Security Rules
Mythos should be strict about signatures, source health, generated app isolation, and unknown data.
Login Safety
No approval on login.The login signature cannot transfer tokens or grant spend permission.
Server Gates
Holder gate is server-side.The API checks the signed session and live MYTHOS balance before protected routes respond.
Sandbox Rules
Sandboxed apps are restricted.Generated apps run with blocked external scripts, unsafe APIs, cookies, service workers, direct fetch, private network targets, and form navigation.
Bridge calls are the escape hatch.Apps request approved data through the Mythos bridge instead of embedding API keys or calling arbitrary endpoints from generated code.
Published apps use the same safety model.The public route runs the saved manifest in a hardened published-app runner and blocks invalid scripts before execution.
Source Health
Unknowns stay unknown.If a source cannot prove a field, Mythos should show it as unavailable instead of guessing.