Remove cloud-sync archive policy and refresh Iris SEO

supermang617 · supermang617 · commit 9bc9cf1c4e34 · 2026-06-20T01:01:33.000-04:00
diff --git a/AGENTS.md b/AGENTS.md
@@ -42,9 +42,9 @@ The public repository is source-first and should remain easy for users to clone,
 
 Allowed public contribution scope: bug fixes, diagnostics fixes, documentation fixes, compatibility fixes, and safety-preserving test coverage for existing behavior.
 
-The active runtime baseline includes local Ollama text/vision inference, native local ASR, Kokoro ONNX TTS, one-shot image/camera/screen-area evidence probes, Iris-owned local memory, Safe Hermes memory broker/staging/research, approval-gated Agentic Hermes file/PowerShell/process/isolated-browser tools, and OneDrive cold-archive policy only.
+The active runtime baseline includes local Ollama text/vision inference, native local ASR, Kokoro ONNX TTS, one-shot image/camera/screen-area evidence probes, Iris-owned local memory, Safe Hermes memory broker/staging/research, approval-gated Agentic Hermes file/PowerShell/process/isolated-browser tools, and local Iris-owned archive policy only.
 
-Hermes is enabled by default as an Iris-owned local research, RAG, and memory-transfer helper. Hermes may act only inside Iris-owned data boundaries: query approved memory, perform explicit user-requested web research, propose memory into staging, and transfer staged memory into active Iris memory only after explicit Iris/user acceptance. Hermes remains fail-closed, text-only, sequential, single-model, and restricted to `iris_query_memory`, `iris_propose_memory`, and `iris_web_research`. Hermes must not expose shell, file edit, browser automation, clipboard, window, process, automation plugin, OneDrive, raw memory, model switching, model pulling, fallback-model, or autonomous computer-control surfaces without a separately approved agentic profile and session.
+Hermes is enabled by default as an Iris-owned local research, RAG, and memory-transfer helper. Hermes may act only inside Iris-owned data boundaries: query approved memory, perform explicit user-requested web research, propose memory into staging, and transfer staged memory into active Iris memory only after explicit Iris/user acceptance. Hermes remains fail-closed, text-only, sequential, single-model, and restricted to `iris_query_memory`, `iris_propose_memory`, and `iris_web_research`. Hermes must not expose shell, file edit, browser automation, clipboard, window, process, automation plugin, cloud-sync storage, raw memory, model switching, model pulling, fallback-model, or autonomous computer-control surfaces without a separately approved agentic profile and session.
 
 Hermes modes are Off, Safe, and Agentic Session. Safe is the startup default. Agentic approval is process-local, requires an absolute selected workspace, expires on exit/Panic Stop/mode change/30 minutes of inactivity, and uses the pinned official ACP runtime. Agentic may expose only the reviewed Iris memory, file, search, patch, PowerShell, process, and isolated browser tools; high-risk actions require separate confirmation and all action events are redacted and audited. Panic Stop forces Off and terminates the process tree; clearing it returns to Safe.
 
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -27,7 +27,7 @@ IRIS is currently open for bug fixes, diagnostics fixes, documentation fixes, co
 - UI redesigns.
 - Feature expansions beyond the current safety envelope.
 - Changes that weaken Hermes restrictions.
-- Live memory storage under OneDrive.
+- Live memory storage under cloud-sync folders.
 
 ## Validation Before a PR
 
diff --git a/README.md b/README.md
@@ -24,7 +24,7 @@ This repository is public and source-first so people can inspect, test, and subm
   adapt response presentation with a 30-day decay and explicit on/off/reset controls.
 - Hermes: Safe mode uses the restricted Iris-owned local RAG sidecar, enabled for local memory query/proposal by default. Agentic Session uses pinned Hermes Agent 0.16.0 through an Iris-supervised local ACP bridge.
 - Hermes modes: Off, Safe, and Agentic Session are implemented. Safe is the startup default. Agentic supports supervised local text, file, PowerShell, process, and isolated browser tasks plus Iris-owned RAG and staged memory proposals.
-- OneDrive archive: cold, encrypted archive names must end with `.iris-memory-archive.enc`.
+- Local archive policy: Iris memory stays in Iris-owned local storage. Future archive files must use `.iris-memory-archive.enc` and must not live in cloud-sync folders.
 
 ## Future of IRIS
 
@@ -35,14 +35,14 @@ release separates user instructions from untrusted evidence such
 as images, documents, screen text, memory search results, Hermes output, and
 model output. The boundary keeps prompt injection from becoming permissive.
 
-Iris, Hermes, and RAG/OneDrive have separate roles. Iris owns your local memory and
+Iris, Hermes, and RAG have separate roles. Iris owns your local memory and
 the final response path. Safe Hermes is a restricted text-only helper that can query
 approved memory and propose staged memory. Agentic Hermes provides supervised local ACP
 reasoning and approval-gated file, PowerShell, process, and isolated browser work through the same
 Iris-owned RAG and staging authority.
-OneDrive is limited to an encrypted cold-archive;
-future releases should build toward user-approved memory restore across machines
-without putting live memory databases directly in OneDrive.
+Cloud-sync storage is not part of v1. Future archive or restore work should use
+explicit local Iris-owned exports first, with user-reviewed import reconciliation
+instead of putting live memory databases in sync folders.
 
 ## Project Map
 
diff --git a/SECURITY.md b/SECURITY.md
@@ -18,7 +18,7 @@ Forbidden by default:
 - Writes outside Iris-owned directories.
 - Hermes active-memory writes.
 - Hermes raw memory database/file access.
-- Hermes OneDrive access.
+- Hermes cloud-sync storage access.
 
 Allowed local boundaries:
 
diff --git a/SPEC.md b/SPEC.md
@@ -38,7 +38,7 @@ Hermes has Off, Safe, and Agentic Session modes. Safe is the startup default.
   reviewed local tools after explicit session activation; sensitive,
   destructive, install/admin, credential, and scope-expanding work requires
   separate approval.
-- General window automation, clipboard access, OneDrive access, and arbitrary
+- General window automation, clipboard access, cloud-sync storage access, and arbitrary
   plugin loading remain unavailable. Agentic browser automation uses only the
   pinned isolated browser runtime and dedicated profile.
 
@@ -48,10 +48,9 @@ Hermes memory proposals go to staging. Iris/user approval is required before pro
 
 - Active memory is local and Iris-owned.
 - Hermes staging memory is local and Iris-owned.
-- OneDrive sync is disabled by default.
-- OneDrive is cold archive only.
+- Cloud-sync memory storage is not part of v1.
 - Archive targets must use `.iris-memory-archive.enc`.
-- Live SQLite/JSON memory stores must not be placed under OneDrive.
+- Live SQLite/JSON memory stores must not be placed under cloud-sync folders.
 - Archive export is unavailable until real encryption is implemented.
 - Import requires Iris reconciliation.
 
diff --git a/capabilities/v0_1_capability_ledger.toml b/capabilities/v0_1_capability_ledger.toml
@@ -136,7 +136,7 @@ may_write_logs = false
 may_call_model_inference = false
 
 [crate.iris-tauri]
-allowed = ["dashboard_command_bridge", "typed_hud_command_bridge", "local_dynamic_context_profile", "native_microphone_asr", "kokoro_tts_helper_process", "iris_owned_tts_temp_wav", "user_provided_image_probe", "one_shot_camera_probe", "one_shot_screen_area_probe", "restricted_local_memory_broker", "hermes_sidecar_lifecycle", "hermes_memory_staging", "agentic_acp_stdio_bridge", "agentic_session_file_tools", "agentic_session_powershell", "agentic_process_supervision", "agentic_action_audit", "onedrive_cold_archive_policy", "diagnostic_logs"]
+allowed = ["dashboard_command_bridge", "typed_hud_command_bridge", "local_dynamic_context_profile", "native_microphone_asr", "kokoro_tts_helper_process", "iris_owned_tts_temp_wav", "user_provided_image_probe", "one_shot_camera_probe", "one_shot_screen_area_probe", "restricted_local_memory_broker", "hermes_sidecar_lifecycle", "hermes_memory_staging", "agentic_acp_stdio_bridge", "agentic_session_file_tools", "agentic_session_powershell", "agentic_process_supervision", "agentic_action_audit", "local_memory_archive_policy", "diagnostic_logs"]
 forbidden = ["input_simulation", "clipboard_read", "clipboard_write", "browser_automation", "window_control", "automation_tools", "runtime_network_background", "plugin_loading", "model_loading", "model_pulling", "model_switching", "fallback_models"]
 allowed_roots = ["iris_owned"]
 may_depend_on = ["iris-config", "iris-dynamic-context", "iris-hardware", "iris-ollama", "iris-status", "iris-ui"]
diff --git a/docs/download-and-run.md b/docs/download-and-run.md
@@ -217,13 +217,13 @@ Bug fixes, compatibility repairs, diagnostics fixes, documentation corrections,
 
 ## Architecture Notes
 
-See `docs/iris-architecture.md` for the current Iris/Hermes/OneDrive boundary.
+See `docs/iris-architecture.md` for the current Iris/Hermes/local-memory boundary.
 See `docs/windows-installer.md` for installer, shortcut, upgrade, and uninstall
 behavior.
 See `docs/signed-installer-decision.md` for the MSIX/App Installer signing
 decision and current toolchain blockers.
 See `docs/runtime-orchestration.md` for how Iris, Ollama, and Hermes should run
 together during manual testing.
-In v1, Iris can use local memory and restricted Hermes staging. OneDrive is
-not an active live-memory sync feature yet; it is a future encrypted cold-archive
-and restore direction.
+In v1, Iris can use local memory and restricted Hermes staging. Cloud-sync
+storage is not part of Iris memory or archive behavior; memory remains
+Iris-owned and local.
diff --git a/docs/installer-preflight.md b/docs/installer-preflight.md
@@ -84,7 +84,7 @@ Run it from the portable release folder:
 
 - Preflight never installs or downloads Iris, Ollama, models, Python packages,
   or WebView2.
-- It does not enable OneDrive sync.
+- It does not enable cloud-sync memory storage.
 - It does not move memory files.
 - It does not run shell commands from model output.
 - It does not grant Iris computer-control permissions.
diff --git a/docs/iris-architecture.md b/docs/iris-architecture.md
@@ -39,7 +39,7 @@ This boundary is the prompt-injection defense: a malicious image, document, or
 webpage can be described by Iris, but it should not become an instruction to
 Iris.
 
-## Iris, Hermes, And OneDrive
+## Iris, Hermes, And Local Memory
 
 The architecture separates responsibility:
 
@@ -48,11 +48,11 @@ The architecture separates responsibility:
 - Safe Hermes is a restricted text-only sidecar foundation. It can query approved
   memory through a local broker, perform explicit user-requested web research,
   and propose memory into staging. It cannot write
-  active memory, access raw memory files, access OneDrive, run commands, edit
+  active memory, access raw memory files, access cloud-sync storage, run commands, edit
   files, browse, use the clipboard, or control the computer.
-- OneDrive is currently a policy target for encrypted cold archive only. Active
-  memory is local and Iris-owned. Live SQLite or JSON memory stores must not be
-  placed under OneDrive.
+- Active memory is local and Iris-owned. Live SQLite or JSON memory stores must
+  not be placed in cloud-sync folders. Future archive files should be local,
+  encrypted Iris-owned exports with explicit import reconciliation.
 
 Hermes has three explicit process-local modes:
 
@@ -72,10 +72,10 @@ uses the session approval; high-risk work requires separate confirmation. Every
 result returns source and provenance to Iris; only Iris can accept a staged
 proposal into durable memory.
 
-The future goal is clear: a user should be able to install Iris, authenticate to
-their own storage, restore an encrypted user-approved memory archive, and pick up
-where they left off. That is not fully active in v1. The current release has
-the safety scaffolding and policy checks needed to build toward it without
+The future goal is clear: a user should be able to install Iris, restore an
+encrypted user-approved memory archive from local storage, and pick up where
+they left off. That is not fully active in v1. The current release has the
+safety scaffolding and policy checks needed to build toward it without
 pretending private memory roaming is already complete.
 
 ## Why The Architecture Is Careful
diff --git a/docs/manual-test.md b/docs/manual-test.md
@@ -96,13 +96,13 @@ Expected:
 - Natural Iris requests such as `generate an image of Iris as an electric blue logo` open an approval request, call the configured provider only after approval, save the file under `.iris-data\generated-images`, and show the generated preview.
 - Hermes can propose staged memory, and Iris can transfer it into active memory only after explicit `hermes accept <number>`.
 - Hermes cannot access raw memory files.
-- Hermes cannot access OneDrive.
+- Hermes cannot access cloud-sync storage.
 - Hermes cannot run commands, edit files, control browsers/windows, use clipboard, or operate the computer.
 - Memory search is enabled for local approved memory by default.
 - Memory proposals go to staging and require Iris/user approval before promotion.
-- OneDrive archive export remains unavailable until real encryption is implemented.
-- OneDrive paths are cold archive only and must end with `.iris-memory-archive.enc`.
-- Live memory JSON/SQLite stores must not be placed under OneDrive.
+- Memory archive export remains unavailable until real local encryption is implemented.
+- Archive paths must be local Iris-owned paths and must end with `.iris-memory-archive.enc`.
+- Live memory JSON/SQLite stores must not be placed under cloud-sync folders.
 
 ## If Wake Word Fails
 
diff --git a/docs/memory-core-phase1.md b/docs/memory-core-phase1.md
@@ -10,7 +10,7 @@ The current public baseline is intentionally narrower than a full memory product
 - Hermes can query approved memory only through the loopback Iris broker.
 - Hermes can propose memory only into staging.
 - Iris/user approval is required before any staged proposal becomes active memory.
-- OneDrive is cold archive only, disabled by default, and requires `.iris-memory-archive.enc` archive names.
+- Cloud-sync storage is not part of Iris memory; future local archives require `.iris-memory-archive.enc` archive names.
 - Archive export remains unavailable until real encryption is implemented.
 
 Do not add UI panels, settings, SQLite, Postgres, Redis, Docker, Honcho, pgvector, embeddings, background agents, cloud, telemetry, dependencies, unrelated abstractions, unrelated refactors, or unrelated cleanup for memory unless Alejandro explicitly approves the new scope.
diff --git a/docs/roadmap.md b/docs/roadmap.md
@@ -34,6 +34,6 @@ The active model is vision-capable. Iris must use this same model for future ima
 
 ## Implemented Memory Baseline
 
-Memory is now present only as an Iris-owned local broker/staging foundation. Hermes may query approved memory, propose memory to staging, and perform restricted text-only web research through `iris_query_memory`, `iris_propose_memory`, and `iris_web_research`; it cannot write active memory, inspect raw memory files, access OneDrive, run commands, edit files, use the clipboard, control browsers/windows, or operate the computer.
+Memory is now present only as an Iris-owned local broker/staging foundation. Hermes may query approved memory, propose memory to staging, and perform restricted text-only web research through `iris_query_memory`, `iris_propose_memory`, and `iris_web_research`; it cannot write active memory, inspect raw memory files, access cloud-sync storage, run commands, edit files, use the clipboard, control browsers/windows, or operate the computer.
 
-OneDrive remains cold archive only. Archive paths must end with `.iris-memory-archive.enc`, export is unavailable until real encryption is implemented, and live JSON/SQLite memory stores must not be placed under OneDrive.
+Cloud-sync storage is not part of Iris memory or archive behavior. Archive paths must end with `.iris-memory-archive.enc`, export is unavailable until real local encryption is implemented, and live JSON/SQLite memory stores must not be placed under cloud-sync folders.
diff --git a/docs/runtime-orchestration.md b/docs/runtime-orchestration.md
@@ -150,7 +150,7 @@ Do not enable:
 - shell/process execution outside an explicitly approved Agentic Session;
 - fallback models or model auto-selection;
 - parallel Hermes inference streams;
-- live memory databases inside OneDrive.
+- live memory databases inside cloud-sync folders.
 
 Those changes would weaken the local-only safety model and make manual testing
 harder to trust.
diff --git a/known-limitations.md b/known-limitations.md
@@ -24,7 +24,7 @@ This repository is a Windows-only v1 local-first release.
 - Safe Hermes is enabled by default for restricted local reasoning, RAG, staged memory proposals, and explicit web research. It is not an acting plugin system.
 - Off/Safe/Agentic Session policy, expiry, and the pinned Hermes Agent 0.16.0 ACP bridge are implemented. Agentic performs supervised local text, file, PowerShell, process, and isolated browser tasks, queries Iris-owned approved memory, and stages memory proposals with provenance.
 - Agentic workspace containment is advisory rather than an OS sandbox. Scope-expanding and high-risk actions require separate approval and are recorded in a redacted audit.
-- OneDrive archive export is policy-gated and unavailable until real encryption is implemented.
+- Memory archive export is policy-gated and unavailable until real local encryption is implemented.
 - The preflight wizard is read-only. The setup wizard can run allowlisted installs/downloads only when the user explicitly approves them.
 - No system control in Safe mode. Agentic control is limited to the reviewed
   file, PowerShell, process, and isolated browser tools.
diff --git a/profiles/iris_restricted.json b/profiles/iris_restricted.json
@@ -31,15 +31,15 @@
     "active_memory_write": false
   },
   "archive_policy": {
-    "onedrive_sync_enabled_by_default": false,
+    "cloud_sync_enabled_by_default": false,
     "active_memory_location": "local_iris_owned_only",
-    "cold_archive_location": "onedrive_encrypted_only",
+    "archive_location": "local_iris_owned_only",
     "archive_extension": ".iris-memory-archive.enc",
     "export_requires_encryption": true,
     "import_requires_iris_reconciliation": true,
-    "hermes_onedrive_access": false,
-    "live_sqlite_on_onedrive": false,
-    "live_json_memory_on_onedrive": false,
+    "hermes_cloud_storage_access": false,
+    "live_sqlite_on_cloud_sync": false,
+    "live_json_memory_on_cloud_sync": false,
     "export_available": false
   },
   "sidecar": {
diff --git a/scripts/iris_preflight_wizard.ps1 b/scripts/iris_preflight_wizard.ps1
@@ -332,7 +332,7 @@ foreach ($result in $results) {
     $lines.Add("  Next: $($result.Repair)") | Out-Null
 }
 $lines.Add("") | Out-Null
-$lines.Add("This preflight is read-only. It does not install, download, pull models, change services, edit PATH, or modify OneDrive.") | Out-Null
+$lines.Add("This preflight is read-only. It does not install, download, pull models, change services, edit PATH, or modify cloud-sync storage.") | Out-Null
 Set-Content -LiteralPath $reportPath -Value $lines -Encoding utf8
 
 $jsonChecks = @($results | ForEach-Object {
diff --git a/scripts/validate_site.mjs b/scripts/validate_site.mjs
@@ -30,14 +30,14 @@ const sitemap = readFileSync(join(siteDir, "sitemap.xml"), "utf8");
 const llms = readFileSync(join(siteDir, "llms.txt"), "utf8");
 
 const expectedHashes = new Map([
-  ["iris-windows-installer.zip", "b2cfe96f58ba60b0b9d9304b3620e452d2f981b98e64fc487dce534ae352037f"],
-  ["iris-windows.zip", "82314870c33193b43bfb3d37b771cc8d219d7316deb88e85d5895d0db1c5d30e"],
-  ["install-iris-windows.ps1", "9ec2016adfa53e2bbd9035c2b55d149f8017f499d9e5b1550cd5191dc49f4038"],
+  ["iris-windows-installer.zip", "5c034d0044ef37d01e16ee0dae65559da629523a93ee3001d1919904ddbf282e"],
+  ["iris-windows.zip", "115bbc494c1f025d383a7ecbb5f06ecf8d6f2fc9a25f7140b4c573dd15b8e787"],
+  ["install-iris-windows.ps1", "a17c96b685c11416f6510891bad3b0c201d4ddfd014be0ea91c52b8e13f0f9cc"],
 ]);
 
 const requiredFragments = [
   "Iris v1",
-  "Local-First Windows AI Assistant",
+  "Free Local AI Assistant for Windows",
   "application/ld+json",
   "Download beginner bundle",
   "https://github.com/supermang617/IRIS/releases/download/v1/iris-windows-installer.zip",
@@ -92,7 +92,7 @@ for (const asset of manifest.assets) {
 }
 
 const requiredMeta = [
-  /<title>Iris v1 \| Local-First Windows AI Assistant<\/title>/,
+  /<title>Iris v1 \| Free Local AI Assistant for Windows Voice, Vision, Memory, and Research<\/title>/,
   /<link rel="canonical" href="https:\/\/supermang617\.github\.io\/IRIS\/" \/>/,
   /<meta property="og:url" content="https:\/\/supermang617\.github\.io\/IRIS\/" \/>/,
   /<meta property="og:type" content="website" \/>/,
diff --git a/site/index.html b/site/index.html
diff --git a/site/llms.txt b/site/llms.txt
diff --git a/site/release-manifest.json b/site/release-manifest.json
diff --git a/site/sitemap.xml b/site/sitemap.xml
diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs
diff --git a/xtask/src/main.rs b/xtask/src/main.rs
