docs: privacy page traced through the code, including the gaps#25
Draft
ohad6k wants to merge 1 commit into
Draft
docs: privacy page traced through the code, including the gaps#25ohad6k wants to merge 1 commit into
ohad6k wants to merge 1 commit into
Conversation
Answers what Emulo reads, writes, and sends, with every claim tied to a symbol or path in emulo.py, emulo_autopilot/, or the bootstrap: - discovery roots, file types, and the per-source human-turn filters - every output path: emulo-out/ in the CWD, the EMULO_HOME layout, adapter destinations - what leaves the machine: emulo.py makes no network calls, the model calls belong to the user's agent, the bootstrap fetch, the card's remote artwork fallback, and the opt-in continuity upload with its plaintext envelope metadata - the exact redaction list, and an explicit "not redacted" list - a pre-share checklist and a Known gaps section for what the code does not enforce (file permissions, no purge command, best-effort regexes) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
docs/PRIVACY.md: what Emulo reads, what it writes, what leaves the machine, and what is not redacted.Every claim was traced through the source before being written (the
SOURCEStable,discover_files, the per-source human-turn filters,write_outputs,resolve_emulo_home,prepare_plugin_run,mcp_main).Gaps the page documents rather than hides
render_card_htmlfalls back to araw.githubusercontent.comimage andpyproject.tomlships no assets, so every pip/uvx-installed card uses the remote URL. No profile data in the request, but opening a card is observable.EMULO_HOMEis created with no explicit mode and never chmod'd, so it inherits the umask. OnlyAutopilotStoreuses 0o700/0o600, and its permissions check is skipped on Windows.pluginsubcommand. Deletion is manual.REDACTIONS: names, card/bank/SSN numbers, addresses, URLs and hostnames, IPv6, user-typed paths, bare domestic phone formats, short-word passwords.SECURITY.mdis marked as a third-party claim, unverifiable from this repo.Publishing known gaps is a deliberate choice. If you would rather fix first and document after, hold this PR.
Written by an agent working in an isolated worktree, reviewed before push.