# Security Policy

## Scope

Report vulnerabilities in the daemon, model manager, patch application, community store, CaseFile handling, LSP/DAP process boundaries, or release tooling.

## Do Not Publish

Never include access tokens, private keys, credentials, private source, unredacted CaseFiles, model training data, or local checkpoint paths in issues or pull requests.

## Design Requirements

- Bind local services to loopback by default.
- Allowlist commands, model paths, language servers, and debugger adapters.
- Keep private community data local unless the user explicitly changes its boundary.
- Treat model output, plugins, dependencies, and imported artifacts as untrusted.
- Require diff review and user approval before writes or publication.
- Treat capsules as metadata by default; source/evidence export must be explicit and encrypted.

## Known Upstream Advisory

The desktop GTK dependency currently pins `glib` below the patched `0.20.0` release. Dependabot's attempted upgrade is incompatible with GTK 0.18 and fails CI. The issue is tracked as an upstream dependency constraint; AIDE does not suppress the security alert or claim the dependency is fixed.