Security

Third-party proxy. Documented, not hidden.

BYOK. Keys hashed or encrypted. Ledger fail-closed. Threat model lives in /docs/security.md in the repo until this page is the public version.