# UI Security Boundaries

JackAILocal's UI is intentionally local and constrained.

Hard boundaries:

- bind to `127.0.0.1` only
- no shell execution from chat
- no OS automation exposed to model output
- no arbitrary path reads or writes
- documents saved only under `workspace/documents`
- support bundle excludes conversations by default
- model additions require manifest/hash verification in production builder
- updates require signed manifest in production

Non-goals:

- uncopyable USB
- protection from a compromised host OS
- guaranteed zero forensic trace in Windows
- guaranteed autorun on insertion