1. Local-First Isolation Architecture
Marshell desktop applications (apps/native) are built using Tauri 2 with a Rust-backed system webview. Your local source code, workspace files, and Git repositories never leave your device.
2. Sandboxed AI Command Execution
Marshell safeguards your codebase when running parallel AI agent swarms:
- Git Worktree Isolation: Parallel agents operate in separate, temporary Git worktree branches so master/main branches are never altered without review.
- Permission Guards: Potentially destructive system commands require interactive user approval prior to execution.
- Local Previews: Live previews run strictly against local dev server ports.
3. Credential & Key Encryption
API tokens for LLM providers (e.g., OpenAI, Anthropic, Gemini) are stored using native OS keychain infrastructure (macOS Keychain, Windows Credential Manager, Linux Secret Service). Keys are never written to plain text configuration files or transmitted to telemetry endpoints.
4. Vulnerability Disclosure & Audits
We welcome security research from the community. If you identify a potential security issue in Marshell or our dependencies, please file a security advisory on GitHub or report it directly to our maintainers at https://github.com/Hyperion-Workspace/Hyperion/issues.