| 1 | # Security |
| 2 | |
| 3 | `agent-time-ledger` is local-first by design. |
| 4 | |
| 5 | - No telemetry |
| 6 | - No cloud sync |
| 7 | - No prompt capture |
| 8 | - No arbitrary file reads through MCP tools |
| 9 | - No shell execution through MCP tools |
| 10 | - No network access from the CLI or MCP server |
| 11 | |
| 12 | The default state directory is `~/.agent-time-ledger`. Set `ATL_HOME` to isolate state for testing. |
| 13 | |
| 14 | Please report security issues privately rather than opening a public issue with exploit details. |