[P2] Build a local timeline and privacy-management UI #36

New issue

Closed

opened 2026-07-18 00:03:50 +00:00 by lost-rob0t · 1 comment

lost-rob0t commented

2026-07-18 00:03:50 +00:00

(Migrated from github.com)

Goal

Provide a richer local interface for reviewing activity, changing policies, and deleting data.

Requirements

Local-only UI served through authenticated IPC or a loopback endpoint with explicit enablement.
Timeline, search, cited answers, capture status, policy controls, retention settings, and deletion workflows.
Redacted screenshot previews are decrypt-on-demand and never browser-cached in plaintext.
Clear remote-provider egress preview and confirmation when enabled.
Keyboard-accessible emergency stop/privacy control.
No third-party assets, analytics, fonts, CDNs, or telemetry.

Acceptance criteria

The UI is fully functional with networking disabled.
Browser cache/history inspection reveals no captured content beyond the active authenticated session.
Destructive operations show exact scope and require confirmation.
Closing or timing out the UI clears decrypted previews and session credentials.

Depends on

## Goal Provide a richer local interface for reviewing activity, changing policies, and deleting data. ## Requirements - Local-only UI served through authenticated IPC or a loopback endpoint with explicit enablement. - Timeline, search, cited answers, capture status, policy controls, retention settings, and deletion workflows. - Redacted screenshot previews are decrypt-on-demand and never browser-cached in plaintext. - Clear remote-provider egress preview and confirmation when enabled. - Keyboard-accessible emergency stop/privacy control. - No third-party assets, analytics, fonts, CDNs, or telemetry. ## Acceptance criteria - The UI is fully functional with networking disabled. - Browser cache/history inspection reveals no captured content beyond the active authenticated session. - Destructive operations show exact scope and require confirmation. - Closing or timing out the UI clears decrypted previews and session credentials. ## Depends on - #28 - #29 - #30 - #31

lost-rob0t commented

2026-08-30 10:57:47 +00:00

(Migrated from github.com)

Implemented and merged via PR #98. Loopback-only, explicitly-started UI server over the authenticated IPC client port: bearer-token sessions with expiry, no-store on every response, decrypt-on-demand previews with zero retention, destructive deletion requiring confirmation with exact scope, keyboard-accessible emergency stop, session close/expiry credential clearing, no third-party assets or telemetry. Verified by 22 new unit/security tests; full suite 1122 passing; canonical gate green. RAGE: rage/issue-36-timeline-ui.org; docs: docs/ui.md.