No public ports
Closed by default — apps answer only on the mesh.
Your services talk over an encrypted private network you control. Nothing listens on the open internet unless you put it at the edge on purpose.
Closed by default — apps answer only on the mesh.
Each app keeps a deterministic address across restarts.
Your coordinator, your keys, revocable at any time.