Part VI — Network, Privacy and Versions
This part covers Chapters 25–27: the network access manifest, privacy and telemetry, and upgrade and version numbers.
25. Network access manifest
[!ref] Full details in the User Manual, "Security and privacy".
| Purpose | Protocol | Description |
|---|---|---|
| Sign-in / shared quota / usage | HTTPS | Account management backend |
| Model call (shared) | HTTPS | The provider behind the shared quota |
| Model call (your own key) | HTTPS | Your configured provider |
| Upgrade check | HTTPS | Internal upgrade source |
| Web search (optional) | HTTPS | Only if web.search is enabled |
| Channel (WeChat iLink) | HTTPS / WebSocket | Only with companion messaging |
| External tool services | HTTPS / SSE | Only with MCP services configured |
| SBOM online audit | HTTPS | Only sbom.audit / sbom.vex online mode: api.osv.dev |
| SBOM offline DB sync | HTTPS | Only sbom.dbsync sync / kev: OSV dump bucket, CISA KEV feed (can point at an internal mirror) |
The app does not:
- Phone home for behavioural analytics.
- Upload samples to any third party (only decompilation sends relevant disassembly on-demand).
- Auto-sync local sessions to the cloud (unless you explicitly enable Sync).