Souveraine Web hosts web content on an ordinary Wayland surface using the system WebKitGTK engine. A site can become an application with its own window identity, while the same runtime can host the agent’s local visual rig.
The page does not choose its trust
Web, application and rig modes have different privileges. The host chooses the mode before loading content. An ordinary remote page does not gain a shell bridge or transparent surface by asking for one.
Disposable browsing starts blank and can be filled by the shell’s browse field. Promotion gives a chosen page an installed identity. Navigation, history, search, zoom and failures travel through a named interface, so the surrounding shell need not invent its own browser state.
The visual rig has a narrower local origin and a separate vocabulary. Sharing a rendering engine does not erase the difference between a remote site and a trusted local limb.
What remains open
- Web permission and download paths remain refused where an authority has not admitted them.
- The runtime is a system-webview host, with engine availability and platform limitations inherited from that dependency.
- Device integration and rig behavior require their own acceptance.