The actual kernel runs in your browser, the same code the CLI executes (mechanically transformed, equivalence-tested). Nothing leaves your machine.
Honest scope: this page runs the pure kinds, citation · number · date · link · schema · version(semver). Crypto kinds (hash · signature · receipt) and git-fact kinds (commit · fileChanged · diffContains · file · artifact) need your machine's crypto/git/filesystem, they run in the CLI.
runs locally · share links live in the # fragment, never sent to a server