Reference
Provenance
RTQ's design history, original implementation, and audit trail.
Origin
RTQ was originally implemented as part of the Aartiq browser's security infrastructure. The capability-security pipeline was designed to protect AI-assisted browser operations with explicit authorization boundaries.
It was extracted into a standalone, dependency-free runtime to make capability-security accessible to any application — not just browsers.
Design Inputs
• Capability-based security (Object-capability model)
• Fail-closed design (missing rule = denial)
• HMAC-SHA256 ticket signing (RFC 2104)
• Platform-native sandboxing (Seatbelt, bubblewrap, AppContainer)
• Default-deny policy engine (declarative rules)
• Structured audit with secret redaction
• Zero npm dependencies in security-critical packages
Repository
Audit Trail
Every security claim in this documentation links to its source file and test. The verification matrix page provides full traceability from claim to code.
Back
Overview →