Astra Shell DocumentationDownload for macOS
Documentation Current: Security and quotas

Documentation / Deployment and operations / Security and quotas

OPERATIONS · SECURITY

Verify first, then allow side effects.

Host identity, user authentication, resource admission, and file permissions are enforced at server boundaries. Quota failures reject new resources without destroying running Terminals.

Identity and authentication

Transport uses TLS 1.3. The client pins the host certificate by TOFU, then authenticates with an OpenSSH Ed25519 or RSA private key. A host mismatch stops the connection before sending the username or signature.

Resource admission

ResourceGovernor atomically reserves capacity before creating a connection, stream, worker, PTY, Attachment, Terminal memory, history, or file operation. Side effects occur only after admission succeeds.

Quota hierarchy

Limits apply from global to user scopes. At capacity, new requests receive an explicit rejection. A running Terminal is not terminated because another request exceeded its quota.

Data and privacy

Remote terminal and file data travels between the client and the host you control. Credentials remain in the system Keychain, and this website does not collect commands, terminal contents, or private keys. Read the Privacy Policy.