Your browsing,
beyond the reach of local apps.
The sensitive browser runs in an isolated enclave on a dedicated server. Your Mac receives only a video stream it cannot leak — presented in a capture-protected window.
Isolated remote browser
Chromium lives inside a hardened, disposable server session — never on your machine. Pixels, cookies, URLs and page text stay off the Mac entirely.
Capture-protected surface
The stream is shown in a native window with preventsCapture enabled before the first frame — system screenshots and screen recorders get nothing.
Fail-closed, always
On any doubt — protection uncertainty, disconnect, crash, untested OS — you see a neutral shield. Never a last frame, never a fallback.
Encrypted document Vault
Files open inside the session — PDF, Office, text, images — each object encrypted with its own key. Nothing is ever written to the Mac in plaintext.
Hardware-decoded streaming
H.264 delivered over a signed, one-shot admission channel and decoded by VideoToolbox. Measured frame-to-photon median ≈ 40 ms in evidence runs.
Evidence over promises
Every claim ships with a machine-checked evidence record. What is not proven yet is written down as not proven — in the repo, dated.
Guard Enclave is being built in the open: every gate, every number above is a reproducible evidence run in the repository. The roadmap ahead — Touch ID presence gating, hardware capture matrices, and a public alpha — ships when its gates pass, not before.