Security model
Proposal validation rejects authored geometry, styling, executable markup, unsupported fields, oversized resources, and invalid semantic references before rendering. Generation cannot bypass validation or explicit human acceptance.
Data boundary
The deterministic reference generator uses no model key and makes no provider call. The optional model-assisted generator is server-gated; when enabled, it sends only the submitted intent and evidence summary to Cloudflare Workers AI. Proposal state remains in memory for the current browser session, and exports are created locally after acceptance. Never place credentials or sensitive information in a proposal.
Report a vulnerability
Do not disclose suspected vulnerabilities in a public issue. Use GitHub’s private vulnerability reporting feature from the repository Security tab. Include the affected version, a minimal reproduction, likely impact, and any suggested mitigation.
Supported versions
Orbweaver is pre-1.0. Security fixes are applied to the latest published release. Coordinated disclosure is preferred so users can receive a fix before technical details become public.