Layer

The Seal

Every message between you and your AI agent is sealed with your Key before transit. The agent reads plaintext only inside an ephemeral enclave that wipes after each session. Moreslot staff, support, and even our own system administrators cannot read the conversation.

Encryption
End-to-end
Enclave
Ephemeral, wiping
Forward secrecy
Per message
To compromise a Moreslot commission, an attacker — or a Moreslot insider — would have to break all three independent layers with three independent secrets. None held by the same party. None at the same time. That is the trust story, by construction.
§ II  ·  The Repertoire

Work commissioned at the Atelier.

Every commission completes in thirty minutes to twenty-four hours. If we can't, you don't pay.

01 — Firewalls

Firewall Configurations

iptables, ufw, pf, Cloudflare WAF, FortiGate. Audit, lock-down, allow-list, and document.

02 — Networks

WireGuard & Site-to-Site VPN

Aegis Bridge mesh networks. Multi-office, remote-worker, branch tunnelling.

03 — Migrations

Server & Site Migrations

WordPress, Laravel, Django, Node, static sites. Zero downtime. Full encrypted backup before, after.

04 — Databases

Database Recovery & Tuning

MySQL, MariaDB, PostgreSQL, MSSQL. Restore from corrupted dumps. Optimise slow queries.

05 — Panels

Control-Panel Setup

CloudPanel, cPanel, Plesk, DirectAdmin, Enhance. Hardening, SSL automation, mail.

06 — Software

Software Installs & Scripts

Any package on Windows, Linux, macOS. Custom shell, Python, PHP, Node scripts. Tested visually before handover.

07 — Domains

DNS & SSL Troubleshooting

Cloudflare, Route 53, NS1, BIND. Let's Encrypt, ZeroSSL, commercial certs. Mail-routing diagnostics.

08 — Remote

Remote Desktop & Office Setup

Windows Remote Desktop, AnyDesk, RustDesk over Aegis. Printer, share, AD config.

09 — Security

Hardening & Audits

SSH key-only access, fail2ban, intrusion logs, port scans, leaked-credential checks.

§ III  ·  The Procedure

How a Commission Flows.

Six steps, in order. Each step is automatic, observable to you, and recorded in your sealed log.

i.
Step One

Request

You open a commission via the Bridge — describe the job in plain English, paste SSH details if needed, attach context. No phone calls. No tickets in queues.

ii.
Step Two

Key issued

If this is your first commission, your sovereign Key is generated client-side. Future commissions reuse the same Key. Moreslot stores only its public envelope.

iii.
Step Three

Agent activated

An AI agent is provisioned inside an ephemeral enclave. It opens an Aegis Wire to your infrastructure. The Seal between you and the agent is established.

iv.
Step Four

Work executed

The agent works through the commission — running commands, editing config, testing visually, backing up at each milestone. You can watch, chat, redirect, or step away.

v.
Step Five

Sealed report

On completion, the agent issues a wax-seal receipt — a cryptographically verifiable record of what was changed, when, and why. Encrypted with your Key. Decryptable only by you.

vi.
Step Six

Vault backup

A full encrypted snapshot of the affected systems lands in your Vault. The enclave wipes. The agent forgets. The commission closes.

§ IV  ·  The Vault

What goes in the Vault stays in the Vault — and we can't read it either.

Every commission produces an encrypted snapshot of the work performed. Your Vault is a per-customer encrypted storage room, sealed with your Key, replicated across geographies. You own it. You can export it. You can delete it. We administrate the vault but never the contents.

  • Sovereign-key encryption. AES-256 outer, ChaCha20 inner, your Key in between. We can't open it without you.
  • Exportable. One command. Tar, encrypted, hashed. Take it anywhere.
  • Verifiable. Every Vault object carries a wax-seal signature. Tampering is provable.
  • Geo-redundant. Replicated across two regions — encrypted at rest in both.
  • Standards-aligned. GDPR, HIPAA, SOC 2 Type II workflows compatible.
§ V  ·  The Atelier

Three ways to commission.

A single fix, an ongoing house account, or a full retainer. Choose by the shape of the work, not the size of the wallet.

I
One-off Commission
Single Commission
$49
one-time · per job
  • One commission · 30 min to 24 hour completion
  • Encrypted SSH session · single Aegis Wire
  • Pre & post-job Vault snapshot
  • Seven days of email follow-up via the Seal
  • Wax-seal receipt & signed work log
Commission this →
III
For Operating Businesses
Atelier Retainer
$799
per month · annual preferred
  • Everything in House Account
  • Up to 25 servers under the Aegis
  • Site-to-Site Aegis Bridge — multi-location VPN mesh
  • 24/7 monitoring & auto-resolution
  • Dedicated Sealed Channel · 30-minute SLA
  • Custom AI agent training on your stack
  • SOC 2 / GDPR / HIPAA compliance reports
Speak to the Atelier →
§ VI  ·  The Ecosystem

Beyond support.

Moreslot is building a small constellation of products. Each one is operated through the same Triad. Each one writes to your Vault. Each one speaks the same encrypted protocol.

Live

Moreslot Aegis

WireGuard mesh + managed firewall. Point-to-point and site-to-site. Bridge edition for multi-location offices.

Live

Moreslot Vault

Encrypted backup archive. Your data, your Key. Exportable, verifiable, geo-redundant.

Live

Moreslot Bridge

The AI agent chat console. Open commissions, watch work, retrieve sealed reports.

In the Atelier

Moreslot Atlas

Encrypted website & storefront CMS. The fast successor to WordPress, built on the same Triad.

In the Atelier

Moreslot Ledger

Business ERP — invoicing, payroll, inventory. Encrypted by default. Built for small companies, not enterprises.

In the Atelier

Moreslot Forge

Workflow & automation runner. Connect anything. Encrypted handoffs between systems.

§ VII  ·  Witnessed Work

Read by founders. Trusted by operators.

A small selection of letters from those who have commissioned the Atelier.

The migration took ninety minutes. The wax-seal receipt is the calmest piece of paperwork I have ever received from an IT job.
— Founder, agency, Denver CO
I sent an SSH key and a sentence. I got back a working firewall and a Vault link. I am still slightly suspicious of how good this was.
— Operations lead, SaaS, Lisbon
My old IT consultant once took eleven days to install a backup script. Moreslot did it before I finished my coffee.
— Solo founder, e-commerce
What I appreciate most is that no one at Moreslot can read my database. That is the entire product, really. Everything else is a bonus.
— CTO, fintech, undisclosed
Supported platforms & stacks
WordPress Laravel Django Node.js Next.js CloudPanel Plesk cPanel Enhance AWS DigitalOcean OVH Cloudflare FortiGate MikroTik WireGuard MariaDB PostgreSQL
§ VIII  ·  The Glossary

The Atelier vocabulary.

A short dictionary of terms used at Moreslot. Adopted from old workshops, telegraph rooms, and Wyoming notaries.

Aegis
The Moreslot firewall + WireGuard mesh product. From the Greek for shield.
Atelier
The Moreslot workshop. Where commissions are received and executed.
Bridge
The customer chat console. Also: the Site-to-Site edition of Aegis.
Commission
A single unit of work. Replaces the word "ticket."
House Account
An ongoing monthly relationship. Tier II of the Atelier.
Key
Your sovereign encryption key. Generated by you. Held by no one else.
Seal
The end-to-end encrypted channel between you and your AI agent.
Triad
The three-layer security architecture: Wire, Key, Seal.
Vault
Your per-customer encrypted backup storage.
Wire
The encrypted WireGuard transport tunnel.
Witness Print
The cryptographic signature attached to every completed commission.
Cipher Letter
The Moreslot monthly newsletter. Letterpress in spirit, electronic in delivery.
§ IX  ·  Questions

Plainly answered.

The questions we receive most often, in the order we receive them.

Is this really run by AI, or is it a person pretending?

It is genuinely an AI agent — operated, audited, and trained by Moreslot engineers. Each agent runs inside an ephemeral enclave that wipes after every commission, so it cannot remember your data between jobs. A human reviews edge-case work but cannot read your sealed chat without your Key.

What if I lose my Key?

If you lose your Key, Moreslot cannot recover your Vault — that is the zero-knowledge property working as intended. We strongly recommend exporting your Key to a hardware authenticator or sealing a paper copy with a notary. Account access can still be restored through normal email recovery, but encrypted Vault contents will be unreadable.

Where is Moreslot legally based?

Moreslot LLC is registered in the State of Wyoming, USA. Wyoming was chosen for its strong LLC privacy law, its asset-protection statutes, and its long tradition of taking small-business confidentiality seriously.

Can I cancel any time?

Yes. House Account and Atelier Retainer can be cancelled at any time, effective the next billing cycle. On cancellation, you can export your Vault for 90 days. After that, it is permanently sealed.

What can the AI agent NOT do?

It will not run destructive operations without an explicit confirmation. It will not push to main on production repositories without your approval. It will not access systems whose credentials you did not provide. It will not act on emails it cannot cryptographically verify came from you.

Do you publish a security disclosure policy?

Yes. Report vulnerabilities to security@moreslot.com — encrypted with our published PGP key. Good-faith research is rewarded.

Open a Commission

Send a sentence. We'll handle the rest.

No phone trees. No tickets in queue. Describe the work in plain English. We'll respond within the window for your tier — or sooner.

Single Commission
$49 · response in 24 hours
House Account
$199/mo · response in 2 hours
Atelier Retainer
$799/mo · response in 30 minutes
Direct line
info@moreslot.com

Describe the commission.

Encrypted in transit. Sealed on arrival.

Commission received.
Your message has been sealed and dispatched to the Atelier. We will respond to your email within the window for your selected tier. — Moreslot LLC