Privacy Policy & Security Architecture

1. Ephemeral Sandboxing & Browser Isolation

Every autonomous web specification and reverse-engineering audit executed by SarembokVE runs within a dedicated, ephemeral headless Chromium container (sarembok-browser). The container operates under non-root permissions with strict memory ceilings (768MB) and dropped Linux capabilities (cap_drop: ALL).

All temporary cookies, DOM trees, local storage, and cached network frames generated during an audit are destroyed in memory immediately upon task completion.

2. Information Collection & Processing Scope

SarembokVE collects only the operational data strictly necessary to provide verification and compute orchestration services:

• Session Identifiers: Ephemeral session tokens issued by the /session broker with an automated 3600-second time-to-live (TTL).
• Target URLs for Auditing: The specific public web targets requested by users for OpenAPI schema extraction and TypeScript contract generation.
• Vector Memory Graph: Episodic memories explicitly stored via user prompts (e.g., remember that ...). All memories are scoped to the active tenant and can be cleared instantly via /clear or the UI Memory Rail.
• Hardware Attestation Data: When external GPU nodes enroll in the sovereign compute mesh, hardware telemetry (GPU model, VRAM capacity, driver status) is gathered solely for workload routing.

3. Cryptographic Transmission & Edge Protection

All communication with SarembokVE is encrypted in transit using Transport Layer Security (TLS 1.3) terminated at the Caddy edge proxy. Strict security headers are enforced across every endpoint:

• Strict-Transport-Security: max-age=31536000; includeSubDomains (HSTS)
• X-Content-Type-Options: nosniff
• X-Frame-Options: SAMEORIGIN
• Permissions-Policy: camera=(self), microphone=(self), geolocation=()

4. Data Subject Rights & Immediate Purge

Under GDPR and CCPA standards, users possess absolute control over all stored data:

• Right to Erase: Executing /clear or clicking the Purge Memory button deletes all recorded session history, conversation turns, and vector records from the persistent SQLite database immediately.
• Right to Export: All inferred contracts, OpenAPI schemas, and TypeScript definitions can be exported at any time via /api/spec/export in open, non-proprietary JSON/TS formats.

5. Contact & Security Auditing

For enterprise security inquiries, SOC 2 compliance reports, or vulnerability disclosures, contact the security engineering team at [email protected].