What travels where

What travels where

• End-to-end encrypted. The app and the hub share a key from the pairing link. Requests go through the Palmtop relay at priorstates.com, which passes on ciphertext it cannot read, so it works from anywhere without opening a port on your computer.
• Your own login. The hub runs your coding agent with the sign-in already on that computer; no credential is copied anywhere.
• Only what the app sends. For Resume Writer that is the document, your career facts and your request; for Palmtop, the app you are building.
• AI requests get text answers only. Since 0.2.2 the hub runs your agent for them with its tools off (or read-only), in an empty folder, so a request cannot read your files or run commands. The switch Answer AI requests from PriorStates apps in the hub turns them off altogether.
• Anyone with the pairing link can use the hub — treat it like a password. To cut everyone off, press New key… in the hub's pairing card; every phone and browser then pairs again.