| id | security-policy |
|---|---|
| authority | canonical |
| status | canonical |
| title | Security policy and deployment boundary |
| genre | spec |
| last_verified | 2026-09-02 |
The project is pre-1.0. Security fixes are applied to the latest development release only.
Use GitHub private vulnerability reporting when enabled. Do not open a public issue containing exploit details, credentials, private infrastructure, prompts, or user data.
The reference runtime and mock provider are development implementations. They do not provide:
- tenant authentication or authorization;
- strong process, kernel, filesystem, or network isolation;
- credential storage or secret brokering;
- durable distributed scheduling;
- production rate limiting, audit retention, or disaster recovery.
A production adapter must document its trust boundary, capability limitations, credential model, and isolation evidence. Passing portable conformance does not certify security.
The Local Provider runs processes with the current OS user's permissions. Those processes may access the host filesystem, network, credentials, and services available to that user. Its file API path checks do not make command execution safe for untrusted input.