PERMISSION IS THE ARCHITECTURE
Powerful enough to act.
Bounded enough to trust.
KEORIS separates what the model can suggest from what the application is allowed to do. Important boundaries are enforced in application code, not left to a prompt.
Files and destructive actions
- Search and document tools enforce approved-folder boundaries outside the interface.
- Moves, renames, and deletions require confirmation.
- Deletes use the Windows Recycle Bin. KEORIS refuses deletion when a network drive, oversized file, or unavailable Recycle Bin could cause permanent erasure.
- Backups exclude stored secrets.
Screen vision and screen driving
- Screen vision always displays a visible indicator while an image is being read.
- Screen Driving is beta, off by default, and currently limited to File Explorer and Notepad.
- You see and approve a plan first. Save, send, delete, download, and overwrite steps pause again.
- Financial windows, sign-in surfaces, password fields, administrator windows, and UAC prompts are blocked.
- Screen driving cannot run unattended, from a schedule, or from the phone companion.
Browser isolation
Web pages run in isolated sessions without access to KEORIS files, settings, keys, or internal controls. Camera, microphone, and location requests are denied by default. Downloads are disabled in the current browser stage, and local-file URLs are refused.
Cameras and remote access
- Local RTSP camera helpers bind to the loopback address rather than the open network.
- Blink live-view sessions use short-lived, unguessable local tokens and are released when viewing stops.
- Cloud camera traffic uses the camera provider because that is how Ring, Blink, and Nest operate.
- The mobile companion binds to Tailscale and refuses to fall back to an exposed local-network server.
Known limitations
Security claims should include the uncomfortable parts. The Windows installer may be unsigned and trigger SmartScreen. Windows secure storage protects keys when available, but some non-OpenAI connected-service secrets can fall back to plain text in the local settings file. Optional cloud features necessarily send the disclosed data to their providers.
See the full Privacy page for network destinations and local-storage behavior.