Security

Offline-first: zero outbound product egress after installation. See docs/security/THREAT_MODEL.md.

• No telemetry, no cloud, no LLM calls
• Redaction at construction, secrets never in evidence
• Path traversal/realpath containment, ReDoS guards, CSP, bundle redaction

node scripts/check-offline-egress.mjs  # PASS
pnpm test tests/security/offline-*.test.ts  # 21 tests PASS