Secure Guest Terminal

No Active Session

Ephemeral delegation · End-to-end encrypted · WebRTC P2P · Fully audited

Guest Requests

Yuki K.

✓ Verified · 30 min

Voice chat + file send (2GB limit)

Marcus D.

⚠ New · 15 min

File send only (500MB limit)

Stack

AuthPASETO ephemeral tokens

TransportWebRTC DTLS/SRTP

EncryptionAES-GCM + HKDF-SHA256

Chunking1MB chunks + SHA-256 manifest

RedundancyReed-Solomon 8+2 erasure

MeshIPFS-style content addressing

Accept a guest session to begin

Connection State

WebRTC ICEidleWaiting...

DTLS Tunnelidle—

DataChannelidle—

TURN RelaystandbyFallback available if P2P fails

Exec Policy

No arbitrary shell access granted. Guest-uploaded scripts require your explicit review + approval before sandboxed execution. All runs logged. Rollback available.

Tamper-Evident Audit Log

14:18:02SESSION_START

Yuki K. — Ephemeral token issued — 30min, voice+file

14:18:03WEBRTC_CONNECT

System — P2P ICE handshake complete — direct connection

14:18:07KEY_EXCHANGE

System — HKDF-SHA256 per-file key derived for design.mov

14:18:08CHUNK_UPLOAD

Yuki K. — Chunk 0/12 — AES-GCM — hash: cd1e0db4...