TOVIO — EVALUATION AND TRUST CHECKLIST
https://tovio.dev/trust
Release-status source record: 2026-10-05

Public release: Prelaunch — https://tovio.dev/community
Downloads: Not published yet — https://tovio.dev/download
Managed hosting: Not available yet — https://tovio.dev/pricing
Independent security review: Not complete — https://tovio.dev/security

DECISIONS TO RECORD
- Which files need cryptographic read protection, and who receives keys?
- Which metadata and authorized working-copy exposures are acceptable?
- Which paths, operations, expiry and delegation limits may each agent use?
- Which transcript capture policy applies before any repository is synchronized?
- Is local, on-premise, or managed operation required? Who owns backup and recovery?
- Which review and unresolved-conflict gates must block landing?
- Which published artifacts, independent reviews, contracts and support commitments are required?

REFERENCE DOCUMENTS
Security and limitations: https://tovio.dev/security
Threat model: https://docs.tovio.dev/security/threat-model/
Compliance boundaries: https://tovio.dev/compliance
Shared responsibility: https://tovio.dev/shared-responsibility
Transcript capture and privacy: https://tovio.dev/agent-transcripts#capture-policy
Self-managed deployment: https://tovio.dev/on-premise
Licensing: https://tovio.dev/license
Legal document status: https://tovio.dev/terms
Pilot tasks: https://tovio.dev/evaluate

Record findings and unmet requirements for your intended profile. This checklist is not a certification or an agreement.
Questions: hello@tovio.dev