Recover from evidence, not guesswork.

Start with readiness

Open Tools, then choose Readiness to check the local runtime, model route, protected storage, database, workspace access, and packaged application state. Use the automatic setup action for the recommended local model, or choose Manual setup to use an existing Ollama installation.

Readiness reports observed state. It does not mark a provider connected until verification succeeds.

Model and account recovery

• A local model can keep basic work available when cloud providers are unconfigured.
• API keys can be replaced from Settings without exposing the previous value.
• OAuth connections can be disconnected and authorized again in the provider’s external browser page.
• Subscription-backed Codex or Claude routes require the provider’s authenticated command-line tool.
• If a provider is unavailable, inspect the route evidence before retrying or selecting a fallback.

Paired-node extensions

Kestrel ships only as an Apple Silicon Mac application. It does not provide an iPhone, Android, App Store, or Google Play companion.

The gateway's authenticated paired-node protocol is an extension contract for separately developed clients. Pair only software you trust with a gateway you control; non-loopback gateways require HTTPS and can be revoked from Kestrel.

Event applications

Import the official event page, review eligibility evidence, and check every personal or sensitive answer. Agent-written answers remain unreviewed until you approve them. Kestrel cannot accept legal terms, attest eligibility, pay fees, or perform the final submission without an explicit browser approval.

Keep the confirmation or receipt after submission; it is the evidence used to mark the application submitted.

Permissions and safe mode

Project-folder access, Accessibility, Screen Recording, microphone, location, and provider scopes remain separate. Grant only the permission needed for the current task.

If behavior is unexpected, stop the task, disconnect the affected provider or device, and inspect Activity before retrying. Consequential actions remain approval-gated.

Backups and deletion

Use the verified local backup control before changing machines or resetting application data. A backup contains personal work context and must be protected like the original device.

The destructive reset control removes Kestrel’s local application state. Revoke external OAuth grants separately with each provider.

Public support status

Kestrel provides Kestrel product, account, privacy, and deletion support at arnavsri993@gmail.com. Include the app version, platform, and the relevant non-sensitive readiness error; never send API keys, OAuth tokens, private prompts, or pairing credentials.