Straight answers.

Yes. The open core runs with zero cloud. Hosted early access is live: sign in, install Mac app 0.2.0, and mount the Finder drive. Recording an agent run with its transcript still needs the CLI and hook — the DMG does not do that.

When the CLI and hook recorded a run: the files and the transcript, byte-identical, across processes on one machine. Not live process state — RAM, ports, or running servers. The Mac app syncs files between Macs. It does not record the transcript. Walk-up resume of an AI run is the direction of early access, not something every download does today.

Files sync between Macs. Private accounts encrypt Drive content on your Mac before upload; keys are unlocked by OPAQUE sign-in. You hold those keys, and the recovery key is mandatory and shown once. Standard accounts are not end-to-end encrypted: the operator can read Standard-account Drive content. Standard accounts sign in with Clerk. In the open core, you hold the keys: the standard record, resume, and daemon paths store ciphertext, and a non-key-holder fails closed.

The core is open and self-hostable. Choosing hosted means choosing not to operate it. Account deletion in the hosted app is suspended: a request does not revoke devices, shred keys, or delete rows. Crypto-shred of an account is designed, not available.

No. Conflicts are kept and surfaced, never silently merged. Today you resolve one by restoring an earlier point. Keep mine and Take theirs are not functional yet.

Early access, not a certification. Accounts, hosted file sync, team folders, Restore, and Settings checkout are live. Reviews run on the web; the Mac app says review on the web. SOC 2 has not started. Windows, Linux, and iOS apps do not ship. Trusted / FSKit does not ship in the Mac app.

Hosted Solo and Team checkout, and the customer portal, are in signed-in Settings during early access. This site does not publish a price, and we will not invent one. Storage is what the plan enforces: free 1 GiB, Solo 50 GiB, Team 500 GiB. There is no per-plan device, seat, or repo cap. The open core stays free, with no card and no account.

The open core can run entirely on your machine. Hosted early access stores objects in Cloudflare R2. The adapter does not pin a bucket region — it defaults to auto, and Cloudflare chooses placement. We do not offer a per-region or EU-only residency choice, and we will not name a country the code does not pin. Private accounts encrypt Drive content on your Mac before upload; keys are unlocked by OPAQUE sign-in. Standard accounts are not end-to-end encrypted: the operator can read Standard-account Drive content. If a region is a hard requirement, ask before you rely on hosted.

The core is open and self-hostable, so leaving hosted can mean running the same engine yourself. Account deletion inside the hosted app is suspended: the request fails closed and does not revoke devices, shred keys, or delete rows. Crypto-shred of an account is designed, not available. There is no proprietary format you have to stay inside.

The CLI and coordinator are Node. The app we ship is macOS 0.2.0: a notarized DMG whose Finder drive is a File Provider, and it does ship. Trusted / FSKit does not ship in that DMG. Windows, Linux, and iOS apps do not ship — we will not claim a platform we do not ship.

Yes, in hosted early access, on the web and in the Mac app. Shared folders have roles (viewer, editor, manager, owner), invite links, and member removal. Team storage is 500 GiB. That is a storage quota, not a seat cap, a device cap, or a repo cap. Sign in to use them.

Reviews are live on the web. The Mac app does not complete a review itself — it says review on the web. That gap is being fixed. We do not claim desktop reviews today.

The open-core secrets engine leases a secret instead of copying it, and a kill-list can refuse it later. Stored material is enveloped, with per-path encryption keys; a key-holder resumes transparently and a non-key-holder fails closed. Private hosted accounts use OPAQUE and a mandatory recovery key. Open-core scope keys use a sealed device key, a scrypt floor, and Shamir 2-of-3 — software custody. Secure Enclave / Touch ID is not in the shipping Mac app. Crypto-shred of an account is not a live deletion path.

The waitlist obligates nothing: no payment and no contract. Hosted early access itself is already live if you can sign in. Checkout in Settings is optional, and this site still shows no price. You can use the free open core with zero cloud either way.