ahtavarasmus/lightfriend
The first verifiably private cloud AI assistant. Runs in AWS Nitro Enclave with hardware attestation - nobody can access user data, not even the developer. Bridges WhatsApp, Telegram, Signal, email to SMS for dumbphone users.
settings.json: no · hooks: no · scanned 2026-09-20
Rules, as written
Do NOT add "Generated with Claude Code" or Co-Authored-By lines mentioning Claude/AI. Keep commit messages clean and focused on what changed
Nothing mechanical stops "npm install <pkg>". Bash(npm install*) matched "npm install left-pad" (ask only: a human must be present to say no)
Do NOT add "Generated with Codex" or Co-Authored-By lines mentioning Codex/AI. Keep commit messages clean and focused on what changed.
Nothing mechanical stops "npm install <pkg>". Bash(npm install*) matched "npm install left-pad" (ask only: a human must be present to say no)
Deny Read(.env)
Partly fenced: "Read .env" is blocked (permission-deny), "cat .env" is blocked (permission-deny), "read loop over .env" is blocked (permission-deny), but "grep .env" gets through: no deny rule matched
Deny Read(**/.env)
Partly fenced: "Read **/.env" is blocked (permission-deny), "cat **/.env" is blocked (permission-deny), "read loop over **/.env" is blocked (permission-deny), but "grep **/.env" gets through: no deny
Deny Read(**/secrets/**)
Partly fenced: "Read **/secrets/**" is blocked (permission-deny), "cat **/secrets/**" is blocked (permission-deny), "read loop over **/secrets/**" is blocked (permission-deny), but "grep **/secrets/**
Deny Read(**/*.pem)
Partly fenced: "Read **/*.pem" is blocked (permission-deny), "cat **/*.pem" is blocked (permission-deny), "read loop over **/*.pem" is blocked (permission-deny), but "grep **/*.pem" gets through: no d
Showing 6 of 11. Run npx paperfence scan on the repo for the full list.