Features

Every layer built with sovereignty in mind. Nothing phoning home. Nothing hidden.

Phase 2 — The Wall

Six interlocking security shields, all active by default. No opt-in required.

🚫

Ad & Tracker Blocker

Powered by adblock-rust with EasyList and EasyPrivacy. Custom rules merge cleanly with base lists. Filter caches refresh every 24 hours.

🔒

HTTPS Guard

Automatic HTTP-to-HTTPS upgrades for every request. Per-domain exceptions for local dev. RFC 1918 private ranges correctly exempted.

🌐

DNS-over-HTTPS

Encrypted DNS via Quad9, Cloudflare, Mullvad, or AdGuard. Strict mode with automatic fallback. Your ISP never sees your queries.

📜

Script Controls

Per-domain allow, block, or first-party-only policies. MutationObserver injection blocks dynamic script loading. Full control over what executes.

🕵

Fingerprint Guardian

Overrides Canvas, WebGL, Navigator, Screen, AudioContext, and Font enumeration APIs with per-session dummy data. Every session looks different.

🍪

Cookie Shield

Automatically dismisses cookie consent banners based on your LREM privacy mode — reject-all or necessary-only. No manual clicking.

Password Vault

Argon2id key derivation + ChaCha20-Poly1305 encryption. Per-entry encryption in SQLite. SHA3-256 key derivation. 21 passing tests. Your credentials never leave the vault unencrypted.

Phase 3 — Consent Architecture

Consent is not a popup you dismiss. It's the structural foundation of every permission.

🎯

Nine-Fold Dialog

High/Critical permissions go through 9 layers: Awareness, Understanding, Consequences, Alternatives, Revocability, Duration, Scope, Witness, Affirmation.

🔄

Instant Revocation

Revoke a single permission, everything for a domain, or hit the panic button to revoke all permissions globally. One click.

📓

Consent Audit Log

Append-only JSONL log of every permission decision. Filter by domain, action, or date. Full historical viewing in the browser.

Phase 4 — Transparency

If you can't verify it, you can't trust it.

🧬

Self-Hash Verification

SHA3-512 hash of the running binary. Compare against published hashes on this site to verify your build is untampered.

📡

Network Log

On-demand real-time network logging. See every domain your browser contacts. JSONL export. Active connection count in the Guardian status bar.

🏭

Build Provenance

Git commit, branch, timestamp, Rust compiler version, target triple — all baked into the binary at compile time. Viewable in Help > About.

Phase 5 — Intelligence

AI assistance that respects data locality. Local by default, remote only with corridor consent.

🏠

Local-First AI

Ollama and LM Studio — both localhost-only (the code panics on remote URLs). Your prompts and context never leave your machine unless you explicitly open a corridor.

🚪

Corridor Model

Remote AI (Claude API) is behind a corridor gate. Checked on every single request. No-training header sent automatically. API key never logged.

🧹

Context Sanitization

URLs stripped of tokens, keys, and session IDs. Text scanned for passwords, SSNs, and card numbers before any data exits. 32K character limit on context.

Phase 5.5 — Voice

Rust-native document reading. Six neural voices, zero cloud dependency.

🎙

Piper TTS

Lightweight neural TTS with ONNX models. CPU-only, low latency. Voices downloaded once and cached locally at ~/.limen/voices/.

📖

Limen Reader

Native iced document reader. Loads .txt and .md files. Sentence splitting, click-to-jump, auto-advance playback. Full keyboard control.

🎵

Six Curated Voices

Amy, Lessac, Ryan, Joe, Alan, Alba — all medium quality, Apache 2.0 licensed. Pick your voice and reading speed per session.

ZkME Gateway

Your browser is also your portal to Momentum Engine — a ZkSync Era L2 running over WireGuard.

Chain Dashboard

Native iced view showing L2 block number, batch status, protocol version, operator address, RPC latency, and diamond proxy — all fetched via JSON-RPC.

🔌

WireGuard Corridor

Three-layer consent: consent_gate.ok, ZkME corridor toggle, wg0 interface must be up. Zero traffic without explicit user intent.

🔎

Block Explorer

Navigate directly to the Momentum Engine block explorer, contract verifier, and bridge portal — all consent-gated and routed through wg0.

Roadmap

Built in phases, each one a complete layer of sovereignty.

COMPLETE

Phase 0 — Gate

Consent gate, LREM privacy prompt, initial boot.

COMPLETE

Phase 1 — Navigation

Tabs, history, bookmarks, sovereignty report, export.

COMPLETE

Phase 2 — The Wall

Ad blocking, HTTPS, DoH, script controls, fingerprint guard, cookie shield, vault.

COMPLETE

Phase 3 — Consent Architecture

Nine-Fold dialog, revocation, audit log. 34 tests.

COMPLETE

Phase 4 — Transparency

Self-hash, network log, build provenance, Nix reproducible builds.

COMPLETE

Phase 5 — Intelligence

Local AI (Ollama/LM Studio), corridor-gated Claude API, context sanitization.

COMPLETE

Phase 5.5 — Voice

Piper TTS, native iced Reader, six neural voices.

NEXT

Phase 6 — FlameNet Mesh

Trinity Keys, corridor sessions, scroll verification, 9-layer consent spiral, VPN/Tor corridor.

PLANNED

Phase 7 — Extensions

WASM/JS add-ons, manifest signing, browser import.

PLANNED

Phase 8 — Deep Network

TLS/JA3 fingerprinting, HTTP header order, TCP/IP fingerprinting, ECH.