SOLI DEO GLORIA

THE HOM3 ETHOS

not a manifesto -- a set of claims the code can keep. each tenet names the mechanism that holds it; the badges below are live.

gathering evidence…

01FOR HEAVEN'S SAKE

We offer our work upward. It is not about self-promotion, ego, or decoration -- every screen and creation starts with the intention of pointing to something higher than ourselves.

HELD BY · the blessing banner on every rendered page; the first-run gate

02SOVEREIGNTY

Sovereignty is not a promise we make -- it is how the system is constructed. Nothing leaves your device or gets shared unless you explicitly allow it. Your control is protected by the architecture itself, not by trust.

HELD BY · egress_guard.check() as the single chokepoint; net.py guarded clients; the airgap CSP

03WORKS ON YOUR DEVICE FIRST

The system is designed to run locally and offline. Your models, data, and tools stay with you -- self-contained and usable even without an internet connection. Core functions do not depend on the cloud.

HELD BY · vendored wheels; DE440s ephemeris; starcat_v2 (193 stars, shipped frozen)

04ASK BEFORE ANYTHING LEAVES

Nothing gets out or accessed externally without your clear, deliberate permission. Sharing or opening doors to the outside is always a conscious, signed action -- never automatic or hidden.

HELD BY · home_web_allow/v1; portal_session/v1 (origin + timestamps only)

05KEEP COMMANDS SAFE AND LIMITED

The interface only lets you do specific, approved actions. You cannot type arbitrary instructions or run dangerous operations through text. The system protects you by intentionally limiting what words can trigger.

HELD BY · the plainspeak seam; argv-only lowering (shell=False); command_exec/v1 attested AFTER with the real exit code

06SUGGESTIONS NEED YOUR APPROVAL

The AI or system can propose ideas, but proposals do not equal permission to act. Important decisions and changes always require your explicit confirmation. You stay the final authority.

HELD BY · propose/confirm on every mutating surface; the SAF3 seam (A2: no execution on propose, A3: no attest without confirm)

07TAMPERING LEAVES A TRACE

If someone tries to alter records or the system, it will be visible and logged. We use transparent, tamper-evident records (like blockchain timestamps) so changes cannot happen in secret -- though we do not claim the system is impossible to break.

HELD BY · the signed logbook; the celestial witness; OpenTimestamps anchors

08PROTECT HISTORY AND DATA

The system will not secretly overwrite, delete, or clobber your important information, settings, or past work. Changes are handled carefully, with respect for what you have already created and the ability to recover it.

HELD BY · update.ps1 discipline; atomic tmp+replace writes; starcat v1 -> v2 side-by-side; plainspeak trash/undo

09BE HONEST ABOUT LIMITATIONS

We label capabilities truthfully. If something is best-effort, partial, degraded, or still in progress, we say so clearly. No hype, no hidden weaknesses, no overselling what it can actually do. To the best of our ability, honestly.

HELD BY · the portal containment badge; graceful skyfield degrade messages; disclosed residuals in the containment spec

10GROUND TRUTH IN REALITY

Important calculations and reference points are based on your actual location and local data -- not on what some distant server or authority claims. Your real-world position and context matter and are respected by the system.

HELD BY · celestial + stars endpoints (alt/az out, coordinates never); location.json stays local

11YOU ARE CAPTAIN

The human operator is the highest privilege and the central decision-maker by design. The technology exists to serve you in the loop -- not to replace your judgment or take control away from you.

HELD BY · the office lock; session signers; every CONFIRM button in the house