Private admin layer
Consent Ledger
Local V0 for governance, consent, schema readiness, billing and deploy preparation. No external service is connected here.
Wearable consent rules
No camera, mic or sensor capture without explicit user action and consent.
No always-on recording, hidden capture, biometric inference or health inference in V0.
Capabilities are architecture placeholders until SDK/source-card verification.
Device data never crosses workspace boundaries without consent and audit.