runx keeps local execution state and receipts on your machine. It makes no telemetry call. Network access occurs only through an explicit surface: registry fetch/publish, a declared network-capable skill adapter, or an opted-in hosted connector. The receipt crate itself has no network access by design.

Skills declare credential requirements in X.yaml. Operators resolve them from an explicit stored profile, a project binding, a global default, a pre-resolved hosted handle, or the declared workspace environment name. Secret values are accepted only on stdin by runx credential set; encrypted local material is never written to manifests, bindings, argv, receipts, or resume checkpoints. See Credential Resolution.

Authority narrows at every hop. A hop's scopes are a subset of the grant it inherits, and widening is denied by construction, so a skill deep in a graph cannot reach past the authority its caller held. Every act produces a signed, reproducible receipt.

Hosted brokerage and the browser connect flow are opt-in and never sit between you and a local run. The result is a small attack surface: most of what runx does has no network edge to attack, and the parts that do are bounded grants you choose to make.

runx ships from one rolling cli-vX.Y.Z release line. Security fixes land on the latest released CLI. There is no separate LTS line yet.

Do not open a public issue for a vulnerability.

Report privately through GitHub's private vulnerability reporting on the repository: open the Security tab and choose Report a vulnerability. That keeps the report confidential and routes it to the maintainers.

Include enough for us to confirm and fix the issue:

• The affected version (the cli-vX.Y.Z you are running).
• Steps to reproduce, with a minimal case if you can.
• The impact: what an attacker gains and under what conditions.

Disclosure is coordinated. We prepare a fix privately, then disclose the issue and the fix together.

This policy covers the open-source CLI, the trusted local Rust runtime, and the generated contracts in this repository. The hosted runx service is governed separately and is not covered here.