Securing the app

Securing the app

Tome can lock itself so your workspace isn't open to whoever sits down at the machine.

App login

• Set a passphrase; Tome locks at launch.
• Unlock with Touch ID or your passphrase.
• Add an authenticator (TOTP) as a second factor — unlock then needs your passphrase/Touch ID plus the code.

The lock is enforced in the main process, not just painted on the UI.

Relocking

Egress unlocks and the app session can be set to relock after a deadline, so an unattended machine doesn't stay unlocked.

Threat model

The full security invariants — what the sandbox can and can't do, the egress proxy, and the confused-deputy loop between scrollback and tool calls — are in docs/THREATMODEL.md in the repository.