Dooap Shepherd
Exciting to build.
Boring to run.
Describe a finance process and watch Dooap Shepherd build it. Prove it in UAT, promote it to production, and let it run — gated, logged, and reversible.
Dooap Shepherd
press S anywhere
When an invoice arrives from a brand-new vendor, check the bank details against our history and hold anything suspicious. Show me a preview first.
Dooap Shepherd
✓ step types ✓ tenant tools ✓ design validated
I’ll extend Invoice intake with three steps after vendor identification:
AGENT STEP
Screen bank details
gpt-5-mini · tools: Search history
SWITCH STEP
Suspicious?
routes: hold · continue
TRIGGER ACTION
Hold & notify AP
async · tracked with this run
Preview ready. Nothing is created until you approve.
Exciting to build
Describe the outcome. It builds the path.
Dooap Shepherd opens beside your work and builds from what actually exists in your tenant — your step types, models, and tools — not generic guesswork.
Designs & creates Actions
Describe the outcome. It designs the Action from your tenant’s real step types, models, and tools, validates it, and creates it once you approve.
Builds the Apps and tools, too
Point it at an API and it designs the App, inputs, and tools — then tests them against real calls before handing them over.
Improves and troubleshoots
Ask for a sharper prompt or cleaner branching. Open a failed run and get the likely root cause and the fix.
Previews everything first
Anything it would create, change, or run is a preview you approve or ignore. Approved changes are versioned and reversible.
Build & validate
Auto-build all you want.
describe → auto-build → dry-run → evaluate
Runs the real work
Only what you promoted.
gated · logged · reversible
✓ Credentials and secrets never leave production.
Boring to run
Production should be boring.
The fast, generative part lives in a UAT tenant that mirrors production. What reaches production is the version you validated, promoted on purpose.
Build in UAT, not production
Auto-build, dry-run, and evaluate in a UAT tenant that mirrors production — generative speed, nowhere near the real ledger.
Promote what’s proven
Export the finished Action and its Apps, import them into production. What goes live is the version you validated, nothing more.
Secrets stay put
Credentials and secrets never travel in an export. Production’s keys live only in production.
Lands disabled
An imported Action arrives switched off. Run it once, check the result, then enable it.
Memory
It gets to know how you work.
With memory on, Dooap Shepherd remembers your conventions, your priorities, and an Action’s history — so you stop re-explaining where things stand every session.
Stop re-briefing the AI
Your conventions, priorities, and an Action’s history carry from session to session, so you’re not starting cold every time.
The right context, loaded
Tenant, personal, and per-Action memory are available at the start of every chat — it begins already knowing how you work.
Not a black box
Memory is stored as Data Files you can open, inspect, and correct. Nothing hidden, nothing you can’t change.
Memory
.shepherd/
.shepherd/tenant.md
naming conventions · how your org builds Actions
.shepherd/personal.md
your preferences · the goals you return to
.shepherd/actions/invoice-intake.md
what worked, what didn’t, and the fixes
Stored as Data Files you can open and correct — not a black box.
See Dooap Shepherd build an Action live.
Bring a process you’d like to automate. We’ll describe it out loud and watch Dooap Shepherd assemble it.