Updates

docs/security-privacy.md

@@ -3,10 +3,12 @@
 The default posture is local inference, explicit writes, and fail-closed
 computer use. No telemetry or cloud inference is required. Model endpoints
 stay on localhost. Public `web_search`, `google_search`, `fetch_page`,
-`web_fetch`, `wiki_search`, `hn_search`, and `code_search` are allowed by
-default without a confirmation prompt and without extra API keys. There is no
-SearXNG dependency. Shell commands that open public HTTP (curl, wget) remain
-blocked by the runtime; use the web tools instead.
+`web_fetch`, `wiki_search`, `hn_search`, `code_search`, and `browser` are allowed
+by default without a confirmation prompt and without extra API keys. They run in
+a Jarvis-owned Chromium window. Private, loopback, and metadata URLs are
+blocked before the browser starts. There is no SearXNG dependency. Shell
+commands that open public HTTP (curl, wget) remain blocked by the runtime; use
+the web tools instead.
 
 ```mermaid
 flowchart TD
@@ -17,7 +19,7 @@ flowchart TD
   C -->|no| B[Block and explain]
   X --> A[Audit metadata]
   X --> D[Return result]
-  L[Lock screen] --> K[Revoke CU + mute HUD]
+  L[Lock screen] --> K[Revoke CU + webcam + mute HUD]
 ```
 
 ## Protected assets
@@ -26,6 +28,9 @@ flowchart TD
   explicitly enabled.
 - Screen frames remain in memory or temporary storage and are wiped on
   computer-use revoke by default.
+- Webcam stills stay under `/tmp/jarvis-webcam` and are wiped on camera
+  revoke, lock screen, cancel, or `WipeComputerTraces()`. Camera access is
+  off by default and needs Settings plus Allow now.
 - Computer-use audit logs store action metadata and screenshot hashes, not
   screenshots.
 - Voice references, memory, and model caches are user-owned files.
@@ -46,6 +51,10 @@ stops on revoke, Escape, lock screen, or grant expiry. It refuses password
 fields, dangerous actions without confirmation, and actuation when the portal
 or EIS backend is not ready. Legacy input is opt-in.
 
+Camera access is a separate fail-closed grant. Enable it in Settings, press
+Allow now, then the agent may call `webcam`. Revoke, lock screen, cancel, and
+grant expiry wipe captured stills.
+
 ## Threat model boundaries
 
 The daemon assumes the local user account and installed desktop libraries are