Devices & network

The firewall, made human.

Not a table of ports and rules — a plain picture of which apps can reach the network, how they get there, and what hardware each one is holding right now. Camera or mic in use always shows here, and on the window itself.

Network

who reaches out, and how
Transports available
WireGuardhome base DNS over TLS MAC randomized Direct internet
Who reaches the network
Workshoptrusted
Through policy wireguard
online
Browseruntrusted
Through policy wireguard
online
Assistantscoped
Private overlay only
overlay
Media & Docsquarantine
No network
offline
Through policy means an app reaches the internet only by an approved transport, routed through the network compartment — never straight out. Turning that off for an app is one switch, and it takes effect the next time the app starts.

Devices

what each app is holding
Cameraheld by Assistant · 11 min left
LIVE
🎙
Microphonefree
Downloadsshared with Browser
USB driveplugged in · not shared
A device is handed to one app for a set time, then returned on its own. When the camera or mic is in use, the window using it shows a mark you can't miss — and so does this list.

This is where the network and hardware picture lives — the same information the system enforces, shown as choices a person can read. Concept render in the PolymerOS design language.