yantrikos.com/security
Security: not built yet.
This page is planned and has not been written. Nothing below is a placeholder for content; it is what the page will cover, and where that is written down today.
What it will hold
- Grades, the machine's ceiling, and the modes that decide what runs without asking.
- The approval card row by row: the caller as it names itself and as the kernel names it, and a grant bound to exact arguments.
- The audit of what ran unasked, and the taint rule no mode turns off.
- The vault, Private mode, and the egress proxy that starts in audit.
- What is not protected, said as plainly as what is.
Read it at the source until then
- design/mind-modes-2026-09-21.mdmodes, the decision table, the invariants
- design/approvals-2026-09-21.mdthe approval card and grants
- docs/app-control.mdevery action and the grade it holds
- design/vault-unlock-2026-09-21.mdthe vault
- design/mind-egress-2026-09-29.mdthe egress proxy