U

Field Seal

Owner-only phone desk. Your key is checked once, then held in an HttpOnly session — not left in the browser.

Failed attempts lock this device path. Logins are audited. After the first seal you can unlock with a device passkey — AI keys stay on the server.

U
UMBRA Phone desk
Offline

Capability library

Same GitHub research shelf as the desktop desk. Umbra auto-picks from this when you ask in chat — no slash commands.

Work

One Umbra desk — coding, research, and tasks all run from Chat. Use these only to inspect status.

System Status

Live stage, inference roles, and health — same signals the desktop app reads.

Settings

Session login replaces storing the owner key in the phone. Same-origin by default.

Barrier: HttpOnly cookie + CSRF + passkey + lockout + audit. Provider keys stay on Umbra.