Security

SECURITY.md

Security Policy

Reporting vulnerabilities

Please report security issues privately through GitHub Security Advisories or direct maintainer contact.

Scope

local access controls and single-user mode enforcement
API surface and request validation
OpenAI integration and secret handling
launchd/runtime deployment scripts

Disclosure

Please avoid public exploit disclosure before a fix is published.

There aren’t any published security advisories