Türkçe: SECURITY.tr.md
Apeiron is in early development and has no releases yet; docs/ROADMAP.md shows the current stage. Only the latest state of the master branch receives security fixes.
| Version | Supported |
|---|---|
master |
Yes |
| Releases | None published yet |
Please do not report security problems in public issues, pull requests or discussions.
- Open the repository on GitHub: https://github.com/efe-clk/apeiron.
- Go to the Security tab and choose Report a vulnerability (GitHub private vulnerability reporting).
- Describe the problem, the affected component and, if possible, steps to reproduce it.
Your report is visible only to the maintainers. You will get an answer as soon as possible; because the project is maintained by a small team, no fixed response time is promised. Once a fix is available, the problem is disclosed in a security advisory, crediting you if you wish.
In scope are especially problems that could cause silent data loss or corruption, bypass integrity verification, leak information about stored content, or bypass encryption, permissions or the plugin sandbox.
| Principle | Rule | Status |
|---|---|---|
| Integrity | Every object is verified with a cryptographic hash (BLAKE3); corruption is never silent | Done |
| Crash safety | Write → fsync → atomic rename; a power failure never leaves a half-finished state visible |
Done |
| Content privacy | Object identifiers are keyed hashes, so stored content cannot be guessed from them | Done |
| Memory safety | Written in Rust; unsafe only in the FFI crate and the small apeiron-sys crate |
In effect |
| Encryption | Client-side; keys belong to the user; the remote target never sees plaintext (FORMAT.md §14) | Done |
| Permissions | Separate read, write, delete, share and admin permissions | Done for the web interface (USERS.md, SHARE.md) |
| Audit log | Sensitive operations are logged; sensitive data never is | Done for the web interface (AUDIT.md) |
| Plugin isolation | Plugins run in a WebAssembly sandbox with declared, user-approved permissions | In place; version 0.2 of the plugin API grants no permissions (PLUGIN.md) |
| Secure defaults | Remote access is off by default; telemetry is off by default | In effect (the web server starts only when asked, apeiron ui listens only on this computer, and there is no telemetry) |
| No forced third parties | Data is never sent to a third party as a requirement | In effect |
The full security model is in docs/ARCHITECTURE.md.