Skip to content
GHOSTHREAD AI
Security Model

Five layers between your machine and any mistake

Ghosthread does something no other AI automation tool does: it assumes things can go wrong, and it enforces safety at the executor level — the deepest layer of the app. Even if the AI's reasoning goes sideways, these boundaries hold.

01

System folder protection

What it protects: C:\Windows, System32, Program Files, and every other OS-critical directory. Ghosthread cannot write to, delete from, or modify anything in these paths. Ever. Not through a direct request, not through a saved command, not through a chained automation.

How: Every file operation is checked against a hardened path jail before execution. The check runs at the deepest layer of the app — after the AI has finished reasoning, immediately before the operating system is touched. It's a physical barrier, not a policy the AI can argue around.

02

Dangerous command barrier

What it stops: Drive formatting, disk wiping, partition initialization, recursive system deletion, shutdown commands triggered by the AI, download-and-execute pipelines, and other operations that can brick a machine.

How: Every command the engine is about to run through PowerShell or the command shell passes through a tokenizer-aware pattern barrier. This barrier scans for known destructive signatures, and any match aborts the command before a single byte reaches the OS. It applies equally to commands the AI generates and commands a user asks for.

03

Outbound privacy filter

What it protects: Your private file paths, API keys, environment tokens, secrets in code, and any other sensitive string that shouldn't leave your device. Even when Ghosthread needs cloud reasoning for a complex task, these never get sent.

How: Every outbound payload is scanned by a data-loss-prevention filter before transmission. The filter matches Windows paths, cloud API key formats, `.env` style tokens, and private key headers — and scrubs any match from the payload before it leaves your machine. The cloud brain receives intent and context, never raw data.

04

Recycle Bin routing

What it protects: Every file Ghosthread removes — organized, renamed, or cleaned up — goes through the Windows Recycle Bin. Nothing is ever permanently destroyed by the engine.

How: File removal routes through the native Windows shell API with the "allow undo" flag set. The result is indistinguishable from you right-clicking a file and choosing "Delete" — you can restore anything with a single right-click, for as long as it stays in the Recycle Bin.

05

Communication tripwires

What it stops: Ghosthread replying on your behalf to messages involving money, banking details, one-time passwords, credit cards, legal matters, or urgent distress. These are all held back for you to handle personally.

How: Every incoming message is scanned against a fixed pattern set before any reply is drafted. Financial, credential, and legal/crisis patterns trigger an automatic hold — the message stays unread in your chat, and Ghosthread moves on. Even if the AI thinks a reply would be fine, the tripwire overrides it.

The core principle

Safety in Ghosthread isn't a feature added on top of the AI. It's a layer beneath the AI — a boundary the AI runs against, not a rule it agrees to follow.

This is the difference between an AI that says "I promise I won't delete your files" and an AI that literally cannot delete your files even if it wanted to. We built the second kind.

Data Residency

Where your data actually lives

✓
Your memories, preferences, and history

Stored in an encrypted local database on your own drive. Never transmitted. Never backed up to our servers (we don't have any that touch your data).

✓
Your API keys and credentials

Stay on your machine. Ghosthread uses them to make calls on your behalf, but never sends them anywhere except to the service they belong to.

✓
Your files and screenshots

Read locally. When cloud reasoning is needed, only the specific minimal context is sent — and always after the privacy filter scrubs anything sensitive.

✓
Air-gap mode

One switch cuts off all internet access. Ghosthread runs entirely offline on local rules and local logic. Nothing leaves your machine, period.

Found a vulnerability?

We credit every valid security report publicly and ship a swag pack. This is the fastest way to make Ghosthread stronger.

Report to [email protected]

A note about this website

The website you're reading now uses industry-standard transport encryption, hashed admin credentials with bcrypt, signed session cookies, and CSRF protection on all state-changing endpoints. That's the baseline we hold ourselves to on the web side. But the security that matters most for Ghosthread is what happens on your machine — and that's the five-layer model described above.