EONBOT return
Finish the safe step, then return to chat
A reviewed EONBOT action may return you to the same local Chat thread. Vault remains the only place for provider keys and other sensitive settings.
Your secure local workspace
Vault
One calm place for recovery, backup choices, and advanced AI-key settings. Start with one encrypted Capsule. Keep its passphrase separately.
Local-first
Create Capsule
At a glance
Simple by default
Checking the local workspace boundary…
One CapsuleOne compressed-when-useful encrypted file contains all supported local workspace records from this browser.
Manual restoreYou inspect a no-values plan and approve only the changes you choose.
Drive snapshotsGoogle Drive uses a separate encrypted-snapshot permission and never reuses ordinary Google Login permission.
Visual collection
Vault Reveals
Keep visual unlock cards separate from recovery, account data, payment, ownership, and security settings.
Account & preferences
Settings stay understandable
Profile, appearance, voice, device and privacy controls live together in Preferences. Account sign-in does not create a backup.
1 · Recovery
Protect your work
Checking the local-first continuity boundary…
This device
Device security
Checking device-bound storage…
Checking local profile state… An installed PWA does not share browser storage with another device. A reviewed encrypted Capsule is the current transfer path.Keep it safe
What to keep separate
Keep the Capsule and passphrase in separate places. A Capsule intentionally excludes API/provider keys, recovery secrets, wallets, OAuth sessions, raw media, model files and unknown storage.
A recovery rehearsal is guidance only. It never creates a backup, restores data or certifies a device.2 · Cloud backup
Checking Google Drive backup boundary…
Manual storage today
Loading manual encrypted-storage options…
Advanced · AI only
AI provider keys
Checking encrypted provider status…
These are AI-provider settings, not Google Drive backup. Provider names may be shown; secret values are never read or displayed.Advanced · Privacy
Safe status
Checking for known legacy provider storage names…
Advanced · AI only
Verify an AI provider key
Optional bring-your-own-AI setup. A key is entered only in Vault, never in EONBOT. Verification is user initiated and sends the key directly to the provider you choose; EONAPP does not receive it.
No hosted provider has been verified in this session.
To save, tick the encrypted-storage box before Verify. A saved key is intentionally never displayed again: confirm it through the encrypted-provider count above or “Restore and test all saved providers”. Encrypted keys survive normal EONAPP updates in this browser profile. Google login does not copy them to another Chrome, Edge, Firefox, device, or Codex test profile. Saving a key does not authorise EONBOT; restore and verification remain explicit.Safety repair
Legacy AI-key storage migration
Checking whether this browser has a known legacy provider-storage source…
Migration encrypts known legacy AI-provider keys locally, then removes raw key fields. Provider names and migration counts may be shown; secret values are never displayed.Loading Vault Reveals…
Plain-language help
Need help?
Ask EONBOT to explain local AI, encrypted storage, or recovery boundaries. EONBOT must never ask you to paste an API key, password, seed phrase, or exchange secret.