This alpha is local-first and read-only. It is not a hosted service, an authentication layer, or a production secret store.

• no network dependency is required for the quick start;
• no write-enabled MCP operation is exposed;
• warnings and feedback remain candidate/projection artifacts;
• work evidence and companion/persona data are kept on separate surfaces;
• denied capabilities are represented explicitly instead of silently succeeding.

Do not place credentials, tokens, session material, private absolute paths, or sensitive personal data in fixtures or issue reports. Review generated artifacts before sharing them.

Please report a suspected security issue privately to the repository owner after the repository and license decision are recorded. This candidate has no public security contact yet.