First Mate
voice + text · runs on this machineVitals
locallisten portrotates each launch
origin gatesame-origin · enforced
telemetrynone — receives nothing
model voiceon-device (whisper → piper)
airgapready
chainverified
Research — morning brief
agents work in parallel · you read the resultAudit — the Logbook
append-only · Ed25519-signed · each event links the lastAirgap
one switch · seals both sidesOPEN — egress through a single audited chokepoint
server egresschokepoint · monitored
browser egressCSP · standard
outbound connections2 (configured by you)
SENTRY
who is using your mic, camera, screen — from OS facts| APP | MIC | CAM | NET |
|---|---|---|---|
| home (this console) | local only | — | 0 phone-home |
| browser | — | — | expected |
| conference app | hot 12m ago | hot 12m ago | talking now |
honestly bounded: SENTRY sees official-API use, not kernel implants — that layer belongs to external hardware watchers.
Stream — your co-host, your stage
cosmetic face · signs nothing · in-browser· · ·
· ·
· ·
the First Mate's face — cosmetic only. The /stage route renders ONLY the avatar: your dashboard and vault are structurally off-camera.