Privatae
20 lines
1.1 KiB
Markdown
20 lines
1.1 KiB
Markdown
# Your files: context and DCN stores
|
|
|
|
## Context: your files, turned into text here
|
|
`add-folder` hands a folder to your network. `privatae-bastion context` opens a
|
|
browser page, running as **you** (not as the daemon), that shows exactly the
|
|
files you can already open and asks the host before anything is added. The
|
|
bastion can also turn bytes into content on your own hardware before anything
|
|
leaves: OCR for scanned documents, speech-to-text, office-document extraction
|
|
and video frames. Anything that turns your bytes into their content runs on
|
|
your machine, never on the platform.
|
|
|
|
## Distributed Context Network (DCN) stores
|
|
Signature-verified store grants for folders you share. The host's verify key is
|
|
pinned on first sync (trust on first use) and a later key change is refused.
|
|
Every read is sandboxed to the granted path, walks no symlinks out of it, and is
|
|
audited on this machine. The vocabulary is reads plus **one write lane**: a
|
|
signed move plan that you confirmed on this machine, which archives files and
|
|
never deletes them. Dropping a grant removes the grant, not your files.
|
|
**No delete op exists.**
|