A SPACE FOR EVERY YOU
A lasting space for each identity. Where intention, runtime, and evidence meet.
01 / STEP INSIDE
Open it. Move an identity. Follow its evidence. Make room for another you.
Development UI · May differ from the public download
Keep exploring ↓A scaled view of the whole desktop. Expand to pan and interact at full size; best experienced on a computer.
02 / MORE THAN A PROFILE
Give a lasting identity environment its own shape, continuity, and clear boundaries.
PERSISTENT IDENTITY
Each Profile keeps its own website data. A Managed Silo connects a controlled identity, engine, and network policy into an environment you can keep using and observe again.
Its shape is a recognition aid, never a verification seal.EVIDENCE, IN THE OPEN
Read the declared configuration beside the observation. See what matches, what differs, when it was observed, and what could not be read.
Configured, Applied, Observed, and Verified mean different things.LOCAL FIRST
Identity and configuration stay under local control. The Vault protects configuration and network credentials. Logins and website data live in separate Profile directories.
Explicit network policy. When a required proxy fails, stop.03 / CONFIDENCE THROUGH EVIDENCE
Choose an observation to explore the difference. Good evidence leaves room for an honest “unknown.”
Explore the evidence and capability boundaries ↗INTERACTIVE EXAMPLE / TIMEZONE · SIMULATED DATA
This field matches the declaration. It is not an unlimited guarantee about the entire identity.
The observation differs from the declaration. The difference stays visible so you can investigate.
No observation was obtained this time. Missing data is never presented as a pass.
04 / CLEAR BY DESIGN
A Standard Silo separates website data in system Chrome or Edge while retaining the local device identity. A Managed Silo uses a controlled Camoufox engine, independent Profile and Identity Artifact, with runtime observations. Both remain available for distinct purposes.
No undetectability, absolute anonymity, or universal site compatibility. It does not rewrite physical hardware or claim control of TLS, QUIC, or every DNS path. Observation scope, timing, and provenance always matter.
No. It runs real interface components with simulated APIs. Its state lives only in the current demo page and is cleared by Reset. It does not launch a browser, probe your network exit, or read a local Vault. Do not enter real passphrases or proxy credentials.
The public version is v0.1.0-rc4, a Windows x64 pre-release. The installer is not Authenticode-signed and may trigger an Unknown publisher or SmartScreen prompt. Strict standard-user installation semantics remain unproven. Check the Release page for SHA256, provenance, and known limits.
TAKE YOUR SPACE WITH YOU
Try the space. Then make it yours, on your computer.
v0.1.0-rc4 · Windows x64Checksums, provenance & known limits ↗The public download may differ from the development demo above. The installer is not Windows publisher-signed yet.