Privacy and local-first limits¶

Local-first narrows exposure but is not a claim of perfect security or secure deletion.

Last updated: 2026-08-30

The target instrument keeps canonical state and generation local and sends the worker only an approved semantic projection. Private journal, therapy, health, participant, credential, and model-token data must not enter this repository, public fixtures, logs, or publication artifacts.

Encryption, key recovery, backup, retention, deletion, crash reporting, and operating-system isolation require explicit implementation and review before non-developer personal use. Provenance does not prove truth, consent, ownership, or clinical validity.