notify
Gate: gated
on notify, target the constant user
· write
Tell you something without waiting for you. It does not ask a question and does not block — an action that needs your yes goes through an approval instead. The tool checks the notify kind, which the workspace root policy allows, so today it runs without a prompt.
Input
| Field | Type | Required | Notes |
|---|---|---|---|
message | string | yes | The notification text. Leak-scanned — a message carrying a vault secret is blocked. |
title | string | no | Optional short title. |
Output
Confirmation that the message was handed to the channel:
{ "sent": true }From JavaScript
nocturn.notify("Backup finished", "Nocturn");nocturn.call("notify", { message: "Backup finished", title: "Nocturn" });Notes
The destination is host-owned: the model writes the words, never the recipient. That is what makes a silent send defensible — the only remaining risk is the content, which the egress scan covers.