Lumen
◐ a static file
Yjust you

This is a static HTML file.

No backend. No database. No accounts. About fifteen lines and one <script>. Prove — one at a time — that it's secretly something a static file has no business being.

lumen.example — the page
a little site

Talk to this page.

The panel on the right is a real AI, embedded in one line. Ask it to redesign this — the whole look — and it does it here, live, for everyone in the room at once.

try asking →
↻ synced to everyone in the room
✦ Site assistant embedded · 1 line
✓
Static
Just a file
— view the source →
✓
Alive
A real AI
— ask it to redesign the page
✓
Shared
A room, not a bot
— invite someone in
✓
Persistent
Keeps going
— reload; it's still here
✓
Private
Sealed to you
— ask “is this private?”
static page + AI + app + live collaboration + persistence + privacy = one <script> 
<!-- the whole integration. no build, no backend. -->
<div id="ai"></div>

<script src="https://witbitz.chat/embed.js"></script>
<script>
  Witbitz.embed('#ai', {
    // your function becomes the AI's tool:
    tools: { apply_design: d => paint(d.design) },
    // shared room state → runs for everyone, and persists:
    onState: s => paint(s.design),
    invite: '/lumen#join={link}'
  })
</script>
That's the "backend." Everything else on this page is demo chrome — the scoreboard, the copy. The AI, the shared room, the live sync across everyone, the persistence, and the sealing that keeps this page (and Witbitz) from reading the conversation, are those lines.

🔒 Who can read this room?

The honest answer — checkable, not a promise. Picture this embedded on a real site — say lumen.ai:

🚫
Not the site's trackers. The room lives in a cross-origin iframe, so lumen.ai's ads, analytics and other scripts can't reach into it — they can't read a word.
🚫
Not Witbitz. Sealed to the key that lives in your link and on your device; the operator only ever stores ciphertext it can't open — and that's verifiable (egress-locked, signed, reproducible). True even though Witbitz hosts everything else for the app.
🚫
Not even lumen.ai. The developer who built and hosts this can't read a word. Their page is egress-locked — it can only reach Witbitz (which is content-blind), so nothing on it (not even the tool calls it declared) can be sent to a lumen.ai server or anywhere else. Not a trust-me: read the page's CSP.
⚠︎
The model — per turn. The AI replies through a model, so that one party sees a message in order to answer. Zero third party? Point it at your own / self-hosted model — same room, sealed end to end.
Check the trust claims →