PUBLIC PREVIEW · THREAT MODEL

Security boundary

The node minimizes before upload, binds its collector to loopback, and signs receipts. Those controls authenticate a registered node; they do not prove independent control or execution truth.

Install safely

The preview supports macOS and Node.js 22.13 or newer. Download the versioned tarball and SHA256SUMS, verify with shasum -a 256 -c SHA256SUMS, then install the local file. The package has no runtime dependencies or install lifecycle scripts.

Enforced controls

Private local configuration permissions; hashed server API keys; Ed25519 receipt signatures; localhost bearer authentication; 64 KiB API bodies; bounded OTLP bodies; per-node and salted signup rate limits; duplicate and retry collapse; future-dated evidence exclusion; owned-release checks for route feedback; key rotation and revocation; and fail-closed handling of existing telemetry exporters.

Known limits

Public self-registration remains vulnerable to coordinated Sybil identities. Signed receipts are unverified network claims, not proof that a run happened. Reliability confidence is a freshness-and-density heuristic, and savings feedback is self-reported. Linux service installation, independent security assessment, operational restore drills, and stronger participant identity are not yet complete. Do not use the preview as an authorization source.

Report privately

Use GitHub's private vulnerability reporting flow. Do not include credentials, prompts, customer data, or exploit details in a public issue. There is no bug bounty unless one is announced explicitly.