FAQ
Short answers. Longer threat model: docs/THREAT_MODEL.md in the repo.
Is this GrapheneOS for laptops?
Graphene intent — policy OS, hardened defaults, honest hardware tiers. Not a port of AOSP. Not Titan. Not “they can’t crack it.”
Isn’t this just Arch?
Arch is the warehouse. You cannot casually launch Arch from the dock — only Cicada wrappers. That identity gap is the product.
Why not Qubes?
Qubes wins compartmentalization. Cicada is a Hyprland daily driver with Graphene-shaped scopes. Different job. Use Qubes if the threat is malicious PDFs across trust domains.
Does the camera kill really kill?
Software: unloads uvcvideo, forces scopes deny. Root can reverse it.
Hardware kill switches (Librem-style) are the real ceiling.
Can I run this on my Framework?
Yes — that is the daily-driver tier. Enroll TPM2 and Secure Boot after install. Prototype development still happens on Intel MBA 2015–2017.