Skip to content

security.md

Latest commit

 

History

History
33 lines (23 loc) · 1.05 KB

security.md

File metadata and controls

33 lines (23 loc) · 1.05 KB
Raw

Security Notes

MergeLoop is an orchestration layer. It does not implement vendor authentication itself.

Security Model

  • Local execution by default (node dist/server.js).
  • No token scraping or session replay.
  • No hidden telemetry in runtime code.
  • Run artifacts written locally (configurable persistence path).

Trust Boundaries

  1. Host/editor calling MCP.
  2. Council Hub process.
  3. Worker CLIs.
  4. Any external data accessed by those workers.

Treat worker output as untrusted until validated.

Operational Guidance

  • Keep sensitive repos on trusted machines.
  • Review custom worker commands before enabling.
  • Treat worker output as untrusted input (prompt-injection risk still applies).
  • Disable persistence when prompts/results may include sensitive data.
  • Pin CLI versions in team environments when reproducibility matters.

References