Choices kehto left open, decided here: windows are created by the host,
which opens an intent's target for it, not by applets (createWindow
returns null); the intent domain is offered, served by kernl's router; hotkeys are
not forwarded; there is no worker relay, the applesauce pool is the only
event source; every signature made for an applet window passes the consent
gate; update behaviour is banner; event signatures are verified by
applesauce; every applet's environment is narrowed by the grants layer; the
ACL is restrictive, so an applet holds only what the grants layer wrote; and
every port envelope passes kernl's guard before the runtime sees it.
Build kehto's
ShellAdapterfrom kernl's parts.Choices kehto left open, decided here: windows are created by the host, which opens an intent's target for it, not by applets (
createWindowreturns null); theintentdomain is offered, served by kernl's router; hotkeys are not forwarded; there is no worker relay, the applesauce pool is the only event source; every signature made for an applet window passes the consent gate; update behaviour isbanner; event signatures are verified by applesauce; every applet's environment is narrowed by the grants layer; the ACL is restrictive, so an applet holds only what the grants layer wrote; and every port envelope passes kernl's guard before the runtime sees it.