Security fixes are accepted for the latest source on the default branch and the current 0.1.0-alpha.1 source alpha. There is no hosted service or automatic-update channel.

Use the repository host's private security-advisory feature when available. Do not publish an issue containing credentials, project media, signed URLs, raw provider bodies, or a working exploit. Include:

• affected commit/version and macOS/Bun/browser versions;
• the local route or project operation involved;
• minimal reproduction using synthetic data;
• expected and observed impact;
• whether a credential or arbitrary project path may be exposed.

If no private channel is available, open a public issue requesting a private maintainer contact without including sensitive details.

• The CLI binds only to 127.0.0.1 and deliberately uses direct tokenless editor access. It validates the exact Host, rejects foreign Origin, requires the exact same Origin for mutations, and does not enable permissive CORS. Any process running as the same machine user can make loopback HTTP requests; remote/LAN serving is outside this trust model.
• The browser receives credential presence/source and ADR 0011's bounded preview of the effective key. It never receives a complete SeedAudio or LLM key; those stay in current-user machine settings or environment variables.
• The server blocks every workspace API with HTTP 428 until both redacted profiles report complete fields and effective key presence. Settings remain reachable for recovery; this gate does not transmit or remotely test keys.
• Paid/network requests require an explicit user action.
• Project file reads resolve from system-owned asset IDs through a project-root allowlist.
• Official and LLM response bodies are untrusted until parsed and validated.
• LLM proposals remain pending until explicit accept/reject review.
• Browser-rendered exports are accepted only when the current assembly and input hashes still match and the WAV validates at 48 kHz.

• Treat .adw directories as private creative data.
• Do not share machine settings or shell history containing keys.
• Verify a project's origin before opening it; the alpha does not sandbox SQLite parsing or audio decoding from a malicious project.
• Back up projects before migrating and follow docs/project-backup-and-migrations.md.
• Review configured endpoints and exact external model IDs before any paid action.

• No code signing, notarization, sandboxed desktop shell, or automatic update.
• Source dependencies are installed from the Bun registry lockfile.
• Browser audio decoding processes user/imported WAV files in the selected browser.
• The first declared support target is macOS 14+ on Apple Silicon.

Release security gates and vulnerability-audit policy are documented in docs/release-checklist.md.