| # UI Security Boundaries | |
| JackAILocal's UI is intentionally local and constrained. | |
| Hard boundaries: | |
| - bind to `127.0.0.1` only | |
| - no shell execution from chat | |
| - no OS automation exposed to model output | |
| - no arbitrary path reads or writes | |
| - documents saved only under `workspace/documents` | |
| - support bundle excludes conversations by default | |
| - model additions require manifest/hash verification in production builder | |
| - updates require signed manifest in production | |
| Non-goals: | |
| - uncopyable USB | |
| - protection from a compromised host OS | |
| - guaranteed zero forensic trace in Windows | |
| - guaranteed autorun on insertion | |