Architecture and privacy
Surface map
Section titled “Surface map”| Surface | Build | Data posture |
|---|---|---|
| AI OS host | Local Vite and Worker-oriented application | Local operator data and guarded actions |
| Product website | Independent Astro static site | Reviewed marketing content |
| Public demo | Cloudflare Pages static output | Reviewed fixtures and no local bridge traffic |
| Documentation | Astro Starlight static output | Curated public content only |
The documentation build reads only its package content and reviewed assets. It does not traverse upward into repository maintenance documents, generated data, or session history. A deterministic scanner rejects path escapes, symbolic links, unsafe references, private path shapes, and secret-shaped values.
Product ownership
Section titled “Product ownership”- AI OS owns the host shell, local cockpit, scheduler, Dream host behavior, local-agent telemetry, and platform documentation.
- Trend Finder owns public trend evidence, source health, scoring, creator workflows, Watchlist, Brief, and Engine Replay.
- AI Rogue owns its browser-local game state and authored experience.
- Claude OS names inherited starter behavior and compatibility contracts only.
Static documentation security
Section titled “Static documentation security”The first release has no server functions, runtime secrets, forms, accounts, uploads, or analytics. Security headers block framing and unnecessary browser features. Fingerprinted assets receive immutable caching; HTML and missing routes are never handled by a catch-all application fallback.