First run
Choose a vault, confirm local runtime, and start from Today.
Safety ruleKeep real user data local. Do not
publish private vault content, secrets, screenshots, or logs.
How to use this
On first run, confirm the backend is healthy, set `WORKOS_VAULT_PATH` to an `_WorkOS` folder, and open Today. Use Today as the daily operating layer, not as a decorative dashboard.
What remains explicit
Capture, AI, review, import, and agent suggestions require user
approval before durable writes. Configuration should point at
_WorkOS, and reference vaults should remain read-only
unless deliberately reconfigured.