[{"data":1,"prerenderedAt":653},["ShallowReactive",2],{"navigation_docs":3,"-zero-knowledge-cryptography-local-viewer-and-dpa":234,"-zero-knowledge-cryptography-local-viewer-and-dpa-surround":648},[4,26,47,68,89,114,135,164,181,210],{"title":5,"path":6,"stem":7,"children":8,"page":25},"1. Getting Started & Pricing","\u002Fgetting-started","01.getting-started",[9,13,17,21],{"title":10,"path":11,"stem":12},"1.1 5-Minute Quickstart","\u002Fgetting-started\u002Fquickstart","01.getting-started\u002F1.quickstart",{"title":14,"path":15,"stem":16},"1.2 Project Boards Setup","\u002Fgetting-started\u002Fboard-init","01.getting-started\u002F2.board-init",{"title":18,"path":19,"stem":20},"1.3 GitHub Actions & GitLab CI Runner Setup","\u002Fgetting-started\u002Fci-runners","01.getting-started\u002F3.ci-runners",{"title":22,"path":23,"stem":24},"1.4 Organization Credit Pool & Per-Function Credit Pricing","\u002Fgetting-started\u002Forg-credits-and-slack","01.getting-started\u002F4.org-credits-and-slack",false,{"title":27,"path":28,"stem":29,"children":30,"page":25},"2. Pair & Triad Programming","\u002Fpair-and-triad-programming","02.pair-and-triad-programming",[31,35,39,43],{"title":32,"path":33,"stem":34},"2.1 Cross-Model Pair & Triad Programming","\u002Fpair-and-triad-programming\u002Foverview","02.pair-and-triad-programming\u002F1.overview",{"title":36,"path":37,"stem":38},"2.2 Isolated Shadow Workspaces","\u002Fpair-and-triad-programming\u002Fshadow-jj-workspaces","02.pair-and-triad-programming\u002F2.shadow-jj-workspaces",{"title":40,"path":41,"stem":42},"2.3 Cryptographic File-Scope Leases & Small-Diff Gates","\u002Fpair-and-triad-programming\u002Ffile-scope-leases","02.pair-and-triad-programming\u002F3.file-scope-leases",{"title":44,"path":45,"stem":46},"2.4 Sub-Issue to Subagent Fan-Out & Delta Velocity","\u002Fpair-and-triad-programming\u002Fsub-issue-fanout","02.pair-and-triad-programming\u002F4.sub-issue-fanout",{"title":48,"path":49,"stem":50,"children":51,"page":25},"3. Declarative Workflow Policy","\u002Fworkflow-policy","03.workflow-policy",[52,56,60,64],{"title":53,"path":54,"stem":55},"3.1 Declarative Workflow Policy Schema","\u002Fworkflow-policy\u002Fschema-reference","03.workflow-policy\u002F1.schema-reference",{"title":57,"path":58,"stem":59},"3.2 Cryptographic Conformance Matrix & Memory Tombstones","\u002Fworkflow-policy\u002Fwp-01-to-wp-15-matrix","03.workflow-policy\u002F2.wp-01-to-wp-15-matrix",{"title":61,"path":62,"stem":63},"3.3 Two-Tier Organization Governance Lattice","\u002Fworkflow-policy\u002Forg-policy-floor","03.workflow-policy\u002F3.org-policy-floor",{"title":65,"path":66,"stem":67},"3.4 Trusted Handoff Hooks & Independent Verification","\u002Fworkflow-policy\u002Fhandoff-hooks-h1-to-h5","03.workflow-policy\u002F4.handoff-hooks-h1-to-h5",{"title":69,"path":70,"stem":71,"children":72,"page":25},"4. Visual Geometry & Copy Gates","\u002Fvisual-and-copy-tribunals","04.visual-and-copy-tribunals",[73,77,81,85],{"title":74,"path":75,"stem":76},"12-Tuple DOM Geometry (176\u002F176)","\u002Fvisual-and-copy-tribunals\u002Fui-gate-geometry","04.visual-and-copy-tribunals\u002F1.ui-gate-geometry",{"title":78,"path":79,"stem":80},"Vision-3 Geometry & Auto-Patch","\u002Fvisual-and-copy-tribunals\u002Fcross-model-design-tribunal","04.visual-and-copy-tribunals\u002F2.cross-model-design-tribunal",{"title":82,"path":83,"stem":84},"64\u002F64 Declaration Copy Gate","\u002Fvisual-and-copy-tribunals\u002Fdeclaration-copy-gate","04.visual-and-copy-tribunals\u002F3.declaration-copy-gate",{"title":86,"path":87,"stem":88},"Synthetic CI Canary","\u002Fvisual-and-copy-tribunals\u002Fsynthetic-ci-canary","04.visual-and-copy-tribunals\u002F4.synthetic-ci-canary",{"title":90,"path":91,"stem":92,"children":93,"page":25},"5. Autonomous AI Program Manager","\u002Fdelivery-program-manager","05.delivery-program-manager",[94,98,102,106,110],{"title":95,"path":96,"stem":97},"Overview: Dual-Brain AI PM","\u002Fdelivery-program-manager\u002Foverview","05.delivery-program-manager\u002F1.overview",{"title":99,"path":100,"stem":101},"Executable Tickets & Auto-Splitting","\u002Fdelivery-program-manager\u002Fchinwag-tasks-and-never-stop","05.delivery-program-manager\u002F2.chinwag-tasks-and-never-stop",{"title":103,"path":104,"stem":105},".codegraph & FinOps Routing","\u002Fdelivery-program-manager\u002Fcodegraph-and-finops-arbitrage","05.delivery-program-manager\u002F3.codegraph-and-finops-arbitrage",{"title":107,"path":108,"stem":109},"++ Triage & CI Recovery","\u002Fdelivery-program-manager\u002Fplus-plus-ci-triage","05.delivery-program-manager\u002F4.plus-plus-ci-triage",{"title":111,"path":112,"stem":113},"Flight Deck & Trajectory Time-Travel","\u002Fdelivery-program-manager\u002Fflight-deck-and-time-travel","05.delivery-program-manager\u002F5.flight-deck-and-time-travel",{"title":115,"path":116,"stem":117,"children":118,"page":25},"6. The Chinwag Way & Scrimmages","\u002Fthe-chinwag-way","06.the-chinwag-way",[119,123,127,131],{"title":120,"path":121,"stem":122},"Academic Foundations","\u002Fthe-chinwag-way\u002Facademic-foundations","06.the-chinwag-way\u002F1.academic-foundations",{"title":124,"path":125,"stem":126},"Chips (◈) & 7-Day Survival","\u002Fthe-chinwag-way\u002Fchips-and-7day-survival","06.the-chinwag-way\u002F2.chips-and-7day-survival",{"title":128,"path":129,"stem":130},"Sealed Card (.cwcard.png) Drills","\u002Fthe-chinwag-way\u002Fsealed-card-handoff-drills","06.the-chinwag-way\u002F3.sealed-card-handoff-drills",{"title":132,"path":133,"stem":134},"Calibration Scrimmages","\u002Fthe-chinwag-way\u002Fcalibration-scrimmages","06.the-chinwag-way\u002F4.calibration-scrimmages",{"title":136,"path":137,"stem":138,"children":139,"page":25},"7. Zero-Knowledge Cryptography","\u002Fzero-knowledge-cryptography","07.zero-knowledge-cryptography",[140,144,148,152,156,160],{"title":141,"path":142,"stem":143},"PQ-HPKE Wire Envelope","\u002Fzero-knowledge-cryptography\u002Fpq-hpke-envelope","07.zero-knowledge-cryptography\u002F1.pq-hpke-envelope",{"title":145,"path":146,"stem":147},"Verify-Before-Decrypt (K1+K2)","\u002Fzero-knowledge-cryptography\u002Fverify-before-decrypt","07.zero-knowledge-cryptography\u002F2.verify-before-decrypt",{"title":149,"path":150,"stem":151},"Blinded Commitments & 128B Flywheel","\u002Fzero-knowledge-cryptography\u002Fblind-commitments","07.zero-knowledge-cryptography\u002F3.blind-commitments",{"title":153,"path":154,"stem":155},"Local Viewer & CISO DPA","\u002Fzero-knowledge-cryptography\u002Flocal-viewer-and-dpa","07.zero-knowledge-cryptography\u002F4.local-viewer-and-dpa",{"title":157,"path":158,"stem":159},"A.509 Agent Passports","\u002Fzero-knowledge-cryptography\u002Fa509-agent-pkix","07.zero-knowledge-cryptography\u002F5.a509-agent-pkix",{"title":161,"path":162,"stem":163},"chinwag-acu & CISO Kill Switch","\u002Fzero-knowledge-cryptography\u002Fchinwag-acu","07.zero-knowledge-cryptography\u002F6.chinwag-acu",{"title":165,"path":166,"stem":167,"children":168,"page":25},"8. E2EE Mesh & Extension SDK","\u002Fmesh-and-extensions","08.mesh-and-extensions",[169,173,177],{"title":170,"path":171,"stem":172},"chinwag-mesh & 3-Repo Time Machine","\u002Fmesh-and-extensions\u002Fsdk-and-cwcard-png-transport","08.mesh-and-extensions\u002F1.sdk-and-cwcard-png-transport",{"title":174,"path":175,"stem":176},"warroom & whisper Extensions","\u002Fmesh-and-extensions\u002Fwarroom-and-whisper","08.mesh-and-extensions\u002F2.warroom-and-whisper",{"title":178,"path":179,"stem":180},"teleport, shroud & vault","\u002Fmesh-and-extensions\u002Fgit-bundle-and-vault","08.mesh-and-extensions\u002F3.git-bundle-and-vault",{"title":182,"path":183,"stem":184,"children":185,"page":25},"9. CLI & GraphQL Reference","\u002Fcli-and-graphql-reference","09.cli-and-graphql-reference",[186,190,194,198,202,206],{"title":187,"path":188,"stem":189},"chinwag tasks & task","\u002Fcli-and-graphql-reference\u002Fchinwag-task","09.cli-and-graphql-reference\u002F1.chinwag-task",{"title":191,"path":192,"stem":193},"chinwag board & GraphQL","\u002Fcli-and-graphql-reference\u002Fchinwag-board","09.cli-and-graphql-reference\u002F2.chinwag-board",{"title":195,"path":196,"stem":197},"chinwag pair & triad","\u002Fcli-and-graphql-reference\u002Fchinwag-pair-and-triad","09.cli-and-graphql-reference\u002F3.chinwag-pair-and-triad",{"title":199,"path":200,"stem":201},"chinwag bus","\u002Fcli-and-graphql-reference\u002Fchinwag-bus","09.cli-and-graphql-reference\u002F4.chinwag-bus",{"title":203,"path":204,"stem":205},"chinwag-ci, fork-run & ui-gate","\u002Fcli-and-graphql-reference\u002Fchinwag-ci-and-uigate","09.cli-and-graphql-reference\u002F5.chinwag-ci-and-uigate",{"title":207,"path":208,"stem":209},"chinwag memory & tombstone","\u002Fcli-and-graphql-reference\u002Fchinwag-memory","09.cli-and-graphql-reference\u002F6.chinwag-memory",{"title":211,"path":212,"stem":213,"children":214,"page":-1},"10. Architecture PRDs","\u002Fprds","10.prds",[215,218,222,226,230],{"title":216,"path":212,"stem":217},"10.0 Ratified Architecture PRDs","10.prds\u002Findex",{"title":219,"path":220,"stem":221},"10.1 Ephemeral Tart Cleanroom VMs & Declarative Nix","\u002Fprds\u002Ftart-cleanroom-vms","10.prds\u002F1.tart-cleanroom-vms",{"title":223,"path":224,"stem":225},"10.2 Executable Delivery Boards & Proof-of-Green","\u002Fprds\u002Fdelivery-executable-boards","10.prds\u002F2.delivery-executable-boards",{"title":227,"path":228,"stem":229},"10.3 Cursor Agent SDK Importer & Sanitizer","\u002Fprds\u002Fcursor-agent-sdk-importer","10.prds\u002F3.cursor-agent-sdk-importer",{"title":231,"path":232,"stem":233},"10.4 Chinwag Local Web App & Command Center","\u002Fprds\u002Fhuman-command-center-ui","10.prds\u002F4.human-command-center-ui",{"id":235,"title":236,"body":237,"command":250,"description":641,"extension":642,"links":643,"meta":644,"navigation":645,"path":154,"seo":646,"stem":155,"__hash__":647},"docs\u002F07.zero-knowledge-cryptography\u002F4.local-viewer-and-dpa.md","7.4 Local Loopback Viewer & CISO Subprocessor Exemption",{"type":238,"value":239,"toc":631},"minimark",[240,244,251,254,262,265,274,482,484,491,509,538,540,544,553,597,599,603],[241,242,236],"h1",{"id":243},"_74-local-loopback-viewer-ciso-subprocessor-exemption",[245,246,247],"p",{},[248,249,250],"code",{},"chinwag viewer --loopback 127.0.0.1:5487",[245,252,253],{},"Enterprise security reviews stall for months when an AI dev-tool vendor asks for read\u002Fwrite OAuth scopes to your GitHub repositories or routes plaintext source code through multi-tenant cloud databases.",[245,255,256,257,261],{},"Chinwag is architected so that ",[258,259,260],"strong",{},"Chinwag's cloud relay never possesses your decryption keys and never processes plaintext source code, prompts, diffs, or file paths",".",[263,264],"hr",{},[266,267,269,270,273],"h2",{"id":268},"the-5-4-cryptographic-visibility-matrix","The ",[248,271,272],{},"5 × 4"," Cryptographic Visibility Matrix",[275,276,277,308],"table",{},[278,279,280],"thead",{},[281,282,283,288,291,302,305],"tr",{},[284,285,287],"th",{"align":286},"left","Data Artifact",[284,289,290],{"align":286},"On Developer \u002F CI Host",[284,292,293,294,297,298,301],{"align":286},"In Transit (",[248,295,296],{},"iroh"," \u002F Edge \u002F ",[248,299,300],{},".cwcard.png",")",[284,303,304],{"align":286},"On Chinwag Cloud Relay",[284,306,307],{"align":286},"In GitHub Projects v2 \u002F Linear",[309,310,311,344,381,418,441],"tbody",{},[281,312,313,319,325,335,341],{},[314,315,316],"td",{"align":286},[258,317,318],{},"Source Code & Git\u002Fjj Diffs",[314,320,321,322],{"align":286},"Plaintext in local ",[248,323,324],{},"Shadow jj",[314,326,327,330,331,334],{"align":286},[248,328,329],{},"X25519MLKEM768"," + ",[248,332,333],{},"ChaCha20Poly1305"," Ciphertext",[314,336,337,340],{"align":286},[258,338,339],{},"Opaque Ciphertext Only"," (Zero keys)",[314,342,343],{"align":286},"Never transmitted (or link-only)",[281,345,346,351,356,369,378],{},[314,347,348],{"align":286},[258,349,350],{},"Agent Prompts & Bus Messages",[314,352,321,353],{"align":286},[248,354,355],{},".chinwag\u002Fstate.crdb",[314,357,358,361,362,365,366],{"align":286},[248,359,360],{},"CHWGHPKE"," v2 + Dual ",[248,363,364],{},"K1+K2"," ",[248,367,368],{},"Ed25519",[314,370,371,373,374,377],{"align":286},[258,372,339],{}," (",[248,375,376],{},"0"," retention after ACK)",[314,379,380],{"align":286},"Never transmitted",[281,382,383,388,394,406,415],{},[314,384,385],{"align":286},[258,386,387],{},"File-Scope Leases & Repo Paths",[314,389,390,391,301],{"align":286},"Plaintext globs (",[248,392,393],{},"crates\u002Fauth\u002F**",[314,395,396,397,365,400,365,403],{"align":286},"Keyed ",[248,398,399],{},"BLAKE3",[248,401,402],{},"32-byte",[248,404,405],{},"T_coalesce",[314,407,408],{"align":286},[258,409,410,411,414],{},"Blinded ",[248,412,413],{},"32-Byte"," Digest Only",[314,416,417],{"align":286},"Optional (Configurable per org)",[281,419,420,425,428,434,438],{},[314,421,422],{"align":286},[258,423,424],{},"CI Compiler \u002F Stack Traces",[314,426,427],{"align":286},"Plaintext in runner memory",[314,429,430,431,433],{"align":286},"Sealed in ",[248,432,360],{}," v2 envelope",[314,435,436],{"align":286},[258,437,339],{},[314,439,440],{"align":286},"Pass\u002FFail status badge only",[281,442,443,448,454,461,472],{},[314,444,445],{"align":286},[258,446,447],{},"Weekly Learning Flywheel",[314,449,450,451],{"align":286},"Auditable via ",[248,452,453],{},"inspect-flywheel",[314,455,456,457,460],{"align":286},"Signed ",[248,458,459],{},"128-Byte"," numeric struct",[314,462,463],{"align":286},[258,464,465,468,469,471],{},[248,466,467],{},"64B"," Numeric Counters + ",[248,470,467],{}," Sig",[314,473,474,475,478,479],{"align":286},"Aggregated ",[248,476,477],{},"◈"," Chips & ",[248,480,481],{},"SURV %",[263,483],{},[266,485,487,488,301],{"id":486},"local-loopback-workbench-chinwag-ui","Local Loopback Workbench (",[248,489,490],{},"chinwag ui",[245,492,493,494,497,498,501,502,504,505,508],{},"When you inspect live agent conversations, diffs, ",[248,495,496],{},".codegraph"," blast radius, or ",[248,499,500],{},"176\u002F176"," UI gate screenshots in the Chinwag Workbench (",[248,503,490],{},"), ",[258,506,507],{},"100% of decryption and rendering happens locally on your machine",":",[510,511,512,525,535],"ol",{},[513,514,515,517,518,520,521,524],"li",{},[248,516,490],{}," binds strictly to the local loopback interface and reads your local SQLite\u002FCRDB state (",[248,519,355],{},") and OS Keychain (",[248,522,523],{},"~\u002F.chinwag\u002Fsigning\u002F",").",[513,526,527,528,530,531,534],{},"Encrypted ",[248,529,360],{}," v2 frames arriving from remote teammates or cloud CI runners are verified (",[248,532,533],{},"0.09ms",") and decrypted inside the local Rust process.",[513,536,537],{},"No plaintext DOM state, source diff, or session token is ever uploaded to a cloud dashboard.",[263,539],{},[266,541,543],{"id":542},"why-cisos-grant-tier-1-subprocessor-exemption","Why CISOs Grant Tier-1 Subprocessor Exemption",[245,545,546,547,549,550,508],{},"Under GDPR Article 28, SOC 2 Type II, HIPAA, and ISO 27001 frameworks, a cloud transit provider that processes exclusively end-to-end encrypted ciphertext (where the customer holds sole custody of all ",[248,548,329],{}," private keys in hardware\u002FOS keychains) operates as a ",[258,551,552],{},"zero-knowledge cryptographic conduit",[554,555,556,570,587],"ul",{},[513,557,558,561,562,564,565,365,567,569],{},[258,559,560],{},"Zero Plaintext Custody:"," A breach or subpoena of Chinwag's Cloudflare Edge relay yields only ",[248,563,329],{}," ciphertext and blinded ",[248,566,402],{},[248,568,399],{}," hashes.",[513,571,572,365,575,578,579,582,583,586],{},[258,573,574],{},"Zero GitHub Code Read Scope Required:",[248,576,577],{},"chinwag board init"," requires only ",[248,580,581],{},"project"," (for GitHub Projects v2 column updates) or Linear issue state tokens · never ",[248,584,585],{},"repo"," source-code clone permissions on our cloud servers.",[513,588,589,592,593,596],{},[258,590,591],{},"Instant Cryptographic Offboarding:"," Rotating your org vault key via ",[248,594,595],{},"chinwag bond rotate-org-key"," immediately invalidates all historical key-agreement epochs.",[263,598],{},[266,600,602],{"id":601},"next-steps","Next Steps",[554,604,605,620],{},[513,606,607,365,610],{},[258,608,609],{},"Next:",[611,612,613,616,617,301],"a",{"href":158},[248,614,615],{},"A.509"," Sovereign Agent PKIX Passports (",[248,618,619],{},"draft-spector-a509-agent-pkix-00",[513,621,622,365,625],{},[258,623,624],{},"Ready for a tool your CISO will approve in one afternoon?",[611,626,630],{"href":627,"rel":628},"https:\u002F\u002Fchinwag.sh\u002Fpricing",[629],"nofollow","Reserve Your Organization Credit Pack →",{"title":632,"searchDepth":633,"depth":633,"links":634},"",2,[635,637,639,640],{"id":268,"depth":633,"text":636},"The 5 × 4 Cryptographic Visibility Matrix",{"id":486,"depth":633,"text":638},"Local Loopback Workbench (chinwag ui)",{"id":542,"depth":633,"text":543},{"id":601,"depth":633,"text":602},"Why Chinwag's zero-knowledge architecture qualifies for CISO Tier-1 Subprocessor Exemption and how the local chinwag ui viewer decrypts state exclusively on your machine.","md",null,{},{"title":153},{"title":236,"description":641},"hwK0BQw-QgG5dFFk3QhkwG3dgpwO-EamHkhxmYiBpYs",[649,651],{"title":149,"path":150,"stem":151,"description":650,"children":-1},"How Chinwag routes encrypted frames using blinded 32-byte BLAKE3 commitments (T_coalesce) and improves model routing with a 128-byte zero-code telemetry struct.",{"title":157,"path":158,"stem":159,"description":652,"children":-1},"Cryptographic identity, capability scoping, and mandatory conversation instance addressing (\u003CSEAT>#\u003CINSTANCE>) for autonomous AI coding agents.",1794371826571]