410aa75690
- SECURITY.md (zh) + docs/en/security.md: trust boundaries (app / box / Docker API / relay / providers), where every secret lives and what a thief holding that thing actually gets, the injection layers with an honest limit (no absolute defense — the human at the gate is the last line), the network surface, the known-limits list and hardening advice - state.json is written 0600: it carries model keys, and now says so with its permissions like the vault's key file - README (zh + en) link it; reporting = private security advisory |
||
|---|---|---|
| .. | ||
| demo | ||
| en | ||
| specs | ||
| architecture.md | ||
| install.md | ||
| multi-device.md | ||
| plan-2026-11-computer-use.md | ||
| plan-2026-11-improvements.md | ||
| protocol.md | ||
| release.md | ||