Security

Local-first by construction

Agent CLIs run as local processes on your machine, against your local git repositories. There is no build step that uploads your project, no remote sandbox, and no server-side copy of your work.

The account service holds identity, subscription and device records. There is no endpoint on it that accepts source code, prompts or terminal output, so there is nothing there to leak.

Worktree isolation

Each worker agent is confined to its own git worktree. A worker cannot overwrite another worker’s files, and the changes it makes are reviewable as an ordinary branch before they reach your main line.

Secrets

API keys and CLI credentials are stored in the macOS Keychain, shown masked in settings, never written to logs and never sent to us. Licence state is cached as a signed token that carries no personal data beyond the account identifier.

The desktop build

Releases are built for Apple silicon and run with Apple’s hardened runtime. The app does not update itself: to update, download the new release from this site and install it over the old one.

The website

This site is static, served from Cloudflare Pages over HTTPS with HSTS, and carries a content security policy. It loads no third-party script and no web font from a third-party host.

Reporting a vulnerability

Write to the security address below. Tell us what you found and how to reproduce it; please give us a reasonable window to fix it before publishing. We will confirm receipt within 3 business days and keep you posted until it is closed. We do not run a paid bounty yet, and we will not pretend otherwise.