docs/UI_SECURITY_BOUNDARIES.md

UI Security Boundaries

JackAILocal's UI is intentionally local and constrained.

Hard boundaries:

• bind to 127.0.0.1 only
• no shell execution from chat
• no OS automation exposed to model output
• no arbitrary path reads or writes
• documents saved only under workspace/documents
• support bundle excludes conversations by default
• model additions require manifest/hash verification in production builder
• updates require signed manifest in production

Non-goals:

• uncopyable USB
• protection from a compromised host OS
• guaranteed zero forensic trace in Windows
• guaranteed autorun on insertion