Report via GitHub Security Advisories on this repository.
See ARCHITECTURE.md and docs/security.md.
- Snitch runs as the user, not root
- All verification data stays local by default; labeling sync and analytics are opt-in. Shared labels may include claim sentence + capped context + claimed→actual (never prompts, code, or paths); see docs/security.md
- Secret scrubbing runs before any command, output, or turn snapshot is stored
- Snitch reads local agent transcript artifacts only (Cursor/Claude Code/Codex/Pi JSONL, OpenCode SQLite) — no network MITM or proxy
| Version | Supported |
|---|---|
| latest release | Yes |