Five layers between your machine and any mistake
Ghosthread does something no other AI automation tool does: it assumes things can go wrong, and it enforces safety at the executor level — the deepest layer of the app. Even if the AI's reasoning goes sideways, these boundaries hold.
System folder protection
What it protects: C:\Windows, System32, Program Files, and every other OS-critical directory. Ghosthread cannot write to, delete from, or modify anything in these paths. Ever. Not through a direct request, not through a saved command, not through a chained automation.
How: Every file operation is checked against a hardened path jail before execution. The check runs at the deepest layer of the app — after the AI has finished reasoning, immediately before the operating system is touched. It's a physical barrier, not a policy the AI can argue around.
Dangerous command barrier
What it stops: Drive formatting, disk wiping, partition initialization, recursive system deletion, shutdown commands triggered by the AI, download-and-execute pipelines, and other operations that can brick a machine.
How: Every command the engine is about to run through PowerShell or the command shell passes through a tokenizer-aware pattern barrier. This barrier scans for known destructive signatures, and any match aborts the command before a single byte reaches the OS. It applies equally to commands the AI generates and commands a user asks for.
Outbound privacy filter
What it protects: Your private file paths, API keys, environment tokens, secrets in code, and any other sensitive string that shouldn't leave your device. Even when Ghosthread needs cloud reasoning for a complex task, these never get sent.
How: Every outbound payload is scanned by a data-loss-prevention filter before transmission. The filter matches Windows paths, cloud API key formats, `.env` style tokens, and private key headers — and scrubs any match from the payload before it leaves your machine. The cloud brain receives intent and context, never raw data.
Recycle Bin routing
What it protects: Every file Ghosthread removes — organized, renamed, or cleaned up — goes through the Windows Recycle Bin. Nothing is ever permanently destroyed by the engine.
How: File removal routes through the native Windows shell API with the "allow undo" flag set. The result is indistinguishable from you right-clicking a file and choosing "Delete" — you can restore anything with a single right-click, for as long as it stays in the Recycle Bin.
Communication tripwires
What it stops: Ghosthread replying on your behalf to messages involving money, banking details, one-time passwords, credit cards, legal matters, or urgent distress. These are all held back for you to handle personally.
How: Every incoming message is scanned against a fixed pattern set before any reply is drafted. Financial, credential, and legal/crisis patterns trigger an automatic hold — the message stays unread in your chat, and Ghosthread moves on. Even if the AI thinks a reply would be fine, the tripwire overrides it.
The core principle
Safety in Ghosthread isn't a feature added on top of the AI. It's a layer beneath the AI — a boundary the AI runs against, not a rule it agrees to follow.
This is the difference between an AI that says "I promise I won't delete your files" and an AI that literally cannot delete your files even if it wanted to. We built the second kind.
Where your data actually lives
Stored in an encrypted local database on your own drive. Never transmitted. Never backed up to our servers (we don't have any that touch your data).
Stay on your machine. Ghosthread uses them to make calls on your behalf, but never sends them anywhere except to the service they belong to.
Read locally. When cloud reasoning is needed, only the specific minimal context is sent — and always after the privacy filter scrubs anything sensitive.
One switch cuts off all internet access. Ghosthread runs entirely offline on local rules and local logic. Nothing leaves your machine, period.
Found a vulnerability?
We credit every valid security report publicly and ship a swag pack. This is the fastest way to make Ghosthread stronger.
Report to [email protected]A note about this website
The website you're reading now uses industry-standard transport encryption, hashed admin credentials with bcrypt, signed session cookies, and CSRF protection on all state-changing endpoints. That's the baseline we hold ourselves to on the web side. But the security that matters most for Ghosthread is what happens on your machine — and that's the five-layer model described above.