Skip to content

Security and privacy · promise

Your building works without the cloud.

PlannedPhase 3

The promise

A self-hosted Archipelago does everything with the WAN unplugged. The whole test suite will run with the network turned off.

What is implemented

  • Nothing yet: there is no release.

What is planned

  • A network-denied CI run: the full edge test suite inside a Linux network namespace with loopback only; any outbound socket fails the build.
  • An egress tripwire in unit tests: socket connect, DNS lookup and fetch throw unless a test allows a loopback address.
  • A WAN-outage scenario test: start the edge with a connector, import, cut the default route, assert the UI, API, MCP and history queries still answer.
  • No update check, crash reporter or analytics. Updates are a manual download with a checksum.

How to check it yourself

  • When the edge ships: run the test suite with unshare -rn on Linux, or in a container with --network none.
  • Watch the box with tcpdump while you use it. The only traffic should be to the connectors you configured.

Found a gap between this page and the software? Tell us. A promise we cannot keep gets rewritten, not defended.

All promises