Skip to content

Security and determinism

Jump to bottom
Arun Soman edited this page Aug 31, 2026 · 1 revision

Security & determinism notes

Security & determinism notes — migrated from the README on 2026-08-31 and verified against the code at tag v0.1.4; if code and wiki ever disagree, the code wins and this page gets a PR.

Security & determinism notes (from the code)

  • File tools jail unconditionally under the project root (cie.tools.view._jail); CIE_RUN_ROOT can widen the run jail only. There is no "disable the jail" option.
  • Every edge carries provenance (extracted_at/extractor_version/ source_ref); confidence is stamped at write time, never invented by the pure extractor.
  • Per-operation wall-clock timeouts (cie.timeouts) bound lock-wait hangs that the driver's own timeouts don't — a direct lesson from a real 2026-08-04 Aura schema-lock incident documented in cie.timeouts.
  • Citations in GraphRAG are assembled from the graph, never emitted by the LLM, so they can't be fabricated mid-generation.

If code and this wiki disagree, the code wins — then this wiki gets a PR. Evidence lives in the repo, not here.

cie — Code Insight Engine

Start

How-tos

Reference

Contribute

Clone this wiki locally