.codex-plugin/plugin.json

{
  "name": "arrowmem",
  "version": "1.0.1",
  "description": "Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. The check tools work only from diagnostic output you paste; they do not connect to your machine or network.",
  "author": {
    "name": "ArrowMem",
    "url": "https://arrowmem.ca"
  },
  "interface": {
    "capabilities": [],
    "category": "Security",
    "defaultPrompt": null,
    "developerName": "ArrowMem",
    "displayName": "ArrowMem",
    "shortDescription": "Check and secure your local AI",
    "longDescription": "Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. You can check whether your self-hosted model server is reachable from outside your machine, check whether it still matches the hardening guide, read the live-tested hardening procedure itself, and list the AI tools configured on your machine from config output you paste. You can also ask what ArrowMem is and who operates it, how it handles retention, encryption and where processing happens, what ArrowMem's run-it-on-your-own-hardware setup does today and what is planned, which government disability-claim packs run inside ArrowMem, what the open Data Dignity Standard (v0.5 draft for public comment) says, and verified facts about a local business, entered by hand from its own published sources with its consent, each with its source and date. A security alert relay can also send a push notice to you or your family. The check tools work only from diagnostic output you paste; they do not connect to your machine or network.",
    "composerIcon": "./assets/icon.png",
    "logo": "./assets/logo.png",
    "privacyPolicyURL": "https://arrowmem.ca/privacypolicy",
    "supportURL": "https://arrowmem.ca/#contact",
    "termsOfServiceURL": "https://arrowmem.ca/termsofservice",
    "websiteURL": "https://arrowmem.ca"
  },
  "extensions": {
    "com.openai": {
      "publication": {
        "release_notes": "1.0.1 addresses the review note on tool annotations: readOnlyHint, destructiveHint, idempotentHint and openWorldHint are now set explicitly on every tool. Tools that return fixed text or a report computed from what you paste are read-only, idempotent and closed-world: they store nothing and call no external service. The usage-counted exposure check records each call against your own counter. The alert relay is now three separate tools, each doing one thing: set up the relay, replace its topic or family link, or turn it off; these can send a push notice."
      },
      "review": {
        "demo_recording_url": "https://www.youtube.com/watch?v=ReK75EyAkNg",
        "test_cases": {
          "positive": [
            {
              "description": "Check whether a self-hosted model server is hardened",
              "prompt": "Can you check if my self-hosted model server is hardened against ArrowMem's guide?",
              "tools_triggered": "check_ollama_hardening",
              "expected_behavior": "A pass or fail result against the diagnostic output the user pasted, not a canned document, listing which hardening steps pass and which do not."
            },
            {
              "description": "Check whether a self-hosted model server is exposed beyond the machine",
              "prompt": "Is my self-hosted model server reachable from outside my machine?",
              "tools_triggered": "check_ollama_loopback",
              "expected_behavior": "A pass or fail result from the pasted diagnostic output. On fail, the complete loopback-bind fix written out in full, not a link."
            },
            {
              "description": "List the AI tools configured on the user's own machine",
              "prompt": "What AI tools do I have configured on my machine right now?",
              "tools_triggered": "inventory_ai_agents",
              "expected_behavior": "A list of the AI tools found in the config output the user pasted, not a generic explanation of what such tools are."
            },
            {
              "description": "Learn how to harden a self-hosted model server",
              "prompt": "How do I harden a self-hosted model server?",
              "tools_triggered": "get_hardening_guide",
              "expected_behavior": "The full hardening guide text with concrete steps, not a summary."
            },
            {
              "description": "Learn what ArrowMem is and how it protects privacy",
              "prompt": "What is ArrowMem, and how does it protect my privacy?",
              "tools_triggered": "get_org_info, get_privacy_model",
              "expected_behavior": "A plain description of who runs ArrowMem and its privacy and security architecture, in the plugin's own words, no outside claims."
            }
          ],
          "negative": [
            {
              "description": "Malware scan request; no tool scans a device for infection",
              "prompt": "Is my computer infected with a virus right now?"
            },
            {
              "description": "Contract review; no tool reads or opines on third-party paperwork",
              "prompt": "Can you review my company's AI vendor contracts for compliance risk?"
            },
            {
              "description": "Credential generation; no tool generates, stores or evaluates passwords",
              "prompt": "Generate a strong password for my email account."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "This plugin does not sell products or process payments."
      }
    }
  },
  "apps": "./.app.json"
}