Private by construction.
The agent runs default-deny: it only ever sees your records, writes are opt-in, and every action is authorised against your account. Self-host and it never leaves your walls.
- Owner-scoped, no one else’s data in reach
- Writes require your explicit go-ahead
- Encrypted storage, open code you can audit
- Self-host the whole thing
The agent can only touch your data
Default-deny means nothing is permitted until it is granted, and grants are scoped to you. Reads never change a thing, and writes wait for your say-so.
- Every action authorised against your account
- Reads are safe, writes are opt-in
- Open code, so you can verify all of it
Permissions
A permission check on an agent action