Runs on your side
Core features execute on your device. The platform supplies the runtime and the boundary.
Independent makers bring tools to the bazaar. Each is struck with a mark from the shipped build, not from the maker's description. Open a link and take the tool home.
Each property is measured from the shipped build. The mark records it.
Core features execute on your device. The platform supplies the runtime and the boundary.
Every outbound address is declared before the tool ships. The shell enforces the declaration at the origin.
A camera, a file, or a machine on your network stops at a prompt. Grants are listed, and they are revocable.
When a tool can reach your machine directly, nothing relays through a server. Where a broker is used, the mark says so.