#Security
4 articles — newest first.
- 9 min read
Zero Network Leakage in CI: Deny-by-Default Egress Harness
A practical, cross-platform harness to prove your desktop app makes zero outbound network calls in CI by default—block, log, count, and assert.
- 7 min read
Encrypt Tauri local storage at rest with age + OS keychain
A zero-cloud, cross‑platform pattern to encrypt Tauri local storage at rest using age (X25519) and the OS keychain for seamless key management.
- 8 min read
Zero-Account Auth: Device-Bound Identity + Capability Tokens
Build secure apps without accounts or an auth server: bind identity to device keys, mint PASETO capability tokens, and enforce DPoP for stateless, least-privilege access.
- 9 min read
Constitutional AI, Safety & Production Guardrails
Safety inside a prompt the user can address is a suggestion, not a boundary. Layer constitutional AI, a system constitution, and deterministic code gates the model can't argue with.