Security fixes are applied to the latest release and the main branch. Pre-release builds and older local snapshots may not receive backports.

Please use GitHub private vulnerability reporting. Do not include exploit details, local attachments, tokens, cookies, or private logs in a public issue.

Include:

• affected version or commit;
• macOS and Codex versions;
• impact and required preconditions;
• a minimal reproduction without real credentials;
• suggested mitigation, if known.

You should receive an acknowledgement within seven days. A remediation timeline depends on severity, exploitability, and release requirements.

• The native helper runs in the logged-in user's GUI session, not as root.
• MCP and the app communicate through a user-owned Unix-domain socket.
• The socket and LaunchAgent configuration use user-only permissions.
• launchd starts the helper on demand; it is not a continuously running daemon.
• Image and video evidence remains at local filesystem paths.
• No telemetry, remote upload, or external evidence forwarding is implemented.

Ad-hoc signing protects local bundle integrity checks but is not Apple notarization. Downloaded public releases should be treated accordingly until notarized release artifacts are available.