Who holds the handle.
A robot is a tool: the most capable tool a home has ever contained. Every tool has a handle, and the question that decides whether embodied AI belongs in family life is not what the tool can do. It is who holds the handle. Our answer is built into the architecture, not written into a policy: the household holds it.
A wrong answer on a screen is a typo. A wrong action in a kitchen is an injury.
That difference is the whole product. Chat assistants could afford to be occasionally wrong; a machine that acts around the people you love cannot. So dependability is not a feature of Cereal. It is the thing being sold, and everything on this page is how it is manufactured.
Three ways the household stays in control.
Named permissions
You grant sources and rooms one by one: this camera, not that bedroom; the front door, never the stove. Consequential actions require approval from a named person, and a revoked grant is honored by the state itself, not by a settings page.
Site-local memory
The mind of your home lives with your household, not on a manufacturer's cloud. Memory is inspectable, editable, deletable, and portable across bodies. Raw home data stays home.
Fleet learning, bounded
The fleet improves the fleet without your home leaving home. What travels is de-identified patterns: a better grasp, a safer approach. Never your rooms, your faces, or your routines.
If it fails, you hold us.
Ask the hardest question first: a robot is helping someone you love move across a room, and something goes wrong. Who do you hold accountable? Not a model vendor. Not a hardware maker. Us.
A car is thirty thousand parts from hundreds of suppliers, and when it fails the customer holds one company accountable: the badge on the hood. Cereal is built the same way. One contract, one subscription, one brand, one number to call at 3 AM. Bodies and motor intelligence are our supply chain; nothing runs in your home unless it passes our dependability gate, so we answer for the outcome.
Accountability without evidence is just an apology. In a Cereal home, every perception, decision, and action is signed by the device that performed it into one continuous, tamper-evident trail that can be replayed in simulation. When something goes wrong, we can show exactly what the machine knew and did, verifiable by you, by an insurer, or by a regulator.
Every skill runs supervised in your home before it earns autonomy there, task by task, and the record of that graduation is part of what you buy.
Can it see through my cameras?
No one sees through them by default. If you choose to grant a camera to the home's mind, that grant is yours to scope and yours to revoke, and every access it permits lands in the attested trail, so surveillance is impossible to do silently, by architecture rather than by promise.
Room by room, source by source, person by person. A grant says who may perceive what, for which tasks. Revoke it and the state honors it everywhere, including memory already written.
A home you can ask. Where are my keys. Did mom take her medication. Who came to the door while I was out. The queryable home is what permissioned perception makes possible, and it is useful before a robot ever touches anything.