Security and privacy · promise
Your building works without the cloud.
PlannedPhase 3
The promise
A self-hosted Archipelago does everything with the WAN unplugged. The whole test suite will run with the network turned off.
What is implemented
- Nothing yet: there is no release.
What is planned
- A network-denied CI run: the full edge test suite inside a Linux network namespace with loopback only; any outbound socket fails the build.
- An egress tripwire in unit tests: socket connect, DNS lookup and fetch throw unless a test allows a loopback address.
- A WAN-outage scenario test: start the edge with a connector, import, cut the default route, assert the UI, API, MCP and history queries still answer.
- No update check, crash reporter or analytics. Updates are a manual download with a checksum.
How to check it yourself
- When the edge ships: run the test suite with
unshare -rnon Linux, or in a container with--network none. - Watch the box with
tcpdumpwhile you use it. The only traffic should be to the connectors you configured.
Found a gap between this page and the software? Tell us. A promise we cannot keep gets rewritten, not defended.