Security

• Offline-first: no network calls, no telemetry, no uploads, no LLM/API dependency in product code.
• Subprocesses use argv arrays with shell: false; never interpolate untrusted values into shell strings.
• Path containment anchors all reads/writes to the repository root.
• Reads and outputs are size-bounded; evidence is redacted at construction.
• State writes are atomic.

Community integration for ACKit and GitHub Spec Kit — not an official GitHub integration.