AI assist
The built-in AI can build freely within the authority the app already has. The moment it would add a capability, open a tainted→sink flow, or introduce web3 authority, the decision surfaces to you — it is never applied silently.
Components
App structure
Decision log — append-only
What do you want to build?
Describe your app in plain words — ME10 builds it for you, ready to run on every OS and the web.
·
·
✓ Verified by construction — every app can only do what it declares.
Live preview, rendered by construction — every node built with createElement, never innerHTML. The whole class of injection attacks has nowhere to land, because the sink does not exist.
Inspector
Select a component to edit it, or add one from the palette.
Capabilities — declared = used, enforced
An ME10 app can only do what it declares. The verifier re-derives the set from the app and refuses to run on any mismatch — including over-declaration. Wildcards like net:* are not even expressible.
Defence certificate
Update preview — what your users would see
Publish once, then keep editing. This previews the authority delta from your published baseline: an update that adds no capability and no data-flow ships silently (your users never see a prompt); one that expands authority needs a one-tap consent — computed, not human-reviewed.