Choices kehto left open, decided here: windows are created by the host
through intents, not by applets (createWindow returns null); hotkeys are
not forwarded; there is no worker relay, the applesauce pool is the only
event source; every signature made for an applet window passes the consent
gate; update behaviour is banner; event signatures are verified by
applesauce; and every applet's environment is narrowed by the grants layer.
Build kehto's
ShellAdapterfrom kernl's parts.Choices kehto left open, decided here: windows are created by the host through intents, not by applets (
createWindowreturns null); hotkeys are not forwarded; there is no worker relay, the applesauce pool is the only event source; every signature made for an applet window passes the consent gate; update behaviour isbanner; event signatures are verified by applesauce; and every applet's environment is narrowed by the grants layer.