# Security Claims

Allowed claim:

- Runs locally.
- Does not require Internet for normal use.
- Does not require admin rights in Windows portable mode.
- Does not intentionally upload user data.
- Network is bound to 127.0.0.1 by default.

Do not claim:

- Leaves no trace on the host.
- Forensics-proof.
- Impossible to inspect or copy.
- Secure against a malicious host.
- Secure against keyloggers or screen capture.

Windows records USB insertion and execution metadata. A hostile host can inspect memory, capture keystrokes, or copy files.