ArchSift is pre-alpha. Security fixes are applied to the latest code on the default branch until the first supported release line is declared.
Do not open a public issue for a suspected vulnerability or include private case data in a report.
Use GitHub's private vulnerability reporting:
https://github.com/maximalfocus/archsift/security/advisories/new
Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. Maintainers will acknowledge the report as soon as practicable and coordinate disclosure after a fix is available.
ArchSift is intended to run locally without telemetry. Case files and evidence are untrusted and may contain confidential information. Never attach real case material to public issues or pull requests.
Registered documents and repository files remain private case material beneath
evidence/registered/. Registration copies exact bytes and deliberately never
parses, decodes, decompresses, renders, imports, or executes them. Repository
commit identities are caller-supplied provenance: ArchSift runs no Git command,
hook, discovery, or network request and does not prove a commit-to-file
relationship. Registration rejects links, traversal, special files, changing
sources, and identifier collisions; callers must still protect the workspace
with permissions appropriate to the source material.
The public authoring-material/ directory is fully synthetic and is the only material authorised
for the simulated assisted-authoring protocol. Cohort workspaces, generated dossiers, decision
records, prompts, command output, and transcripts are temporary private data and must never be
committed. authoring-results reads only one regular JSON file beneath the current directory,
rejects links and escaping paths, performs no network access, writes nothing, and accepts only the
strict privacy-bounded result fields in its packaged schema.
Protocol 1.0.1 distinguishes ArchSift's offline boundary from the external author's transport. Every ArchSift milestone runs with outbound sockets blocked. A cohort operator may separately authorise an agent product's ordinary model transport outside ArchSift, but browser/search access, retrieval plugins, network source lookup, private repositories, and continued private context are not eligible protocol inputs.
For the first four cohorts, only the strict bounded result metadata was retained. Temporary prompts, product streams, event logs, workspaces, generated dossiers, reports, and decision records were deleted after each mechanical milestone derivation and are not recoverable from the repository.