What this device is holding, where it came from, and the levers to move it. Nothing here touches your data — the trove is a separate store the worker never opens.
How freely it may change
reading…
This decides what may replace what you hold. It never decides what you
can see — every setting still shows you everything on this device.
What served this page
reading…
The two slots
reading…
Refresh fills rolling from the network; it never touches the
floor, so it is safe in any mode. Promote merges rolling into held — rolling's
files where it has them, the floor's where it does not, so the floor can never gain a hole.
The firmware pin
reading…
Asks the worker to re-read
/firmware.json and decide against the pin.
A refusal is shown here with its reason rather than kept to itself.The hatch
If the shell is wedged past refreshing, self
destruct unregisters the worker, drops every cache and forgets the pin. It always comes from the
network on purpose, so it is unreachable while the origin is gone — and it spares your data.