Please report vulnerabilities privately via GitHub Security Advisories for this repository. Do not open public issues for security reports. We aim to acknowledge within 72 hours.

Desktop application, its packages, templates and adapters. Generated applications are the user's code; issues in generated output are product bugs (report normally) unless they stem from templates.

See docs/design/THREAT-MODEL.md, docs/security/PERMISSIONS.md, docs/security/SECRETS.md.