Security
Your node decides what leaves.
Keys for who gets in. Grants for what they see. You hold the line.
Cognitive Firewall
The part of your node that decides what gets seen.
Every request — person, app, or AI — hits the gauntlet before anything leaves. The firewall runs on a minimum disclosure rule — only exactly what’s needed. Filters run on your node from the permissions you set. Never from the asker’s app.
Permission
No key for this asker, this data, this question? Refused before retrieval.
Negotiation
Too broad? Narrow the ask — or get nothing.
Disclosure
Only the protected form, filtered — never a dump.
Minimizer
A final pass that can only remove facts.
Uncertain? Fail closed.
Who
No key, no entry.
Hand a key to a person, an agent, an app. Same rules. Same ledger. Without a key, nothing gets through.
- People and AIs.You decide who holds a key.
- One click to revoke.Access gone before the next read.
What
A key gets them to the door. Grants decide what walks out.
Who is not what. Given a key, your node — with the grants you set — decides what they actually see.
As data enters, a protected copy is written next to the raw record. You see raw. People you share with get the protected form — because it exists before anyone asks.
Records still awaiting processing can’t be shared — fails closed.
On your node
Built where your data lives.
Your database. Your machine or your infra. Access, filters, and the ledger all run there — not in someone else’s app.
Watch reads and writes per key. Nothing touches your data silently.
145 adversarial probes before every release. One leak blocks the ship.
Get yours
Hold the keys. Run the node.
Issue, scope, watch, revoke — on infrastructure you own.
enter TOPOS