Security you can inspect

Authorship is not permission

A valid Publisher signature tells you who signed a Package. It does not silently grant that Package access to files, networks, models, or devices.

AI2Apps keeps package identity and runtime capability approval as separate decisions.

Verify before execution

Published artifacts are immutable and addressed by digest. Cloud verifies packages during submission and publication, and local AI2Apps verifies them again before installation.