E-DEN · research report

Does www.ruby.im describe how the JayAI project actually runs today?

Question 1 · owner jay · open · generated 2026-10-22 01:42 UTC

Scope. Public pages of www.ruby.im and what its public endpoints do, captured 2026-10-22. No repository files (no observe.repo grant).

Purpose. Test E-DEN end to end on a real question; find pages that have fallen behind the running system.

Every claim cites numbered sources, whose exact captured passages are listed at the end, or is marked inference with its reasoning.

What is established

The site's self-hosted claim holds by its own definition: open-source Caddy, run by the project, on a rented DigitalOcean server. finding 1

Evidence: 3 supporting sources from 1 independent origin; 1 inference; 3 sources not yet graded.

Limitations: Rests on the site's own pages; nothing here independently checks who runs the server.

  • The home page describes the project as Ruby first, open and self-hosted. [1]
  • Own your stack counts open-source software run on someone else's hardware as acceptable, alongside proprietary services behind an adapter. [2]
  • Since 2026-10-18 the sites are served by Caddy on a DigitalOcean server instead of ngrok. [3]
  • Serving through open-source Caddy on a rented DigitalOcean server fits the site's own definition of self-hosted. inference: Own your stack accepts open source on hardware someone else runs; Caddy is open source and the project administers it, so the edge is self-run on rented hardware, not a vendor platform.

The Observability page's description of the dashboard sign-in is out of date. finding 2

Evidence: 3 supporting sources from 1 independent origin; 1 inference; 3 sources not yet graded.

Limitations: The capture of auth.ruby.im shows only the portal's address and a JavaScript notice, not which sign-in system it is; the link to ngrok's Google sign-in is an inference.

  • The Observability page says the live dashboard asks for an approved Google sign-in, then a Grafana login. [4]
  • The Google sign-in arrived with the ngrok setup on 2026-10-09, and ngrok was replaced on 2026-10-18. [3]
  • Asking for www.ruby.im/grafana/ today ends at a separate sign-in portal on auth.ruby.im, not at Google. [5]
  • The Observability page's sign-in description is out of date. inference: The page still names Google sign-in, which came with ngrok; ngrok was replaced, and /grafana now redirects to auth.ruby.im.

The Services page's statement that nothing is signed up yet is out of date. finding 3

Evidence: 2 supporting sources from 1 independent origin; 1 inference; 2 sources not yet graded.

Limitations: No page names the SMS provider; that one is signed up is inferred from a working number.

  • The Services page says none of its outside services is signed up for yet. [6]
  • A text-message sign-up with double opt-in has run on a ruby.im phone number since 2026-10-18. [3]
  • So at least an SMS provider is signed up, and the Services page's 'nothing signed up yet' is out of date. inference: A working phone number that answers texts needs an account with an SMS carrier or provider, which is one of the services that page covers.

What is still unknown

Whether the other 30-odd pages are current. finding 4

Evidence: none recorded yet.

Limitations: Only 7 pages were captured in this run.

Hypotheses

Worth testing next

Sources

  1. ruby.im retrieved 2026-10-22 by claude-code · sha256 36a0bb2f886f · grade not yet graded
    “Ruby first, open and self-hosted” supports claim 1
  2. Own Your Stack · ruby.im retrieved 2026-10-22 by claude-code · sha256 9aa44a7a572c · grade not yet graded
    “Open source, hosted by someone else: fine, because we can take it home later.” supports claim 2
    “Proprietary, behind an adapter: fine when it clearly earns its place and we can swap it out.” supports claim 2
  3. Changelog · www.ruby.im retrieved 2026-10-22 by claude-code · sha256 1f10425f0e19 · grade not yet graded
    “Now served through self-hosted edge (Caddy on DigitalOcean) instead of ngrok” supports claim 3
    “Linked the live Grafana dashboard at /grafana, behind Google sign-in and a Grafana login” supports claim 6
    “Now served through self-hosted edge (Caddy on DigitalOcean) instead of ngrok” supports claim 6
    “Added a text-message sign-up page with double opt-in” supports claim 10
    “Text JOIN to the ruby.im number to get the SMS sign-up link” supports claim 10
  4. Observability · ruby.im retrieved 2026-10-22 by claude-code · sha256 5d4e070bbd31 · grade not yet graded
    “The live dashboard is private: it asks for an approved Google sign-in, then a Grafana login.” supports claim 5
  5. https://auth.ruby.im/?rd=https%3A%2F%2Fwww.ruby.im%2Fgrafana%2F&rm=GET retrieved 2026-10-22 by claude-code · sha256 3db9f1acb561 · grade not yet graded
    “You need to enable JavaScript to run this app.” supports claim 7
  6. Services · ruby.im retrieved 2026-10-22 by claude-code · sha256 e4569d82820d · grade not yet graded
    “This page describes the approach; nothing here is signed up for yet.” supports claim 9

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.