Ada Quest currently runs as a static browser app. The compiler and proof output shown in the MVP is simulated.
Future work may add server-side or local execution of Ada code. That work must treat submitted code as untrusted.
Any real GNAT or GNATprove runner should include:
- isolation from the host system
- CPU and memory limits
- filesystem limits
- network isolation
- short execution timeouts
- structured diagnostic output
- no access to secrets or maintainer credentials
Please open a private security report through GitHub if repository security advisories are enabled. Until then, contact the repository owner directly.