ConsilienceSecurity
Your second brain stays on your device: notes, the knowledge graph, and the search index never leave it. What does leave is the text an AI call acts on — it passes through our metering proxy, which relays without storing the content, to the model provider that runs extraction and answering. Consilience's local-first design shrinks your exposure from the very start.
Five defaults that keep everything on your device. Not security you have to turn on — security that's there from the start.
Your notes are plain Markdown files. The knowledge graph sits right beside them as portable standard-format files, and the search index lives in your device's search index and graph store. No cloud sync — it all stays on your device.
Web search and external page fetching are off by default. Even when you turn them on, external content is treated as untrusted web content. It goes through your review before anything is learned into the knowledge graph.
Builds ship signed. Auto-updates only accept releases that pass signature verification. Only code from a verified source ever runs.
Previews in the design canvas render in a sandboxed environment. Generated content can't run arbitrary code.
Every change — creating notes, editing files, running commands — sits behind approvals on your terms. You approve before the agent touches anything.
Most security incidents start with where data lives, the paths it travels, and the permissions that touch it. Consilience narrows all three. Notes live in Markdown files on your device, the knowledge graph sits beside them as graph files next to your notes, and the search index lives in your device's search index. Anything that can be rebuilt is rebuilt from your own writing, so there's no central copy to sync in the first place. Web access is off by default, so the surface that touches the outside world only opens when you turn it on.
When the agent remembers something — when it learns from experience and leaves a note behind — that note is stamped in the knowledge graph with its agent provenance. That means who learned what, and from where, stays recorded in the graph. Learning that involved untrusted web content waits behind your review. Every kept note is something you can look over and decide to keep or discard, right in the review screen. Memory with provenance, checked.
Found a vulnerability? For responsible disclosure, please report it to hello@consilience.md. We'll confirm and respond quickly.
Ask us anything — architecture, data handling, responsible disclosure. We answer transparently, even in private beta.