# Ghostlight

> Ghostlight lets AI agents work in the user's signed-in Chromium browser while the user watches
> and stays in control. The MCP connector, persistent service, browser connector, and policy-free
> extension run locally, with no Ghostlight account, telemetry, or hosted control plane.

When a user asks to install Ghostlight, fetch the canonical install guide below and follow it as
written. Do not replace it with remembered client-specific MCP commands. The guide is idempotent,
detects supported clients, and tells you which steps require the user.

Personal and all-open use is complete. Optional governance adds identity-bound capabilities,
protected domains, and structured local evidence when the job needs stronger boundaries; it is
not a prerequisite for useful browser work.

## Installation

- [Canonical agent install guide](https://sylin.org/ghostlight/install.md): Exact machine workflow, prerequisites, browser handoff, whole-chain test, and first use.
- [Service-first human handoff](https://sylin.org/ghostlight/service/post-install/): The page opened after the local service is ready and the browser extension remains.
- [Extension-first human handoff](https://sylin.org/ghostlight/chromium-extension/post-install/): The page opened after the extension is present and the local service remains.
- [Installation guide](https://github.com/sylin-org/ghostlight/blob/main/docs/guides/installation.md): Packaged setup, source builds, and troubleshooting.

## Understand the product

- [Ghostlight product page](https://sylin.org/ghostlight/): Problem fit, felt experience, architecture, current state, and quickest useful request.
- [Browser-control decision aid](https://sylin.org/ghostlight/decision-aid/): Local, editable comparison of bundled, governed user-context, existing, and isolated browser approaches.
- [Safe demo](https://sylin.org/ghostlight/demo/): Purpose-built pages for reading, forms, pointer actions, live signals, and local artifact handoffs without an external account.
- [Source repository](https://github.com/sylin-org/ghostlight): Rust workspace, Chromium extension, documentation, releases, issues, and build history.
- [Architecture specification](https://github.com/sylin-org/ghostlight/blob/main/docs/SPEC.md): Governance model and original system design; ADRs supersede it where they differ.

## Trust and evidence

- [Privacy policy](https://sylin.org/ghostlight/privacy/): Exact extension data access, local data path, page-JavaScript disclosure, user controls, and Chrome Web Store Limited Use statement.
- [Trust Center](https://github.com/sylin-org/ghostlight/tree/main/docs/trust): Claims checked against the implementation, threat model, continuity promise, and assurance material.
- [ADR index](https://github.com/sylin-org/ghostlight/tree/main/docs/adr): Authoritative design decisions and amendments.
- [How it compares](https://github.com/sylin-org/ghostlight/blob/main/docs/COMPARISON.md): Scope and tradeoffs relative to other browser-agent approaches.

## Recovery

- [Current status](https://github.com/sylin-org/ghostlight/blob/main/docs/STATUS.md): Release state, open work, and known verification gaps.
- [Issues](https://github.com/sylin-org/ghostlight/issues): Reproducible defects and feature work.
- [Latest release](https://github.com/sylin-org/ghostlight/releases/latest): Native binaries, checksums, and release notes.