At Stasis, we take the security of your MacBook and its hardware controls seriously. Because Stasis interacts with the Apple Silicon System Management Controller (SMC) via a root-privileged helper daemon, we maintain strict security guidelines.

We provide security updates and fixes for the latest release of Stasis.

The Stasis Privileged Helper Daemon (com.dinanathdash.stasis.charging-helper) runs with root privileges to modify SMC registers. To protect against unauthorized XPC access:

• XPC Service Verification: The helper daemon verifies code signatures and client entitlement identities before executing any SMC command.
• Minimal Privilege Scope: The daemon only exposes commands necessary for reading battery sensors, writing charging state thresholds (CHWA), and controlling MagSafe LEDs.
• No Arbitrary Execution: The daemon does not accept arbitrary shell commands or unvalidated input strings.

If you discover a potential security vulnerability in Stasis or its helper daemon:

1. Do not open a public GitHub issue.
2. Email the project maintainer directly at dashdinanath056@gmail.com with the subject line [SECURITY] Stasis Vulnerability Report.
3. Provide steps to reproduce the issue and any relevant logs or Proof of Concept (PoC) code.
4. We will acknowledge your report within 48 hours and work with you on a patch and advisory release.