The Best Home for Your Agent Is in Your Junk Drawer

3 min read5 days ago--Press enter or click to view image in full sizeI wanted a personal agent that did things in the world, so I put it on a server. That is where software goes.Nobody could reach it.No number. No way for a human to start a conversation that did not involve shipping an app and explaining what an MCP server is. An assistant nobody can interrupt is not an assistant.So I started bolting on communications. Twilio account. SMS webhook. A2P messaging campaign. Rented number. Voice gateway.Halfway through the carrier paperwork I noticed I was waiting on an approval committee in order to build a worse version of a device that costs sixty dollars on eBay.So I put the agent on an old Android phone.The entire communications layer is build it. SIM in, provision, done. The agent has an ordinary phone identity by the same mechanism your mother’s phone has one.Nobody installs anything to talk to it. My mother can text it. It can call a business that has no API and speak to whoever answers. We keep building chat interfaces while the most widely deployed one in history sits unused at ten digits.Then it started reading the web better than the server ever had. Cloud agents get 403'd for existing in a datacenter. A phone is behind carrier CGNAT, sharing an address with thousands of people paying phone bills. That clears the blunt address-range filter and nothing else, and it only holds because this is one person’s device at human volume on a connection I pay for.Which created a worse problem. I had handed a language model SMS, calls, contacts, location, camera, and screen capture, on a device sitting in my house.So authorization went below the model. The model proposes; the phone decides. Callers are scoped as owner, known, or unknown. Camera, microphone, and screen capture are stripped from background message context and denied again at the tool router. Keys live in Keystore. Nothing asks the model to police itself, because the failure mode here is a camera.Android then refuses to run any of it. Doze, OEM battery killers, thermal limits. So the runtime is a visible foreground service with boot recovery and resumable checkpoints. Mitigation, not a cure, which is why this belongs on a dedicated phone and not your daily driver.Dark Lord is the prototype. No-root Kotlin, Galaxy Z Flip3, MCP and skills.One more thing. The phone is folded shut in my pocket. I hold the side button, say what I want, and it runs: every tool, every radio, every sensor, the whole memory. No unlock, no app, no laptop. The agent is not somewhere I connect to. It is in my pocket, and it comes with me.The Mac Mini is the better computer. The phone is the better body.