Your state stays local. Connections stay explicit.

sous has no hosted account or analytics service. It stores its state in~/.sous on your computer. Some commands use tools that communicate with external services.

What sous keeps

• Your private notes and the project each belongs to.
• Cached board observations, reports and the last agent session in each project.
• For a task handed to an agent: its brief, worktree, log and result, until cleaned up.
• Sourced memories, their history and sharing grants, and effort links between projects and notes.

Where information can go

gh and glab contact GitHub and GitLab using your existing login. Filing a note, closing its shared issue or approving a run can write to those services. These are explicit actions.

Agent handoffs include the task and project context, which can include relevant memories and effort links. Your agent may send this information and project files to its model provider under its own settings. Configured plugins run with your account's access and may use the network.

sous update contacts GitHub’s public release endpoint. No private project context or credentials are sent. Homebrew installations use Homebrew for the upgrade.

The browser board

sous serve starts a server on 127.0.0.1, on your computer. Open it using the secret-bearing address sous prints. It is not a hosted dashboard, and it runs only while you keep the command open. That address grants access to your board and its actions; keep it private. The local server exchanges its secret for an HTTP-only, SameSite cookie.

Memory boundaries

Automatic briefings select memory by project and workspace, with explicit sharing between projects. Ambiguous project selection is reported without exposing private context. These scopes prevent accidental context mixing; they do not block a program that can read your local files. Explicit IDs and broad searches can read across scopes. Linking an effort does not automatically share a memory's body.

Forgetting removes the stored text and evidence. It retains a tombstone to prevent a repeated capture from restoring the text, and cannot erase copies already sent to an agent, exported or backed up. Source references are stored without fetching them.

This website

This site’s code sets no cookies and loads no analytics. Fonts and scripts are served with the pages. The theme you pick is kept in your browser. Cloudflare serves the pages.

The source of sous is on GitHub.