Where your artifact goes
Deslop reviews the submitted artifact through your connected ChatGPT account. Temporary review files and the saved browser connection follow different rules.
After you submit
- The browser's service worker submits the review. Closing this page does not cancel it.
- A Vercel Function passes the artifact to a nonpersistent Vercel Sandbox. The Codex runner there uses your connected ChatGPT account.
- A random run ID stays in this browser. If the page or worker stops, that ID reconnects the browser to the existing command.
- The service worker writes the finished report to this browser's IndexedDB workspace. The sandbox job remains only until the browser claims it or the sandbox expires.
- No readable artifact or report is written to the application database or Blob store. Application logs do not contain those bodies.
- Temporary review files are deleted when a review ends or a result is claimed. If deletion fails, the sandbox expires in less than 45 minutes from creation.
Large PDFs
A PDF that fits the Function request passes through it directly. The browser encrypts a larger PDF with a one-use AES-256-GCM key before uploading the ciphertext to a private Blob transfer.
The Function claims and deletes the ciphertext before it decrypts the PDF for review. The browser requests deletion again when the run ends. Scheduled cleanup removes abandoned ciphertext within 24 hours.
Saved in this browser
- IndexedDB holds the browser workspace used to recover after a close or refresh.
- The workspace expires within 7 days of its latest update. Clear removes it at once. Clearing site data also removes it, and the browser may evict it sooner.
- The ChatGPT credential is stored separately. It is encrypted with AES-256-GCM and bound to the signed browser session. Deslop has no server-side credential database.
- The credential expires within 7 days of its latest write. A credential rotation after use can restart that clock.
- Your connected OpenAI account or workspace controls OpenAI's processing terms and data settings.
Clear and Disconnect
Clear removes the saved workspace from this browser. It also stops the request and asks the sandbox to delete the matching job.
Disconnect removes the reusable credential and the current managed sandbox. It does not change the connected ChatGPT account's history or settings.
Source code
The links below point to the code behind these rules on the default branch.