Trust & Safety

How RinaWarp keeps developer work inspectable.

RinaWarp is built for real repositories, real commands, and real verification. The product should show what it inspected, ask before high-impact changes, and keep proof attached to every repair.

Current production status

Linux production candidate. macOS and Windows pending.

The current public release is available for Linux as a checksum-verified .deb and AppImage. macOS and Windows are pending signed, notarized, and smoke-tested installers before they return to the download page.

Local-first execution

RinaWarp runs developer work from the selected workspace and keeps repository inspection tied to the local project context.

Workspace boundaries

Repairs should stay scoped to the project you opened. High-impact actions must be visible before they run.

Approval before mutation

File changes, install steps, and risky commands should require clear approval instead of happening silently.

Rollback and recovery

Repair work should preserve a recovery path so developers can understand and undo changes when a fix is not right.

Proof-backed results

Build, test, and health-check output should stay attached to the repair so success is evidence-based.

Secret redaction

Logs and telemetry should avoid secrets, tokens, file contents, command output, and private paths unless they are safely redacted or hashed.

Memory and data controls

Local memory should help RinaWarp remember project context without turning private code into a public profile. Cloud sync is optional, not the default. Developers should be able to export or delete saved memory.

Marketplace permissions

Capability packs need a manifest, publisher, version, permissions, risk level, install approval, disable control, changelog, and proof of what ran. Packs should not bypass Agent Thread, policy, execution, verification, and proof.

Download verification

Installers are linked through public release metadata and checksums. If the SHA256 checksum does not match the published file, do not run the installer.

Verify downloads

Privacy-safe telemetry

RinaWarp should measure activation events like install, first launch, first scan, first proof, fix approval, proof export, marketplace install, memory saved, memory cleared, and crash report creation. It should not collect source files, terminal output, secrets, tokens, or private paths.

Read privacy policy