Security Overview

The core guarantee is architectural: the model has no direct filesystem, production, tool, validator, approval, or audit authority. Akritas mediates those capabilities.

Host-side controls include bounded inputs, explicit tool authorization, pessimistic MCP permissions, fixed-index retrieval, strict structured proposals, canonical path checks, exact replacements, isolated validation copies, host-generated diffs, one-time approval, and pre-apply stale-source checks.

These controls mitigate model and input risk; they do not make model advice correct, external validators safe, or a compromised host account trustworthy. Read the canonical Security Model and Threat Model before deployment.