Security

Backend-authoritative trust.

Real money flows through the server. The launcher renders the result, never decides it. Secrets stay on your machine. Builds are signed.

Authority by domain

Who owns the truth for each domain in the launcher.

Domain	Client	Realtime	Server
Identity	observed	event source	authoritative
Ownership	observed	event source	authoritative
Library state	authoritative	—	—
Payment	observed	—	authoritative
Refund	observed	event source	authoritative
AI conversations	authoritative (BYOK)	—	— (unless opt-in)
Tokens	encrypted storage	—	issuer

01
Backend is authoritative
Real money flows through the server. The launcher renders the result, never decides it.
02
Client state is observed
Install / launch / path / runtime state is local; entitlement state is server.
03
Secrets stay on your machine
Tokens in flutter_secure_storage (DPAPI on Windows). AI keys never leave the client.
04
BYOK for AI
Your provider, your bill, your data. Eternia doesn't sit between you and the model.
05
Signed installers
Builds are signed by Arcadia Labs. SHA256 checksums published on /download.