CypherAir vs Kernelhub

CypherAir is a fully offline, open-source OpenPGP encryption tool built for iOS, iPadOS, macOS and VisionOS. It makes zero network connections. There is no telemetry, no tracking, and no possibility of data leakage. Two Encryption Profiles • Universal (Profile A) — Interoperable with GnuPG and all major PGP implementations. RFC 4880 compliant, employing Ed25519 and X25519 with SEIPDv1. • Advanced (Profile B) — Implements the latest OpenPGP standard, RFC 9580, with Ed448 and X448, authenticated encryption via AEAD (SEIPDv2), and Argon2id passphrase protection. Capabilities • Encrypt and decrypt text and files, processed as streams for efficiency • Create digital signatures — cleartext for messages, detached for files • Exchange public keys through QR codes using the system Camera, with no camera permission required • Manage multiple keys, each with its own encryption profile • Safeguard private keys in the Secure Enclave, unlocked only by Face ID or Touch ID Privacy Through Architecture • The sole system permission is the Face ID usage description • Private keys never leave the protection of Secure Enclave wrapping Open Source CypherAir is open source and available under the GNU General Public License v3.0 or later (GPL-3.0-or-later) or the Mozilla Public License 2.0 (MPL-2.0). Additional languages are in progress. Disclaimer No Warranty: You expressly acknowledge and agree that use of the Licensed Application is at your sole risk. To the maximum extent permitted by applicable law, the Licensed Application and any services performed or provided by the Licensed Application are provided "as is" and "as available," with all faults and without warranty of any kind, and Licensor hereby disclaims all warranties and conditions with respect to the Licensed Application and any services, either express, implied, or statutory, including, but not limited to, the implied warranties and/or conditions of merchantability, of satisfactory quality, of fitness for a particular purpose, of accuracy, of quiet enjoyment, and of noninfringement of third-party rights. No oral or written information or advice given by Licensor or its authorized representative shall create a warranty. Should the Licensed Application or services prove defective, you assume the entire cost of all necessary servicing, repair, or correction. Some jurisdictions do not allow the exclusion of implied warranties or limitations on applicable statutory rights of a consumer, so the above exclusion and limitations may not apply to you.

KernelHub connects the CLI coding agents already running on your own machine — Claude Code, Codex, Antigravity CLI — to the phone in your pocket. Getting started is one command. In your project folder, run icloser pair. It prints a code. Scan it. That's the setup. WHAT IT IS FOR You leave your desk mid-task. Later, on your phone, you want to know what your agent decided, approve the thing it's waiting on, or say one more sentence — without re-explaining the whole project from scratch. KernelHub keeps tasks, agents, memory and files together, so the next device picks up where the last one stopped. HOW IT WORKS • Say it in plain language. Your sentence is queued verbatim and handed to the CLI runtime on your own machine. • Watch it happen. A single timeline shows what needs you, what is running, and what finished. • Decide from anywhere. Approvals, questions and conflicts are actionable from the phone. • Seven permission levels — read, change code, run commands, search the web, push, system ops, delete or migrate data — each confirmed per device. Permission granted on one device is never inherited by another. WHAT IT DOES NOT DO KernelHub never holds your model API keys, and the backend never calls a model. Every conclusion comes from the runtime signed in on your own machine. The workspace token lives in this device's Keychain and never syncs via iCloud. When it cannot read your workspace, it says so. It will not draw an empty screen and let you conclude there is nothing to do — that misreading is exactly what this app exists to prevent. REQUIREMENTS A machine running icloser, reachable from your phone, with at least one CLI coding agent installed and signed in.