Skip to content

docs: add security FAQ#44

Merged
anandgupta42 merged 2 commits intomainfrom
worktree-security-faq
Mar 5, 2026
Merged

docs: add security FAQ#44
anandgupta42 merged 2 commits intomainfrom
worktree-security-faq

Conversation

@anandgupta42
Copy link
Contributor

Summary

  • Adds a Security FAQ page to the docs Reference section
  • Covers 12 practical questions: data privacy, credential handling, permission controls, network endpoints, telemetry, MCP server trust, Python engine isolation, air-gapped usage, team security, and AI-generated SQL safety
  • Links back to existing docs (permissions, telemetry, network) instead of duplicating content

Test plan

  • Verify mkdocs serve renders the page correctly
  • Check all internal links resolve (permissions, telemetry, network)
  • Review content for accuracy against current codebase behavior

🤖 Generated with Claude Code

Covers the practical security questions — data privacy, credential handling,
permission controls, network endpoints, telemetry, MCP server trust, Python
engine isolation, air-gapped usage, team security, and AI-generated SQL safety.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Comment on lines +178 to +182
- Run against a **staging environment** before production
- Use the `analyst` agent with restricted permissions for ad-hoc queries

## Where should I report security vulnerabilities?

This comment was marked as outdated.

… issues

Aligns with SECURITY.md policy — vulnerabilities should be reported via
private email, not public GitHub issues.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@anandgupta42 anandgupta42 merged commit 26fda3b into main Mar 5, 2026
5 checks passed
@kulvirgit kulvirgit deleted the worktree-security-faq branch March 10, 2026 21:06
anandgupta42 added a commit that referenced this pull request Mar 17, 2026
* docs: add security FAQ to reference section

Covers the practical security questions — data privacy, credential handling,
permission controls, network endpoints, telemetry, MCP server trust, Python
engine isolation, air-gapped usage, team security, and AI-generated SQL safety.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: direct vulnerability reports to security@altimate.ai, not public issues

Aligns with SECURITY.md policy — vulnerabilities should be reported via
private email, not public GitHub issues.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant