Platform
One app, two platforms. Vigia runs on macOS (Intel and Apple Silicon, one universal app, signed and notarized by LockFlare Corp) and on Windows (a signed installer and a portable exe, for x64 and for ARM). Same map, same key, same features on both; Windows Hello is the second step on Windows where the computer has it (Setup can turn the sensor off on either), and the Windows build keeps the console shortcuts on Ctrl+Shift so the shell keeps its Control keys. Downloads and checksums come from lockflare.com; a build shows its version in the bar at the top of the window.
No server, no account, no telemetry. Nothing Vigia does depends on a LockFlare service being up. Slots are signed keys opened on the computer, the model Themis thinks with is a name typed under Setup, and Vigia never calls home — not on its own, not from a button. Everything Vigia keeps — the map, the audit ledger, and the secrets: the saved logins, the certificate vault, the repository secrets, the API keys — lives on the computer, the secrets sealed under your key's own signature, and all of it rides the encrypted backup, beside the account and in the folder you choose.
Every protocol spoken directly. SSH to the boxes; S3, Azure Blob, Google Cloud Storage, SFTP, FTP and WebDAV to the repositories; MongoDB, MariaDB, PostgreSQL, Redis and Valkey through their own clients on the box. No agents, no vendor SDKs, no cloud in between.