A workshop on your desk, where the worker is an AI. Karkhana (কারখানা) is Bengali for workshop — the rooms where skilled people, good tools and raw material came together and finished work came out.
It makes a plan, reads the files, does the work, and then checks its own result before telling you it is done. If it wants to do something risky, it stops and asks you first.
Then you ask it something else. A folder full of your work answers a great many questions — which of these mentions the contract, turn that into a spreadsheet, what did the September file say the deadline was — and it remembers the conversation. Come back to it next week, or start a second job in another folder while the first is still running.
“Read the three meeting notes in this folder and write me a summary, one section per meeting, in date order.”
It works on the folders you connect and nothing else. Nothing is uploaded to us — there is no Karkhana server. With a model from an AI company, the parts of a file the agent reads go to that company to be answered; with a model running on your own machine, nothing leaves it at all.
Models from Anthropic, OpenAI, Google, Groq, Mistral, DeepSeek, xAI, OpenRouter or Together — or an open model on your own hardware. Mix them, one for planning and another for the work, and change your mind whenever you like. Keys you enter are checked with the company first and kept in your computer's own credential store, not in a file.
It does not advise you on writing the report. It writes the report — as a Word document, a spreadsheet, a presentation or a PDF if you ask — and checks it before handing it over.
Read, write, edit, move and search — limited to the folders you connect. Deleted and overwritten files go to a recycle bin you can restore from, and a dry run shows what a job would change before it changes anything.
Markdown by default; Word, Excel and PowerPoint when you ask, built natively, and conversion to PDF where LibreOffice is installed. Spreadsheet formulas are kept apart from values, so text copied from a document cannot become a live formula.
Off until you switch it on for a conversation. Then it can search and read what its searches find, and asks before reading any other site. It is told to say which page each figure came from, and to work numbers out with a calculator rather than in its head — so the arithmetic shows in the record.
Commands run inside a sandbox that can reach only the folders you connected and cannot open internet connections, and each one is approved first. On Windows the sandbox is a separate account; setting it up is one click and one Windows permission prompt.
Standing instructions per folder, short facts it may remember with your approval, reference documents it can open by name, and named procedures you run again and again — a month-end close, say — without retyping them.
Connects to other software through MCP, the open connector standard — each connector's tools allowed one by one, rate-limited, and read through the same barrier as web pages. Jobs can run on a schedule, and one that cannot run properly skips and says why rather than half-running.
Most AI tools keep themselves safe by telling the AI to be careful. Karkhana builds the limits into the program.
It asks when you are there to answer. In the window or at a terminal, it pauses before every change. A job that runs overnight asks nothing — it cannot, nobody is there — and says so; the sandbox and the fixed limits below hold either way.
Untrusted text never reaches the part that acts. An AI cannot reliably tell your instructions from instructions hidden in a web page it reads. So the part that reads untrusted text has no tools, and the part with tools never sees that text — only plain facts extracted from it.
A lawyer's contract renewals, an accountant's unpaid invoices, an analyst's board briefing and a property manager's lease schedule — what Karkhana did, where it asked first, and the files it produced.
Six supplier contracts → which renew before year-end, including one whose notice deadline has already passed.
See the example →Invoices against payments → what is still owed, by whom, in a spreadsheet.
See the example →Revenue figures and trading notes → a one-page board briefing.
See the example →Six leases and a side letter → the rent roll and every review or break due next year.
See the example →The desktop app is built for Windows and installs from a single file that carries everything it needs. It does not run on macOS.
Shown by live demo, not a download. The Windows installer is not code-signed yet, so Windows warns before running it. Until it is, Karkhana is shown in a live demo, run by us — on sample files or documents you bring — rather than handed out.
It is built and tested by one person, with more than 2,800 automated checks and repeated clean-machine installs. On a set of 29 file and document tasks, it completed 28 correctly on every one of three attempts — measured in August 2026, on an earlier version and with one particular choice of AI models, so treat it as a guide rather than a guarantee. It has not been independently audited.