Security

A small boundary around sensitive history.

Computer history is unusually sensitive. AfterRay keeps the vault behind the daemon, encrypts stored data, and gives models and agents narrower interfaces than the app itself.

Encrypted local vault

Structured records and indexes live in SQLCipher. Capture artifacts use XChaCha20-Poly1305. The vault key is stored in the macOS Keychain and is not exposed to the SwiftUI app.

One process owns decryption

The local daemon owns the vault, applies retention and deletion rules, and serves the app over a versioned local socket. The UI does not open encrypted storage directly.

Limited agent access

The built-in assistant receives allowlisted, read-only tools. The optional CLI exposes summaries and search results; original evidence requires a 30-minute grant in Settings.

Model boundary

A local model keeps prompts and evidence on this Mac. A remote OpenAI-compatible provider receives the prompt and evidence needed for each request. Agent harness threat model

Auditable distribution

Public releases are signed and notarized for macOS. Source, build scripts, threat model, and release process are available for review. Source repository

Updated August 20, 2026