What the product source says
Gjoa brings privacy-oriented controls into the browser. The public README identifies about:gjoa settings, reversible features, and an about:sovereignty egress audit.
This build makes 1 unattended network call: the Firefox version check.
What that audit covers
The checked-in manifest says it used a static AST audit of authored browser chrome and content code. It classifies authored calls as unattended external, user-enabled network, local, or unproven, and separately catalogs inherited Firefox egress.
It reports 15 of 17 catalogued Firefox egress vectors disabled by default. SafeBrowsing is deliberately retained for security.
The qualification matters
The manifest identifies version 0.4.1, audited commit 5f65774, generated 2026-07-27. The current source displayVersion is 0.4.2. Until the source-derived audit is regenerated for that source state, this site presents the older result as the older result.
This page does not claim zero network access, anonymity, encryption, cloud-sync behavior, telemetry absence beyond the stated audit, or a guarantee about third-party websites.