LIVE DEMONSTRATION

The company that runs this app cannot read what you type into it.

Below: Onyx, a real open-source enterprise AI assistant, running live under Ember Sovereign Mode — with proof a security team can check.

LIVE EVIDENCE

CHECKING LIVE…

Runs on sealed hardwareno one can see inside — not even us

The app runs inside a hardware-isolated enclave with encrypted memory. The company operating it cannot read what users type. Ember cannot see inside either — there are no runtime logs, by design.

Updates need the owner’s key

The running version is pinned to an exact fingerprint — …. A new version is a new measurement, and it runs only after the owner approves it with a security key, recorded on Base. There is no quiet-update path — not for the vendor, not for Ember.

Every change on record →

One outside service

The list is baked into the measured software identity; everything not on it is blocked by default. Approved services can read what is sent to them — this deployment permits api.anthropic.com.

Check it yourselftwo commands, no account

These rows are Ember’s own report. The trust page shows the two commands that ask the computer for its signed report and compare it with the public approval record — Ember is not in the loop. If they ever disagree, believe the public record.

Open the trust page →

DETAILS

What is Onyx?

An open-source enterprise AI assistant — chat and grounded answers over a company’s documents. What runs in the window is the project’s own services, repackaged into one measured container. Not a mock.

Onyx is an independent open-source project · onyx.app

What’s different about this deployment?

It runs inside a hardware-isolated environment governed through Ember. The company operating it cannot read what users type. Its one declared network exit is api.anthropic.com — Anthropic can read the prompts sent to it; nothing else leaves.

Why can’t I sign in inside the frame?

Browsers drop sign-in cookies inside cross-site frames — that is your browser’s protection, not a bug. Use the OPEN button on the window to use the app directly. Working credentials come with a briefing — request one.

anydomain.example OPEN ↗

FRAME PENDING A GOVERNED RELEASE

Onyx ships with clickjacking protection on, so its current configuration refuses every frame — including ours. Loosening it is a measured release the owner must approve with a security key. When that lands, the change appears on the trust page and the app appears here.

OPEN THE LIVE APP →

Sovereign Mode

HOW THIS COMPARES

	THE USUAL WAY vendor’s cloud	RUN IT YOURSELF your servers	SOVEREIGN MODETHIS PAGE
Can the vendor’s company read your data?	Yes — technically possible	Depends on support and telemetry	No — hardware and key enforced
Where it runs	The vendor’s cloud account	On your cloud account or computer	An attested confidential VM
Who controls updates	Vendor-controlled	Customer-controlled and maintained	Owner-approved, recorded on-chain
Where your data can go	Vendor-controlled	Your firewall; telemetry varies	One approved list; the rest blocked
How you check the claims	Audits and contracts	Your logs and your network	A live check anyone can run
Who operates it	The vendor	You	The vendor operates; the owner governs

Allow-listed providers receive what is sent to them — this deployment permits api.anthropic.com.

This page certifies what is running and that it was approved — not what the application does with it. The method is public: the whitepaper · the trust page.