Security Policy

1. Code and Data Privacy (Local execution)

Eurisko Mind has been designed from the ground up to prevent your code from ever being sent to unauthorized third parties or intermediate servers:

• **Zero Remote Indexing**: Unlike standard cloud-based coding platforms, we do not host or index your source code on our servers. Your workspaces remain entirely local.
• **Local Vector Stores & Indexes**: Any code semantic search database or structural index constructed by Eurisko Mind is saved locally inside the user's workspace directory or target application folders.

2. LLM Credential Handling

We prioritize standard credential hygiene:

• **Keychain Storage**: We store your OpenAI, Anthropic, Gemini, and custom LLM API keys locally in the standard operating system keyring/keychain, or read them dynamically from standard local environment variables.
• **No Middleman Proxies**: Your API keys are transmitted directly to the LLM vendor endpoint (e.g., Anthropic API) over secure TLS connections, bypassing our infrastructure completely.

3. Execution & Sandbox Protection

Eurisko Mind coordinates agents that run commands inside local terminals. We build guardrails to protect your system:

• **Explicit Confirmation**: The orchestrator asks for confirmation before executing commands that perform network requests, file system deletions outside the workspace, or installations of unverified packages.
• **Workspace Boundaries**: Subagents are strictly bounded to the workspace directory. File writes or reads requested by agents outside the active repository are blocked unless explicit permission is granted by the user.

4. Reporting Vulnerabilities

We take potential security issues seriously. If you find a security vulnerability in Eurisko Mind, please report it to us immediately by emailing [security@euriskomind.com](mailto:security@euriskomind.com).

Please include detailed reproduction steps, the versions of Eurisko Mind CLI/Desktop you tested, and any configuration details. We will triage and address all valid findings promptly.