Safety & Privacy

• Permission Modes explains shared approval settings and tool boundaries.
• Credentials & Local Data covers credentials, transcripts, memory, documents, output versions, browser data, and mobile pairing.
• Identity Vault provides private profiles and documents with exact review before release.
• Native Computer Control describes optional foreground Mac interaction.
• Network Proxies covers route profiles, strict tunnel settings, and failover.
• Agents & Automation explains saved agents, triggers, connected-service action grants, and approvals.
• Workspace Knowledge & Memory explains reviewed recall, submission inspection, optional local embeddings, and restore-protection limits.
• SSH & Remote Runtimes explains selected credential provisioning, host trust, and explicit transfer of project snapshots.

Hosted providers receive the prompts and context sent through their selected accounts. Local Ollama is the default. Adding context, selecting an Agent or team, or connecting a source does not grant unlimited file or service access.

Your companion is a presentation of the saved agent. Choosing or saving its character does not start work, grant access, or enable memory collection. Custom image generation sends a description only after the explicit Generate action.

Standard Locus is wallet-free. Cryptocurrency wallet functionality belongs to the separate LocusX edition. Installing Locus does not import or delete old wallet data. Identity Vault and Browser Autofill are distinct features with their own controls.

Independent execution expands where selected work and credentials are stored. It is opt-in and includes the local background helper or remote host in your trust boundary. A disconnected desktop does not approve decisions; remote results require explicit selection before local application. Reusable Checks also require explicit proposal review and approval; corrections are not automatically turned into rules.