Optional ReadonlyarchetypesRequests it takes from other applets, such as napplet:dm/open.
ReadonlydescriptionOptional ReadonlygrantsDomains switched on the first time it is opened; the user can withdraw each one afterwards.
ReadonlyidLowercase name; the applet's address is kernl:<id> and its grants are keyed on it.
ReadonlyoptionalReadonlyrequiresReadonlysha256SHA-256 of the artifact, in hex. Bytes that do not hash to it are refused.
Readonlytitle
An applet the host ships with itself. No manifest is fetched for it: its bytes are pinned by hash in the host's own code, which is the trust the shell already rests on. It runs sealed like any other applet.