#Security
2 articles — newest first.
- 9 min read
Zero Network Leakage in CI: Deny-by-Default Egress Harness
A practical, cross-platform harness to prove your desktop app makes zero outbound network calls in CI by default—block, log, count, and assert.
- 8 min read
Zero-Account Auth: Device-Bound Identity + Capability Tokens
Build secure apps without accounts or an auth server: bind identity to device keys, mint PASETO capability tokens, and enforce DPoP for stateless, least-privilege access.