# Security

Fob is a local CLI and browser dashboard that can pass project context to locally installed AI CLIs such as Claude Code and Codex.

## Reporting Security Issues

For now, contact the project maintainer privately. Do not post secrets, tokens, private project files, license keys, or exploit details in public issues.

## Current Safety Model

- Fob stores local project memory in a compatibility data folder that should not be committed without review.
- `.env` files are ignored by default.
- Fob does not intentionally collect telemetry.
- Fob does not currently run a hosted project-memory service.
- The dashboard/API bind to `127.0.0.1` by default.
- Fob routes prompts to local vendor CLIs only when the user invokes a route such as Claude, Codex, Both, Debate, or Resolve.
- Users are responsible for the behavior, billing, and policies of their AI vendor accounts.

## Known Risks

- Saved project memory can contain sensitive context.
- Vendor CLI outputs may include mistakes or unsafe suggestions.
- Context sent to vendor CLIs may include project details.
- Windows support has not been validated yet.
- File-edit approval and patch application flows still need more real-project validation.
- Public dashboard exposure is not safe until authentication, audit logs, and permission boundaries exist.

See [docs/SECURITY_MODEL.md](docs/SECURITY_MODEL.md) for the current local-first security boundary.
