## Background Model execution isn't sandboxed/guided. ## Why it matters Local models can run native code. ## Acceptance criteria - [ ] Document and optionally enforce a restricted execution context. - [ ] Warn about native model code. ## Where to look - `SECURITY.md`, `src/modeldock/adapters/runtimes/` ## How to claim Comment `/claim` on this issue.
Background
Model execution isn't sandboxed/guided.
Why it matters
Local models can run native code.
Acceptance criteria
Where to look
SECURITY.md,src/modeldock/adapters/runtimes/How to claim
Comment
/claimon this issue.