Security Policy & Architecture Disclosures

Version 1.0.0 · Air-Gapped Security Architecture

      Fail-Closed Guarantee: RedactLocal employs a 7-Oracle clean room gate where output documents must pass dual-parser and decompressed bytecode inspections before generation completes.
    

1. Air-Gapped Sandbox Model

Both our desktop application and browser triage scanner are engineered to run completely disconnected from the internet:

Zero Remote Endpoints: No API keys, no analytics pings, no license verification servers.
Asymmetric Digital Signatures: Licenses use Ed25519 cryptography validated locally using standard public keys.
Content Security Policy: The desktop application enforces connect-src 'none' at the WebKit engine layer.

2. Reporting a Vulnerability

If you identify an edge case where target bytes or glyph operators survive excision:

Do NOT file a public GitHub issue containing sensitive information.
Submit an email with subject [SECURITY] RedactLocal Vulnerability to the maintainer.
Provide a sanitized or synthetic reproduction PDF demonstrating the residual bytes.

We acknowledge all vulnerability reports within 48 hours and release verified cryptographic updates promptly.