Hugging Face's logo

FerrellSyntheticIntelligence
/
aide-sovereign-workbench

Text Generation
offline
ide
local-ai
coding
llama.cpp
software-engineering
Model card Files
xet
 Community
aide-sovereign-workbench / SECURITY.md
Ferrell Synthetic Intelligence
Prepare release candidate hardening
586338b
preview code
|
Raw
History Blame Contribute Delete
1.18 kB

Security Policy

Scope

Report vulnerabilities in the daemon, model manager, patch application, community store, CaseFile handling, LSP/DAP process boundaries, or release tooling.

Do Not Publish

Never include access tokens, private keys, credentials, private source, unredacted CaseFiles, model training data, or local checkpoint paths in issues or pull requests.

Design Requirements

  • Bind local services to loopback by default.
  • Allowlist commands, model paths, language servers, and debugger adapters.
  • Keep private community data local unless the user explicitly changes its boundary.
  • Treat model output, plugins, dependencies, and imported artifacts as untrusted.
  • Require diff review and user approval before writes or publication.
  • Treat capsules as metadata by default; source/evidence export must be explicit and encrypted.

Known Upstream Advisory

The desktop GTK dependency currently pins glib below the patched 0.20.0 release. Dependabot's attempted upgrade is incompatible with GTK 0.18 and fails CI. The issue is tracked as an upstream dependency constraint; AIDE does not suppress the security alert or claim the dependency is fixed.