Security Baseline 1.2.0 · frozen
What we test. What we do not claim.
A green test run is necessary, not a certification. Map: docs/SECURITY_MODEL.md and docs/security/guarantees.json in the public repo.
Guarantees under test
- Isolation, path jail, restore safety, credential boundary
- Approval gates, scoreboard integrity, audit integrity
- Intake (GET only, no private IPs), dashboard bind (never 0.0.0.0), leases, registry, config fallbacks
python3 -m unittest discover -s tests — 82 tests on the public tree.
Out of scope
Not a process/kernel sandbox. Not host-compromise protection. Not a WAN appliance. In-process sqlite access is out of scope. Prompt-injection payloads are stored as text, not executed — they can still sit in a database. The eval container is a CLI check, not a production security boundary.