Security

Orbi can say yes to an agent's shell command, so it is built to be the careful one.

Only you approve

• Orbi never approves anything by itself. Only your ⌃⌥A does.
• A keypress only counts for a request that has been on screen, unchanged, long enough to read — so it can't land on a request that just replaced another.
• No answer in 45 seconds (you can change this) → the agent asks you in its own terminal, as it always did.
• Answer in the terminal instead, and Orbi drops its copy of the request.

Local only

• Orbi listens on 127.0.0.1 only — nothing on your network can reach it.
• Every request needs a random 256-bit token stored in ~/Library/Application Support/Orbi, readable only by you.
• Before sending the token, Orbi's helper checks a signed handshake, so another program sitting on Orbi's port can't pose as Orbi.
• Browser requests are refused, so a website can't talk to Orbi.

When Orbi isn't running

The helper exits instantly and prints nothing. Your agents behave exactly as if Orbi were never installed. Delete Orbi.app and the hooks it added become harmless no-ops; disconnect an agent in Settings to remove them entirely.

Reporting an issue

Found a way to get an approval without a keypress, or anything else that worries you? Please report it privately to the maintainers before sharing it publicly, and include the steps to reproduce it.