▲ browser

Browser

how this compartment behaves
Memory
Forgets everything on closeNothing this compartment does survives a restart. The safest default.
Network
Through policyReaches the internet only via an approved transport, routed through the network compartment.
Transport: wireguard · DNS-over-TLS · MAC randomized. This is the "firewall" — which compartments reach the network, not iptables rules.
Devices this compartment may use
Camera
🎙Mic
Downloads
USB
Turning one on grants a scoped, revocable bond. Camera or mic being on shows an unmissable live indicator on the window.
Trust & bonds
Untrusted tierAmber border, brokered clipboard, quarantined downloads. Cannot be raised beyond what its role allows.
Changes apply next time this compartment starts.

Settings are launch policy, made human. Every control here maps to a field the system enforces — but you choose in plain language ("Forgets everything on close"), not JSON. A control can never express an unsafe policy; the mapping is validated. This is how a normal person tunes a compartment without learning the machinery — and the same panel a designer uses to shape a new monomer. "Network" is the real firewall (which apps go online, via which transport), and the device toggles each grant a scoped, revocable bond. Concept render in the PolymerOS design language.