Local by design
- Listens on 127.0.0.1
- The server answers only requests for its own host and origin. There is no remote access, no account and no multi-user mode.
- Nothing leaves
- No telemetry, no analytics and no call to any AI provider or other service. The review brief is saved as text and nothing is generated from it.
- A token per session
- Every write from the browser carries a token the server issues and the browser keeps in memory.
- Your files, one folder
- Projects, uploads and exports live in the data folder next to the server. Delete a project folder and it is gone.
What is signed and how
- Ed25519 signature
- The receipt payload is signed with Ed25519. The private key stays on the computer that signed and is never written into an archive.
- Every file by hash
- Every file in the archive is listed in the receipt with its SHA-256: the plan, the source, the output, the annotation, the gates, the audit report, the approvals and the heatmap.
- Bound before signing
- Plyvel verifies that the gates, the audit and the approvals refer to the same plan, source and output by hash. Any mismatch stops the export.
- Verified on download
- Downloading re-verifies the evidence package and the archive hash. A failed verification is an error, not a download.
A receipt proves file binding and records a review. It does not certify the building, authenticate the reviewer, or make the image a photograph.
What it does not do
- No transport encryption
- The server is meant for one person on one computer. Do not expose it to a network; a hosted version would need its own security design, and none exists.
- No identity
- The reviewer name is recorded as written and is not verified.
- No cancel, no resume
- A running job cannot be cancelled, and nothing is resumed after a restart.
To report a security problem, write through the contact page.
Describes the local server as shipped on 23 September 2026.
