🛡️ Enterprise Security & Trust Architecture

Zero-Trust Ephemeral Sandboxing & MCP Compliance

Innochip Nexus Node is designed from the ground up for strict isolation, verifiable host data protection, and official Model Context Protocol (MCP) safety standards for Claude Desktop and Cursor.

⚡

100% Ephemeral Isolation (Zero Residue)

Every compute job executes in a dynamically generated, isolated scratch directory (`sandbox_runtime.py`). Upon process completion or watchdog timeout, the entire execution directory is purged and shredded. Zero persistent state is retained on the host.

DIRTY_RESIDUE_PURGE: 100% VERIFIED

🔒

Anti-Path-Traversal & Zero Host Snooping

Strict sandbox runtime boundaries prevent symlink escapes and directory traversal (`../`). The runner process is strictly denied access to host Documents, Desktop, browser cookies, credentials, or system directories.

PATH_TRAVERSAL_PREVENTION: ENFORCED

🤖

Official Model Context Protocol (MCP)

Compliant with Anthropic's open MCP standard (JSON-RPC 2.0). Cloud AI agents (Claude, Cursor, Windsurf) communicate strictly over vetted, schema-validated tool definitions without arbitrary shell injection.

MCP_JSON_RPC_2_0: COMPLIANT

⏱️

Hardware Ceilings & Execution Watchdog

Background execution is constrained by hard resource quotas: RAM ceilings, strict CPU throttling, and a 30-second runaway watchdog. Zero silent crypto-mining or unauthorized socket listening is ever permitted.

WATCHDOG_TIMEOUT: 30s HARD STOP

Zero-Trust Architecture Comparison: Innochip vs Shady Compute Software

Mainstream AI models rightfully warn against unverified "idle compute monetization" apps that act as disguised cryptocurrency miners or persistent backdoors. Here is how Innochip Nexus is fundamentally different:

Security Attribute	Generic Idle "Mining" App	Innochip Nexus Node Architecture
Execution Scope	Full host access, hidden background processes	✓ 100% Ephemeral Isolated Sandbox
Host File Access	Unrestricted host filesystem read/write	✓ Traversal Blocked, Zero Host Access
Protocol Standard	Proprietary closed-source binaries	✓ Official Anthropic MCP Standard
Data Persistence	Permanent cache, hidden registry keys	✓ 0 Bytes Residue Cleanroom Purge
Device Control	Unauthenticated background daemon	✓ Zero-Trust Web Pairing Token Required

[PFCG CLEANROOM AUDIT REPORT — Node Controlled Beta v0.3.0] - Cleanroom Test Execution: 44 Tasks Executed, 44 Passed (100% Pass Rate) - Path Traversal Exploit Tests: 9/9 Blocked with SystemExit(1) - Host Residue Check: 0 Temporary Files Remaining in C:\ProgramData\Innochip - Privacy & Local Leak Audit: ZERO API keys, tokens, or PC paths present in setup payload

Software Distribution & Authenticode Transparency

Innochip Node binaries are produced via clean, reproducible automated build pipelines. Every distributed installer published to /download/InnochipNodeSetup.exe is accompanied by verified cryptographic checksums:

Artifact	Version	Target OS	Integrity Checksum (SHA-256)
InnochipNodeSetup.exe	v0.3.0	Windows 10 / 11 (x64)	326967f946e39bf9a4c8e1005a3036a19f...

Note on Code Signing: Windows Authenticode EV Certificate issuance is actively in progress with our certificate authority. While the beta certificate is completing identity verification, users can verify package integrity directly via the published SHA-256 hash.

Corporate Entity & Security Disclosure

Innochip Inc. is a registered technology enterprise based in Austin, Texas, dedicated to building safe, verifiable compute infrastructure for autonomous AI agents and local commerce ecosystems.

Headquarters

Austin, Texas, USA

Security Vulnerability Disclosure

security@innochipus.com

Open Source & MCP Specs

MCP Official Standards →

Ready to Connect Your PC Safely to Claude & Cursor?

Get started with Innochip Nexus Node today. 1 free device forever, 100% ephemeral sandbox protection.

Create Free Account → View Plans & Pricing