Zero Blind Trust

Enterprise Security and Cryptographic Provenance

Ozzy Dev is engineered around a strict local machine trust boundary. Your source code and indexes never leave your Mac, while cloud access is protected by Sentinel authorization gates.

Mac-Local Trust Boundary

All repository indexing, AST parsing, and symbol graphs stay strictly on your local Mac. Loopback request guards block cross-origin browser probes.

127.0.0.1 Loopback · Local SQLite

Ed25519 Signed Receipts

Every code edit, search, and wave run emits an Ed25519 cryptographically signed receipt. Diffs, test results, and model costs are permanently auditable.

Ed25519 Signatures · KnowYourModel

Sentinel Cloud Auth Gate

Cloud console deployments (`dev.ozzydev.com` & `ozzydev.com`) enforce Sentinel OAuth session gates and role-based access control (RBAC).

Sentinel OAuth · Admin RBAC

Security and trust by design

Explore our open-source security models or sign in with Sentinel.