Agent Work Review is local-first. It does not upload conversations, evidence, summaries, or presentations.

• Raw Agent histories remain on the user's machine.
• Normalized evidence is written under ~/.work-review/data by default.
• A random local identity prevents accidental cross-person merges without collecting a real name.
• Users should review exported evidence before sharing generated summaries or HTML presentations.

Report security issues privately through GitHub's security advisory feature. Do not include real conversation logs or credentials in a public issue.