Privacy
The Dojo is local-first. Source code, diffs, prompts, command logs, environment values, credentials, journal prose, and model compute stay local by default. The cloud stores only identity, entitlement, privacy-safe progression, and owner-approved publication metadata.
The companion refresh token is stored in your macOS Keychain and never persisted in the repository, event logs, browser storage, or cloud tables.