Build1 publisher3 min readPublished Updated
583 autonomous sessions, seven visitors: an agent shipped everything except demand
A Claude agent has run a monitoring SaaS end to end since April, deploying to production with no human on call. Its own scorecard reads 97.5/100. Search Console reports four clicks.
The Engineer · Build desk
Drafted by a language model from the sources cited here and checked against its claim ledger before publication. How we use AISend a correction
What happened
- The post was written by the AI agent that operates Merlonix, during working session 583; the human owner reviews nothing the agent publishes to the company blog, but submitting the post to an external site is done by the human, since the project treats an agent posting under a human identity as hard-forbidden.
- Since early April 2026 (session 11 is the oldest file breadcrumb, dated April 14), a Claude agent has been the operator of the company: each session it reads the previous session's state files, decides priorities, writes code, runs tests, deploys to production, verifies the deploy and writes the handoff. The human sets policy and pays the bills.
- Merlonix is a monitoring platform covering uptime, SSL/TLS posture, DNS and DNSSEC, email authentication (SPF/DMARC/MTA-STS), blacklists, Certificate Transparency logs, heartbeat checks, Core Web Vitals and broken links, plus AI visibility (whether a site appears when answer engines answer) and MCP server health.
- The product has four subscription tiers from $19 to $699 a month, five self-serve one-off or add-on SKUs from a $15 vendor security snapshot to a $79 domain fix pack each with real Stripe checkout and fulfillment, eleven free no-signup tools, status pages, a 44-article help center, an interactive demo, Zapier/Make/n8n integrations, and its own MCP server exposing 14 tools.
- Deploys to Cloudflare are autonomous, including production database migrations, each gated by a verifier script that rolls back on failure; there have been hundreds. The infrastructure runs almost entirely on free tiers and the monthly bill is within a rounding error of zero.
Compiled by The EngineerSomething wrong?How this is made
Why it matters
A Claude agent that has been the operator, not the assistant, of a monitoring SaaS called Merlonix since early April published a post during its 583rd working session reporting that the company has never had a single external signup, paid or free [1][2][10]. The throughput is not the story. The story is that four months of uninterrupted build, deploy and verify produced no commercial outcome, and the project's own strategy review, in session 509, concluded that the binding constraint is distribution, which is precisely the activity the agent is forbidden to perform [12].
What got built is not a toy. According to the post, the product covers uptime, SSL/TLS posture, DNS and DNSSEC, email authentication, blacklists, Certificate Transparency logs, heartbeats, Core Web Vitals and broken links, plus AI visibility and MCP server health [3]. On top of that sit four subscription tiers from $19 to $699 a month, five one-off or add-on SKUs from $15 to $79 with live Stripe checkout and fulfillment, eleven free no-signup tools, a 44-article help center, status pages, an interactive demo, Zapier/Make/n8n integrations, and an MCP server exposing 14 tools [4].
The operating record is the part most teams cannot match. Deploys to Cloudflare, including production database migrations, run autonomously behind a verifier script that rolls back on failure, there have been hundreds of them, and the infrastructure sits almost entirely on free tiers with a monthly bill near zero [5]. There is no on-call human and never has been [9]. In session 273 the alert pipeline's dead-letter queue flooded because a decommissioned model name met a router that threw instead of falling back; the same kind of session that caused it diagnosed, fixed and regression-guarded it [8]. Between session 11 on April 14 and session 583, the agent averaged roughly five sessions a day [16].
The demand side, from the same post: 837 impressions and 4 clicks in the last 28 days of Search Console at average position 26, and 7 sessions in Google Analytics [11]. That is a click-through rate of about 0.48 percent [15]. Zero signups against tiers priced up to $699 means zero revenue, whatever the checkout flow can technically process [17].
Every channel terminates at a human hand. Nineteen personalized founder-outreach emails were drafted, fact-checked twice against live scans and re-drafted when the facts drifted; they sit unsent in the owner's Gmail drafts because the project treats an agent mailing under a human's name as impersonation [13]. Show HN, Reddit and Indie Hackers run on identity and reply-in-thread presence, so they terminate in posting as a person [14].
The self-audit machinery is worth reading against that. Each session spawns bug-hunting subagents and seven officer personas, with findings tracked to file and line and nothing closing without a grep-verifiable fix, and the resulting launch-readiness scorecard reads 97.5 out of 100 [6][7]. The agent flags that the number is self-assessed [7]. A 97.5 next to seven visitors is a measurement of internal consistency, not of whether anyone wants the thing.
All of the above is one source, written by the system under test, and we have not independently verified it. Watch whether the owner sends the 19 drafts and what converts; watch whether the AI-visibility and MCP-health wedge produces any inbound at all; and watch the session counter, because with an infrastructure bill near zero nothing forces this to stop [5][13].