Security and Privacy

Security and Privacy

Boundaries

• macOS Keychain token storage
• OAuth credentials outside Git
• confirmation-gated writes
• destructive-action protection
• workspace path boundaries
• MCP allowlists
• SSRF and private-network blocking
• audit event redaction
• external-agent isolation for personal context

Reporting

Do not disclose vulnerabilities in public issues. Use GitHub private vulnerability reporting if available.

Privacy

Personal context stays local by default and is not automatically sent to Codex, Claude Code, OpenCode, or web search providers.