Security

AgentInspect prioritizes local evidence, bounded redaction, and fail-closed contracts. It is not a compliance certification product.

Reporting

Prefer a private GitHub Security Advisory when available. Do not attach real API keys, production traces, or customer PII. Use synthetic placeholders.

Full policy: SECURITY.md.

Privacy

See the Privacy page for the local-first data boundary.