stream-contract treats captured model output as untrusted data.

• It only reads local files or stdin.
• It never executes tool calls, shell commands, archives, or model-generated content.
• It makes no network requests and collects no telemetry.
• JSON is parsed with Python's standard library and is never deserialised as executable objects.

Please report a security issue privately to the repository owner before opening a public issue when the report could expose user data.