# Veriloop Agent

Desktop companion for Veriloop. Reports endpoint activity (unlock events, new processes, new outbound hosts, USB mounts, clipboard secrets) to your workspace's `/api/public/v1/evaluate` endpoint, so the same adaptive engine that scores your web traffic also scores your endpoint.

**This is not an antivirus.** It does not scan file contents. It complements a real AV; it does not replace one.

## Install (pre-built)

Download the archive for your OS from your Veriloop workspace → Settings → Devices, unpack, and run:

- Linux: `./Veriloop\ Agent-linux-x64/Veriloop\ Agent`
- macOS: open `Veriloop Agent.app` (Gatekeeper: right-click → Open the first time — the build is unsigned)
- Windows: run `Veriloop Agent.exe` (SmartScreen: "More info" → "Run anyway" — unsigned)

On first launch, paste your workspace API key (from Workspace → API keys) and click Save.

## Build from source

```
cd desktop
npm install
npm run make:icons
npm run package:linux    # or package:win / package:mac / package:mac-arm
```

Output goes to `desktop/release/`.

## Data & privacy

- No packet capture, no file scanning, no keylogging.
- Process collector reports process **names** only, no arguments or memory.
- Network collector reports remote public IPs only, never private ranges.
- Clipboard guard runs entirely locally; only the **type** of secret ("openai_key", "jwt", …) is reported, never the value.
- All events are sent to the endpoint you configure. Delete the agent, revoke its API key, or toggle collectors off any time.
