Skip to content

security.md

Latest commit

 

History

History
21 lines (16 loc) · 1.09 KB

security.md

File metadata and controls

21 lines (16 loc) · 1.09 KB
Raw

Security (Agent Sessions)

Agent Sessions is a local-first app. Session data stays on your Mac and is not sent to a server.

Data access model

  • The app reads session logs from local folders you choose (or the default CLI locations).
  • Supported default locations include local session stores for CLI tools, desktop apps, and app-bundled agents such as Cursor Agent, Hermes, OpenClaw, OpenCode, Codex Desktop, and Claude Desktop.
  • The app may build a local index/database to enable search and navigation.
  • Agent Sessions opens supported SQLite stores read-only when possible and does not write into agent-owned history databases.

Network activity

  • The app does not include telemetry, analytics, or remote logging.
  • The only network activity is optional update checking (Sparkle), if enabled.

Update integrity (Sparkle)

  • Update checks use Sparkle.
  • Updates are signed (EdDSA signatures generated via Sparkle generate_appcast).
  • The appcast is served over HTTPS.

Reporting

If you believe you have found a security issue, contact jazzyalex@gmail.com with details and reproduction steps.