verified_user
Raw files stay local
Package and script contents are inspected locally. Registry resolution uses constrained metadata and fingerprints.
BETA HARDENING
Security & privacy
The beta release gate covers parser abuse cases, WebView permissions, dependency advisories, privacy defaults and safe update recovery.
verified_user
Telemetry is opt-in
Diagnostic telemetry is off by default. Invalid stored consent fails closed.
verified_user
Parsers are bounded
DBPF, TS4Script and diagnostic parsing enforce size/resource limits and deterministic adversarial tests.
verified_user
Updates are recoverable
A restore point is created before supported mutation; rollback refuses to overwrite an independently changed target.