Orcyx is a Tauri 2 desktop app, not a web service in a wrapper. The knowledge graph is plain markdown on your disk. Tokens live in the OS keyring — never the webview. The only network calls are the ones you configure.
Agents touch only the paths you grant — nothing outside the workspace.
Prompt-injection screening on inbound content before an agent acts on it.
Environment variables pass an explicit allowlist — secrets stay out of agent reach.
CPU, memory, and spend caps per seat — a runaway agent hits a wall, not your machine.
Every command audited with redacted args — a reviewable trail of everything agents did.
The Vault ships with its own in-process MCP server — 12 tools behind a per-tool ACL. External MCP servers you connect are managed the same way: health-checked, rate-limited, and audited with redaction so credentials never land in a log.
Schema tree, query editor, result grid — plus a managed Postgres sidecar so a scratch database is one click, not a docker file.
SSH sessions open as ordinary panes — same splits, same cost counters, same agents able to work over the wire.
Spin a container per project and attach panes to it — agents inherit the container's toolchain and the sandbox's limits.
Atomic fsync writes, snapshot ring buffer, restore wizard for corrupted state.
Shared workspaces with live presence — see who's driving which pane.
Silent updates when signing ships; a loud demo badge so fake data is never mistaken for real.
Extend surfaces and wire external services — licensing and billing handled in-app.