# How Matlock Keeps Your Code & Computer Safe — Matlock

One native desktop window (v1.0) running 100% on your CPU (plus client-side Browser WASM & read-only /en/app): zero localhost ports, tamper-evident Safeguards and Test Integrity seals outside your repo, and account-free offline cryptographic licensing.

## 1. Four Verifiable Binary Trust Proofs — Zero Localhost Servers & Zero Open Ports
Matlock — Agent & Developer Tools provides four verifiable binary trust proofs: (1) zero-install in-browser WebAssembly sandbox first (0 bytes sent to Matlock), (2) published SHA256SUMS manifests and Microsoft Store signed MSIX (App ID 9P5VNWVWLM4N), (3) 0 listening network ports (verify via netstat -ano) and 0 background daemons on exit, and (4) MATLOCK_OFFLINE=1 strict air-gap mode. Native desktop builds and display-free headless matlock-mcp (Linux x64, Windows x64, macOS arm64 with 27 stdio tools, plus Browser WASM / Web Command Center scans at /en/app) start no localhost HTTP server, open no WebSocket listener, embed no browser WebView, and install zero git hooks.

## 2. Safeguard, Test Integrity Removed-Test Records & Passphrase-Sealed Sync
All built-in verification checks across 10 language ecosystems and Cross-OS Pre-CI are compiled into the binary and ignore inline // ignore or /* nolint */ comments. Your custom tests, saved Actions, Sequences, Alert chips, and referenced scripts live in private local application storage outside your repository and are protected by cryptographic integrity seals; items set to "Safeguarded" stay Read & Run Only, holding unauthorized edits for "Restore previous version" or "Accept". Test Integrity & 3-Gate Safeguard Qualification keep a sealed test baseline and snapshot vault of your verified tests outside the repository: on Desktop, any removed, skipped, or weakened test leaves a removed-test record that counts against the verdict until a person resolves it (optional Restore and optional Auto-revert tampered Safeguarded tests on runs are both off by default, desktop-only, and person-only), while in Headless AI Agent mode (--headless), tampered verified Safeguarded tests automatically roll back from your local snapshot vault with an undo backup and halt the run. Sync across my computers (Pro, off by default) writes passphrase-sealed files authenticated over removed-test records, tamper-evident digests, and counts only — zero source or test text, and zero network connections opened by Matlock. Honest limit: same-user OS processes have OS permission to write user-profile files on disk; Safeguard and Test Integrity detect and refuse unauthorized edits before execution rather than physically blocking same-user disk writes.

## 3. Up-Front Human Approval & Contained Background Processes
Whenever an AI assistant connected over local stdio MCP creates or edits an Action, Matlock sets "Ask me before this runs" automatically without interrupting you while saving. Before Step 1 of that Action or Walk-Away Sequence runs, Matlock asks once up front ([Approve & Run] / [Deny Action], with an option to Safeguard the card against future AI edits). Every command runs inside an isolated OS process group under your standard user account with stdin closed and zero privilege elevation — so clicking Stop or closing Matlock ends the entire process tree cleanly.

## 4. Account-Free Offline Cryptographic Licensing & First-Run Gate
On first launch, Matlock stays locked until you confirm Age 16+ eligibility, EULA and Privacy acceptance, EAR/OFAC export compliance, and local folder scan permission (on Desktop, Matlock only reads your project by default unless you turn on person-approved Restore or Auto-revert tampered Safeguarded tests on runs; in Headless AI Agent mode, tampered verified Safeguarded tests roll back automatically from your local snapshot vault with an undo backup). Matlock Pro ($24.99 USD / year prepaid, zero auto-renewal; settled via Pay by Card with MoonPay & Transak, guided PayPal PYUSD, or zero-fee Solana USDC, Base USDC, and Polygon USDC on /en/pricing or in-app), local clock verification, and compiled revocation list (the website has no sign-in and no Pro unlock; autonomous --headless agents unlock via $24.99 USD/year Pro or autonomous agent swarm M2M metered access in the MCP Agent Catalog at /en/agents). The app ships only public verification keys — never a private signing secret.

## 5. Reporting a Security Vulnerability (RFC 9116)
For general inquiries, billing notes, or non-security bug reports, please use our private Support Box at /en/contact/. If you find a security issue in Matlock v1.0.x or matlock.dutchp2p.com, please email dutch@dutchp2p.com privately with [SECURITY] in the subject line or submit a private report via GitHub Security Advisories at https://github.com/Dutchp2p/matlock-public/security/advisories/new (see /.well-known/security.txt) rather than opening a public issue. We target acknowledgement within 72 hours (3 business days), initial triage within 10 business days, patches within 30 days for confirmed Critical / High vulnerabilities (90 days for Medium / Low), and a 90-day coordinated disclosure window with good-faith safe harbor.

- RFC 9116 Disclosure Policy: https://matlock.dutchp2p.com/.well-known/security.txt