On this page
How to read this policy
These are the 37 Core RPC capability-policy strings, not the entire application capability vocabulary. Descriptor methods below are exact permissions.methods RPC names and do not always equal their JavaScript member label. Use the focused Arcane member guides for application-facing signatures and results.
All policy methods exist in Core. Only a canonical Core + Android marker or a named Android projection reaches Android. The policy does not by itself define Microsoft NT versus Linux behavior.
ai.inference
Exact RPC method names: ai.chat, ai.profile.current, localai.isolated.inspect, localai.isolated.question, localai.services.recover, localai.status, ollama.chat, ollama.embed, ollama.generate, speech.status, speech.synthesize, speech.transcribe.
Host projection: Android projects localai.status, ollama.chat, speech.status, speech.synthesize, and speech.transcribe only to exact application IDs boss and precrisis. The projected ollama.chat stream also admits the correlated ollama.chunk event.
Additional admission: Isolated operations are Kempo-only; localai.services.recover is privileged, exclusive, and limited to exact application IDs boss and precrisis. Kempo also suppresses raw Ollama chat/generate/embed at runtime.
ai.models.manage
Exact RPC method names: ollama.brain.create, ollama.copy, ollama.create, ollama.delete, ollama.pull, ollama.push, ollama.selection.set.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Model mutation is Core-only. Brain creation is Settings-only; selection mutation is Settings/Shell-only; operations are exclusive.
ai.models.read
Exact RPC method names: ai.models, ollama.models, ollama.running, ollama.selection.get, ollama.show, ollama.version.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Diagnostics are app-bound to Settings, Shell, or Terminal; selection read is Settings/Shell-only.
ai.runtime.manage
Exact RPC method names: localai.parallel.requests.set.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Explicit Core-only, Boss-only, privileged, and exclusive. Automatic mutation is Microsoft NT-only; Linux returns administrator guidance.
ai.settings.manage
Exact RPC method names: ai.provider.models, ai.provider.settings.get, ai.provider.settings.set, ollama.service.settings.get, ollama.service.settings.set, ollama.settings.get, ollama.settings.set.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Settings-only. Service mutation is privileged; writes are exclusive.
appearance.read
Exact RPC method names: appearance.current.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
appearance.write
Exact RPC method names: appearance.apply.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
applications.launch
Exact RPC method names: apps.launch.
Host projection: Canonical Core + Android method.
Additional admission: Shell/Terminal-only.
applications.read
Exact RPC method names: apps.list.
Host projection: Canonical Core + Android method.
Additional admission: Shell/Terminal-only.
development.manage
Exact RPC method names: development.node.install, development.setup.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Developer-only; Node installation is privileged; both methods are exclusive.
development.read
Exact RPC method names: development.context, development.inspect.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Developer-only.
diagnostics.read
Exact RPC method names: diagnostics.get, diagnostics.recent.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
environment.protected.read
Exact RPC method names: environment.get.
Host projection: Canonical Core + Android method.
Additional admission: Vault-only; reveals one protected plaintext value.
environment.read
Exact RPC method names: environment.list.
Host projection: Canonical Core + Android method.
Additional admission: Vault-only.
environment.write
Exact RPC method names: environment.delete, environment.set.
Host projection: Canonical Core + Android methods.
Additional admission: Vault-only and exclusive.
external.open
Exact RPC method names: external.open.
Host projection: Canonical Core + Android method; URI schemes remain host-policy restricted.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
filesystem.directory.select
Exact RPC method names: filesystem.directory.select.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
firewall.manage
Exact RPC method names: firewall.disable, firewall.enable, firewall.install, firewall.recover, firewall.rollback.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Explicit Core-only, Firewall-app-only, privileged, exclusive, and subject to separate caller-auth/simulation rules.
firewall.read
Exact RPC method names: firewall.audit, firewall.status.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Explicit Core-only and Firewall-app-only.
identity.read
Exact RPC method names: user.current.
Host projection: Canonical Core + Android method.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
installation.read
Exact RPC method names: installation.status.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
mail.send
Exact RPC method names: mail.send.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Explicit Core-only and limited to Precrisis/Warrior Spirit.
network.status.read
Exact RPC method names: network.status.
Host projection: Canonical Core + Android method.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
preferences.read
Exact RPC method names: preferences.get, preferences.list, system.failurePolicy.get.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Failure-policy read is Settings-only.
preferences.write
Exact RPC method names: preferences.delete, preferences.set, preferences.setMany, system.failurePolicy.set.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Failure-policy write is Settings-only and exclusive.
provisioning.manage
Exact RPC method names: installation.ensure, installation.uninstaller.open, localai.platform.ensure, machine.status, provisioning.plan, requirements.ensure.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Provisioner-only. Installation/requirements ensure are privileged; mutating ensures are exclusive.
repository.kempo.read
Exact RPC method names: repository.kempo.snapshot.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Kempo-only.
repository.kempo.write
Exact RPC method names: repository.kempo.begin, repository.kempo.publish, repository.kempo.score.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Kempo-only and exclusive.
repository.spellwire.read
Exact RPC method names: repository.spellwire.snapshot.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Spellwire-only.
requirements.read
Exact RPC method names: requirements.list.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
session.control
Exact RPC method names: session.logout, system.lock.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Shell app type only and exclusive.
storage.read
Exact RPC method names: storage.get, storage.list.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
storage.write
Exact RPC method names: storage.delete, storage.set.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
system.metrics.read
Exact RPC method names: system.metrics.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
system.read
Exact RPC method names: permissions.status, platform.status.
Host projection: platform.status is a canonical Core + Android method.
Additional admission: No app ID/type restriction is recorded in the capability summary; runtime, identity, provider, and operating-system checks still apply.
terminal.execute
Exact RPC method names: terminal.close, terminal.list, terminal.resize, terminal.signal, terminal.start, terminal.write.
Host projection: All six terminal methods are canonical Core + Android methods.
Additional admission: Terminal-app-only.
users.manage
Exact RPC method names: users.activate, users.add, users.applyPassword, users.list, users.resetPassword, users.restoreShell, users.validate, users.verifyShell.
Host projection: Core policy. No Android projection is implied by this record.
Additional admission: Provisioner-only; five operations are privileged and mutating operations are exclusive.
Capability-free RPC methods
| Method | Availability |
|---|---|
app.current | Core and canonical Android projection |
capabilities.list | Core only; Android nests authority under platform.status |
system.ping | Core and canonical Android projection |
version.current | Core and canonical Android projection |