1. Local-First Isolation Architecture
Hyperion desktop applications (apps/native) are built using Tauri 2 with a Rust-backed system webview. Your local source code, workspace files, and Git repositories never leave your device.
2. Sandboxed AI Command Execution
Hyperion safeguards your codebase when running parallel AI agent swarms:
- Git Worktree Isolation: Parallel agents operate in separate, temporary Git worktree branches so master/main branches are never altered without review.
- Permission Guards: Potentially destructive system commands require interactive user approval prior to execution.
- Local Previews: Live previews run strictly against local dev server ports.
3. Credential & Key Encryption
API tokens for LLM providers (e.g., OpenAI, Anthropic, Gemini) are stored using native OS keychain infrastructure (macOS Keychain, Windows Credential Manager, Linux Secret Service). Keys are never written to plain text configuration files or transmitted to telemetry endpoints.
4. Vulnerability Disclosure & Audits
We welcome security research from the community. If you identify a potential security issue in Hyperion or our dependencies, please file a security advisory on GitHub or report it directly to our maintainers at https://github.com/Hyperion-Workspace/Hyperion/issues.