What is verified, and what is not yet
Every line on this page is either checked in code today or stated plainly as not done. Nothing in between.
Local passwords are hashed with argon2id, and no default administrator password ships with any deployment.
Sign in with your own identity provider (OIDC with PKCE); no shipped default administrator password.
OIDC sign-in uses PKCE, nonce and state, and hands the session over with a one-time cookie-bound code — never a bearer token in a URL.
Bring your own model — OpenAI-compatible endpoints, Ollama, Anthropic, or Cloudflare AI Gateway / Workers AI — with keys envelope-encrypted at rest.
Per-IP rate limits protect the login endpoint against brute-force attempts.
Per-IP rate limits also protect host enrolment against abuse.
Skills come from a signed vendor catalogue or your own uploads, and can be enabled or disabled per workspace.
The signed vendor skill feed is rollback-protected: an older signed catalogue cannot replace a newer one.
Read-only execution policy is the default on every enrolled host; the full policy is an explicit, per-host choice.
Changing a host's execution policy from read-only to full is an administrator-only action.
- An independent security audit has not yet been completed. Target date: [YOUR DATE].
- A third-party penetration test has not yet been run. Target date: [YOUR DATE].
- Installers are not yet code-signed or notarised for macOS and Windows.
What is verified, and what is not yet
Request a demo