Thanks for trying this. It is early and I would rather hear what is wrong with it than what is nice about it. Below is what to do, in order, and the things actually worth telling me afterwards.
Before you start. Put ordinary things in it — your job, how you like answers, roughly what you earn if you want to test the tax parts. Not passwords, not recovery codes, nothing you would call a secret. Marking a field private genuinely stops assistants seeing it, but it is not encrypted against me: I run the server and I can read the database. That will change; today it has not.
Two minutes, no install. You will be shown a master token once — copy it somewhere. There is no emailed password reset, so it is the way back in if you forget your password.
Create your vaultThe empty vault offers two routes. Try the assistant one even if it feels like the long way round — connect one from the Connect tab, then tell it about yourself or paste in your CV. It proposes; you approve what you want and bin the rest.
Then add one by hand too, so you have seen both.
"What do you know about me?" — in Claude Desktop say "governor" in the question or it answers from its own memory instead. The point is that a chat which has never met you answers correctly.
Tell an assistant your email address, or your employer, and ask it to remember that. It should refuse and say why. Tell me if you find a way round it — that is the most useful thing you could send me.
In Your details, click any row. It should say who can read it and why. You will see three states:
Shared Range only Private
Mark something private that Governor thought was fine, then ask an assistant about it in a new chat. It should not have it.
On the Overview. It answers two different questions and tries to explain why they differ. If that reads as noise, say so — it is the part I am least sure about.
Any moment you had to re-read something, guess, or give up. Even small ones — especially small ones. "I did not know what to type" is a complete and useful answer.
Governor explains a lot: what is shared, what is kept as a range, what identifies you. Is that useful, or is it a tool being pleased with itself?
"No" is genuinely a fine answer, and more useful than a polite yes. What would have to be true?
Including things it was never meant to do. If you assumed it could, that is worth knowing.