This project is pre-1.0. Security fixes target the latest release.

Please open a private GitHub security advisory when the repository is public.

If that is unavailable, open an issue with minimal reproduction details and do not include secrets, private prompts, tokens, local paths, or user data.

The package is designed to run locally and does not send prompts over the network.

Do not publish raw user transcripts as eval or training examples. Generalize and redact examples before sharing.