HEAD SPACE
Think without performing.
Head Space is your sealed private interior for thoughts, feelings, memories, journals, dream notes, prayers, unfinished ideas, rough drafts, emotional records, and private planning. Nothing here becomes a post, evaluation, research record, Agent memory, proof, or publication by implication.
Not discoverable
Head Space is excluded from public search, feeds, creator publication, and ordinary platform visibility.
Client-side encryption
Entry content is encrypted in this browser before storage. Optional cloud continuity uploads ciphertext only; plaintext and the vault key stay off Base44.
Fresh verification
Opening requires a fresh WebAuthn user-verification ceremony when the browser supports the required PRF capability.
NOT ENROLLED ON THIS DEVICE
Create the sealed local vault
Enrollment creates a device-bound WebAuthn credential and a random AES-256-GCM vault key. The vault key is wrapped using the passkey PRF result; plaintext entry content is never written to Base44.
Authentication required to view users
Current implementation boundary: sealed device-local Head Space plus optional ciphertext-only Base44 continuity are now present. Person-held recovery-code restoration, new-device key re-enrollment, deliberate Secret Keeper release, and authoritative Steward identity-recognition entry remain closed rather than being simulated.
