Trust
Local-first. Less thrash. Proof you can re-run.
No KnoSky-hosted body store of your source. Map tools stay read-only. Share-safe can fail closed. Optional Enterprise paperwork (security report, audit verify) for careful pilots. Claims stay within what doctor shows on that machine.
What we promise
- Local map by default
- Mode A labeled advisory only
- Mode B: lease + policy + audit on ALLOW
- No always-on product telemetry
What we will not pretend
- Blanket swarm-safe everywhere
- Windows kernel no-egress without packaging proof
- Mode A as authorized
- L3 foundation == finished fleet product
When you need paperwork (optional Enterprise path)
- Security report after a serious local index
- Audit pack + verify — a CISO can re-run the evidence folder
- Read-only map tools (find & cite — not silent writers)
- Architecture intel — local district scores (proxies, not full SAST)
- Private synthetic gauntlet — attack classes on fake hosts; not customer data; not public by default
Live on npm: npx knosky@latest enterprise . --no-serve then audit pack / intel.