Security & Capability Gating

Principles of sovereign execution and permission boundaries in VIKI.

1. Air-Gapped Privacy

When VIKI_AIR_GAP=1 is set, all outbound web requests and DNS lookups are blocked. Reasoning is confined 100% to local hardware.

2. Capability Gating

High-risk actions (filesystem mutation, shell command execution, network requests) must pass through explicit confirmation gates managed by the Capability Registry.

3. Prompt Injection Defense

All incoming external web pages, attachments, and tool outputs are sanitized before entering the ReAct deliberation context.