Please do not report security vulnerabilities in a public issue. Use GitHub's private vulnerability reporting for this repository instead.

Haloscope does not need browser cookies, ChatGPT credentials, Accessibility, screen recording, or access to Codex Desktop's private database. Diagnostic reports must not include message content, file contents, authentication responses, machine names, stable installation identifiers, or secret environment variables.