FAQ

FAQ

Is this open source? No, and the repository says so up front. The source is published under the PolyForm Strict License 1.0.0: you may read it and use it for noncommercial purposes — including rebuilding it to verify what ships — but not redistribute it, modify it, or build on it. Commercial use needs a separate licence (info@sonomos.ai).

Why publish the source at all, then? Because a privacy product's central claims should be checkable, not taken on faith. Anyone can verify that the extension talks only to 127.0.0.1, ships zero third-party code, and builds reproducibly. Transparency is the goal; reuse isn't.

Can I contribute? Pull requests can't be accepted — there's no contributor agreement, and the licence has no contribution path. Bug reports and security reports are genuinely welcome and need no licence: Issues and SECURITY.md.

Does the extension send my prompts to Sonomos? No. Its only network destination is the Locke desktop app on your own machine (127.0.0.1). That's enforced by CI on every change, and checkable in the source. Screening happens on-device.

What does the extension cover? Bodied requests to the catalogued AI web apps and AI-answering search engines, including attachment uploads. The complete list ships in the extension and is visible in this repository.

What does it NOT cover? HONEST.md is the maintained answer — WebSocket traffic, address-bar prompts, and other documented gaps. It exists so silence never implies completeness.

Why does the extension need the desktop app? All detection and redaction live in the desktop app. The extension is deliberately a thin hold-and-enforce layer with no scanning logic of its own — which keeps the piece that runs inside your browser small and auditable.

Where do the desktop app's own questions go? The desktop app is a separate product, distributed from sonomos.ai/locke. Guides for both together: support.sonomos.ai. Security and trust: trust.sonomos.ai.

Who is behind this? Sonomos, Inc. — building on-device privacy tooling for the AI era.