Vibix Commander separates hosted account authorization from the local computer's permission policy. The local computer is the final authority for every remote tool call.
Safe permits local file reading, search, and configuration reads within selected directories.
Work adds normal file changes, terminal access, and system information while direct process control remains disabled by default.
Full enables all explicitly classified local capabilities, including process control, subject to allowed directories and blocked commands.
Terminal commands run with the operating-system permissions of the signed-in local user. Vibix Commander policy provides guardrails but is not a hard operating-system sandbox.
The hosted relay authenticates accounts and devices and forwards tool calls to paired computers. It cannot increase local capabilities beyond the computer's current policy.
Server-side authentication and device credentials are stored as cryptographic digests where applicable. Device revocation invalidates the durable credential and terminates the active relay connection.
Vibix Agent disables inherited Desktop Commander telemetry by default unless the local operator explicitly opts in.