Syntheon Local is designed so remote AI can request work, but the paired computer remains the authority boundary.
Filesystem operations are restricted to roots explicitly trusted by the human on-device. Secret paths are blocked.
Remote AI cannot elevate the local permission mode or add trusted roots.
Commands are structured with shell interpolation disabled by default. Output is bounded and token-like secrets are redacted.
Supported file mutations create local receipts and safe-delete uses a private rollback vault.