{
  "ok": true,
  "product": "ark",
  "runtime": true,
  "kv_increment": false,
  "stores_phrases": false,
  "stores_vaults": false,
  "not_a_kernel": true,
  "limitation": "Not a kernel, not a bootable OS, not a worm, not kernel isolation. \"Rotating Kernel\" means the rotating crypto/engine, not a Linux/Windows kernel. Local deniable vault. Forgotten phrase = permanent loss. Weak phrase = isolated vault compromise. Does not defeat live OS compromise while unlocked. Civilian software. HSM, kernel isolation, and classified OS are out of scope. Virus sweep is a local intake filter on files YOU put in YOUR vault, not a network AV product and not an exploit. A wrong phrase silently opens a different empty vault (deniability). Hosted API never logs phrases and never stores vaults."
}