Trust on the phone: sealed approvals, verification, agents issue #6
open andymccall opened this · 0 comments
andymccall
oxy's Rust core on the device (rust-core, uniffi): the phone as an identity of its own (key wrapped by the Android Keystore, StrongBox where present, delegated from the owner's) so an approval gate's sealed approval is signed on the phone; check a change's or release's signatures, certificates and transparency-log inclusion on the device, not trusting the hub; grant and revoke AI agents (oh agent grant/revoke).
oxy's Rust core on the device (rust-core, uniffi): the phone as an identity of its own (key wrapped by the Android Keystore, StrongBox where present, delegated from the owner's) so an approval gate's sealed approval is signed on the phone; check a change's or release's signatures, certificates and transparency-log inclusion on the device, not trusting the hub; grant and revoke AI agents (oh agent grant/revoke).