Highlights
- Secure
uv run restork provider configureentry backed by the native macOS Keychain prompt - Offline-by-default
restork doctor, explicit bounded/modelscheck, and fixed public low-token smoke test - Bilingual responsive Model access card with no browser API-key field
- Safe status, latency, request-ID, and token metadata without completion-body rendering
- Complete English and Chinese setup, operations, security, and troubleshooting guidance
Privacy
The API key never enters browser input, TOML, shell arguments, environment variables, SQLite, events, logs, or release artifacts. Provider diagnostics send no Vault, memory, task, Profile, location, calendar, playlist, or daily-context content. Public tests and media remain synthetic and make no live model request.
Verification
The release commit passed 237 Python tests, 27 Dashboard tests, all release-blocking security/privacy/recovery gates, public Git-history scanning, Python/JavaScript/Actions CodeQL, desktop and 390px browser QA, and reproducible package inspection.