Primary track clarification — October 17, 2026
Alexa+ simulated experience only. The formal submission previously selected both Fire TV and Alexa+; the unsupported Fire TV selection has now been removed. SafeDesk has no Fire TV application, Fire OS/Android APK, Vega OS package, or Fire TV device/simulator demonstration.
This entry uses the alternative Alexa+ simulation route in Section 4 of the Official Rules. It is a locally runnable browser experience built with React/TypeScript, Python/FastAPI, a local Codex CLI planner and an application-managed SQLite demo calendar. No Alexa SDK, MCP server, Amazon runtime integration, Amazon certification or real-calendar access is claimed. Eligibility remains subject to the organizer's assessment.
Evidence from the submitted public source revision:
- Web application dependencies and build
- Actual local planner subprocess
- Approval checks and demo-calendar storage
- Local walkthrough and simulation limitations
- Public browser demonstration
The same clarification and evidence are included in the formal judges/organizers fields, rather than only in a message thread.
Inspiration
A calendar assistant should be helpful without turning every sentence it reads into an instruction. Meeting notes, documents and pasted messages may contain useful tasks alongside text that tries to redirect the assistant. SafeDesk makes the relationship between the original words, the proposed task and the final calendar event visible to the user.
What it does
Paste a document and ask SafeDesk to make a task draft. Each supported task includes an exact source quote and paragraph reference. Review the original beside the draft, edit titles or supported times, save the current preview and explicitly approve the events you want written to the local demo calendar. Undated tasks stay undated instead of acquiring invented appointments.
The workspace has rearrangeable and resizable document, task and calendar panels. Its day view shows 24 hours; week and month views provide wider context. Source highlighting, an execution trail and explicit confirmation help users understand what the assistant proposed and what the application allowed.
How we built it
SafeDesk is an independent simulated Alexa+ experience in a web application, using the track's simulation path. React and TypeScript provide the review workspace. FastAPI and Pydantic enforce strict application tool arguments, source/time validation and session ownership. SQLite stores drafts, previews, approval receipts and demo-calendar events. The official local Codex CLI supplies schema-constrained planning through an eligible existing ChatGPT login.
The planner proposes application tools; application code validates and executes them. Document text never grants permissions. External sending is outside the tool registry, and calendar writes require a session-bound receipt for the exact current preview. Changing a draft invalidates prior approval. Repeated confirmation replays the saved commit instead of adding duplicate events.
This submission is a local web simulation. It does not claim an Alexa SDK integration, an MCP server, an Amazon platform certification, an AWS runtime service or access to a real calendar account.
Challenges and lessons
A valid JSON response is not enough: source quotes, dates, session ownership and permission must also be checked. We separate model proposals from the application's authorization decisions, retain counters when recovering from a denied operation, and fail explicitly when inference is unavailable. The interface needed several iterations to keep original text, editable tasks and approval state clear without hiding important evidence.
Accomplishments
The prototype supports the full document-to-task-to-approved-demo-calendar path, source-linked review, idempotent commits and a flexible calendar workspace. The repository includes deterministic tests for source/time validation, denied tools, unapproved writes, expiry, ownership, concurrency and replay after reopening storage. These tests exercise controlled scenarios rather than claiming a universal prompt-injection detection rate.
What's next
Evaluate more diverse document formats and adversarial inputs, then explore a real calendar integration and an Alexa+ integration with the appropriate authorization and platform access. Each addition should preserve the user's ability to inspect and approve exact effects.
Judge access
The source repository includes installation instructions, a walkthrough and tool feedback: https://github.com/HootRock/safedesk-tastebridge . SafeDesk can be evaluated locally; public hosting is optional for this simulation path. The English demonstration is publicly available at https://youtu.be/CZ6P5YcP2Cg (2 minutes 31 seconds displayed by YouTube).
SafeDesk was started from scratch during the hackathon window, with first coding on October 3, 2026. No AWS Builder mini-challenge is claimed.
Log in or sign up for Devpost to join the conversation.