I run several AIs in parallel — Claude, Grok, ChatGPT, Gemini — and I feed the wins to my main agent to reality-check against my actual repos before anything ships. This week Grok built me a slick demo of an "SML Desk": a command-center web app for my whole operation.
There was one problem. I couldn't ship it.
The source was stuck behind x.ai auth. The "video clips" it linked to were sandbox-only files that didn't exist in production. The data was demo-shaped, not real. It looked done and wasn't.
So I rebuilt it clean. Same idea, zero borrowed code, wired to my real stack. It's live now at desk.scriptmasterlabs.com — a web app, no install, no signup. Here's what that rebuild actually took.
What the Desk is
One page, six tabs, all client-side:
- Desk — the command surface: my live x402 API directory (23 pay-per-call endpoints, every one priced in USDC)
- Stack — the product stack: high-ticket courses, Squeeze Wire, Kindle editions, with verified prices
- Directory — every canonical page on the domain
- Agents — the agent tools: SMLSheets, Micro-Series Studio, the open-seo fork
- Ledger — claim receipts. Every factual claim on the page carries a receipt
- Shelf — 50 research PDFs, loaded live from a JSON catalog
The design brief I gave my agent: cream editorial, like a banker's desk. It kept my branding intact — dark/neon is the main site's identity, but the Desk is its own room.
The part that actually mattered: every number verified
My trust rule is simple: every number sourced or it doesn't reach the user. A demo can fake an API price. A shipped product can't. So the rebuild wired every tab to real sources:
- The 23 x402 paths were verified live (HTTP 200) before they went in the directory — not copied from a spec doc
- The 50 PDFs load from the live
research-catalog.json with CORS opened for the desk subdomain
- Product prices were re-checked against the live storefronts, not admin panels
The Shelf tab is the cleanest example. It fetches the catalog at runtime:
fetch('https://scriptmasterlabs.com/research-catalog.json')
.then(r => r.json())
.then(catalog => renderShelf(catalog));
That only works because the main domain serves the catalog with Access-Control-Allow-Origin: *. Small detail, the kind the demo never had to solve.
The DNS saga (the demo never deploys)
This is the part nobody warns you about with subdomains. desk.scriptmasterlabs.com 404'd on launch day. The debugging went:
- Assumed DNS was Cloudflare — wrong. The registrar is Porkbun, and Porkbun is also the authoritative nameserver. The Cloudflare headers I was seeing came from Render's own ingress edge.
- Found the desk subdomain CNAME'd to
proxy-v2.appdeploy.ai — a third-party Caddy I didn't recognize and never set up. Replaced with an A record to Render's ingress (216.24.57.1), same as the apex.
- Still 404 — because Render won't serve TLS for a custom domain until you add it on the service. That cost $0.25/month (included domains exhausted). Accepted, cert issued, live.
Total: about 40 minutes of "the demo worked on my machine" energy, except the machine was someone else's sandbox.
Host-based routing, one server
The whole domain (apex + desk subdomain) runs off one Node server — frontdoor/server.mjs. The desk needed host routing added:
const host = req.headers.host || '';
if (host.startsWith('desk.')) {
// serve desk/index.html, desk-scoped static paths
} else {
// normal apex routing
}
One repo, one deploy, two sites. The GitLab push auto-deploys via Render. Commit 2fdca03 if you want the shape of it.
The thesis: evidence before the agent spends
The Desk's tagline is "Evidence before the agent spends." That's the whole business thesis: AI agents are about to spend real money on the internet via protocols like x402, and somebody has to be the desk where the evidence gets checked first — prices verified, claims receipted, endpoints machine-readable.
It's the same decision-gate I run everywhere: a model with ≥0.80 confidence auto-pays, 0.50–0.79 asks, below 0.50 escalates. The Desk is where a human or agent can check the evidence before the gate fires.
What I'd do differently
Ship the boring parts first. The demo had a "Clip" tab with video links that pointed at nothing — I cut it from v1 rather than fake it. It comes back when I have real video files. A tab that loads is worth more than a tab that impresses.
Live: https://desk.scriptmasterlabs.com —#FREE web app, runs in the browser, nothing to install.
Built by ScriptMasterLabs Publishing, a service-disabled veteran-owned small business. Every number on the page was verified live before it shipped. The demo looked done. This one is.
