Private beta · macOS
Gambit is a local-first supervised agentic browser. The model can read the page in front of you. A native policy engine decides what is allowed. You keep the rest.
Contract
You offer the current page. Policy, profiles, and an audit trail keep the rest.
Local first
Current-page text, memory, task logs, and default inference stay on the device. Sprint 1 has no cloud model.
Separate identity
Personal cookies, passwords, and passkeys stay in Personal. Agent Research cannot see them. Isolation is a profile boundary, not a prompt.
Fail closed
A native policy engine validates proposed actions. Ambiguity, cross-origin jumps, and sensitive data stop the run.
Profiles
Ids stay personal, agent-research, and
agent-approved. Cookies and the vault stay in Personal.
personal
Passwords, passkeys, import, and autofill live here only. Agent profiles stay locked out of the vault.
agent-research
Isolated from Personal. Sprint 1 is read-only: the current page, the sidebar, a local Ask.
agent-approved
Later actions that leave the device wait here for an explicit approve. There is no “trust the agent?” shortcut.
Sprint 1
Read-only browsing plus a local Ask loop. No click, type, or submit on your behalf.
In the build
Not this release
Passkeys stay in Apple Passwords / iCloud Keychain. Unsigned local builds can request Keychain authorization; third-party sites that require Apple’s browser entitlement will keep offering their usual fallback.
Private beta
This form opens your mail client. Nothing is posted to a server.