Nerva

Nerva is a desktop app that runs entirely on your machine: a Rust core under Tauri 2 with a React surface, its state kept as readable files in a git-backed folder you own. It brings your own model, local or by key, and hosts MCP servers as tools. Every action is gated by a six-level permission ladder, from chat-only to autonomous inside one declared scope, so nothing touches a file, an app, or the network without a rule that allowed it.