Browser-native
Top-level HTTPS applications receive navigator.archetype without receiving database credentials or identity tokens.
Invoke self-hosted Node.js functions, PostgreSQL/MySQL transactions, and durable jobs through an origin-bound browser API.

Release installers are initially unsigned. Windows SmartScreen and macOS Gatekeeper may identify them as an unknown publisher. The project does not provide scripts that bypass operating-system security controls.