Since a .vessel can carry code someone else wrote, isolation was the main thing I designed around. Each one runs sandboxed and can only reach the network origins it declares up front. Your data stays a plain SQLite file too. Unzip a .vessel and you can open the database in any SQLite tool. Nothing locked away.
getvessel.dev
#localfirst #selfhosted #privacy #sqlite #python #pyodide #ai #opensource