OCLITH / privacy notice

Local sample work

The Console analyzes text in your browser using public deterministic sample rules. It does not execute pasted code or send local sample input to an external model. The sample policies are delivered with the frontend and do not constitute a confidential execution environment.

Browser storage keeps local run records, sample budget entries and local example revocation state so they can be inspected again. A Capsule records an input digest and length instead of the original input. Clearing this site's browser storage removes that local history.

Public capability declarations

The Published directory reads this deployment's registry. Publishing sends the reviewed Manifest to the server, together with the authenticated owner identity. Registry records include an ID, owner address, policy digest, creation time and active or revoked status.

Do not include private source material, credentials, sensitive request input or confidential internal rules in a public Manifest. A registry declaration is designed to describe an interface and policy.

Connecting a wallet makes its selected public address available to this site. Signing in requires a separate message containing the deployment's domain, URI, nonce and expiry. The server verifies the signature before authorizing owner actions.

Connection, sign in, publication and revocation are separate actions. Compiling, copying, downloading, previewing or running a local sample does not trigger a signature, publication or transaction. This site does not request wallet seed phrases or private keys.

Service requests

Hosting and infrastructure providers may process standard HTTP request information such as IP address, browser details, route and request time while serving the site and its APIs. Registry and authentication operations contact this deployment's own endpoints.

The interface reports a specific error when a service cannot be reached or is not configured. A browser example is never silently substituted for a public registration.

Your controls

Use sample input in the workbench. Review a Manifest before publishing. Export the records you want to retain and clear local browser storage when they are no longer needed. Disconnecting a wallet and ending its signed session are distinct from revoking a public capability declaration.

Owners can revoke their registered entries through the owner workspace. Revoked entries retain their declaration and status for inspection; revocation is not a deletion of an earlier public record or a guarantee that private source data has been erased.

Integrity and scope

Capsule verification checks SHA-256 digests for the covered record content. It does not establish private source authenticity, confidential execution, trusted hardware attestation, zero knowledge proof or payment settlement.

Read the privacy mechanism documentation and Capsule integrity scope before relying on the sample as a design reference.

Updates

This notice describes the current deployment and will need review when its hosting, data retention or execution integrations change.