Security and the trust boundary
Your server is the line. See what stays inside it, what crosses it by choice, and what is not a shipped guarantee yet.
Your server is the line.
Nautilo replaces one giant co-tenant backend with infrastructure controlled by a real organization: your family, team, lab, studio, or circle. That radically shrinks the trust surface. It does not make every model call local, turn an approval dialog into encryption, or make unfinished cryptography a shipped guarantee.
Inside your server boundary
- Claimed organization serverAvailable
A server has a real owner and explicit setup states; an unclaimed instance is not treated as ready.
Evidencepackages/server/src/routes/setup-status.ts
- Operator-controlled credentialsAvailable
The operator chooses and supplies model-provider credentials instead of inheriting a mandatory Nautilo model backend.
Evidencepackages/deploy-config/src/deploy-schema.ts
- Scoped action approvalsAlpha
Tool actions can ask for once, Room, server-wide, or deny decisions and show network destinations when present.
Evidenceapps/workbench/src/components/approval-ask-dock.tsx
Crosses the boundary by choice
- Remote model inferencePartial
When you choose a hosted model, the provider receives the input needed to answer. Providers are not equally private.
Evidencepackages/agent/src/config/model-privacy.ts
- Approved network and app actionsAlpha
An Agent may act through an approved tool or network destination. The approval scope is part of the decision.
Evidenceapps/workbench/src/components/approval-ask-dock.tsx
Direction, not today's guarantee
- End-to-end encrypted Nautilo data pathIn progress
The cryptographic engine and delegation-grant foundation exist in source. The complete product path is not yet a release guarantee.
Evidencepackages/lattice-crypto/src/engine/engine.ts
- Federation between private serversPlanned
Private organizations connecting without collapsing into one shared backend is direction, not current operation.
EvidenceNo released federation path yet.
- Models on hardware you controlPlanned
Local and on-prem model execution is part of the sovereignty path, not a supported launch workflow.
EvidenceNo released local-model deployment path yet.
Text alternativeToday, organization data and operator-controlled credentials live inside a claimed Nautilo server. Hosted model inference and approved third-party actions cross that boundary by explicit choice. Product-wide end-to-end encryption is in progress; federation and local-model deployment are planned and are not current guarantees.