“BeeRad”andClaude Opus 4.5
0e6bf12ad3
- Fix bootstrap script (.env.example.local → .env.example) - Fix @langchain/core version conflict (^1.0.1 → ^0.3.0) - Add settings:open event listener for LocalKeyGate button - Pin Next.js to 15.1.3 (was "latest") - Default runtime to 'local' mode - Remove desktop app references from UI text - Rewrite MCP docs for web-only context - Add SECURITY.md, CODE_OF_CONDUCT.md, CHANGELOG.md - Add docs/README.md, docs/TROUBLESHOOTING.md - Update README with platform support table 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
1.0 KiB
1.0 KiB
Security Policy
Reporting a Vulnerability
If you discover a security vulnerability, please report it privately:
- Do NOT open a public issue
- Email: security@ra-h.app (or use GitHub Security Advisories)
- Include: description, steps to reproduce, potential impact
We will respond within 48 hours and work with you on a fix.
Supported Versions
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
Security Considerations
API Keys
- API keys are stored locally in your browser's localStorage
- Keys are never sent to any server except the respective AI provider (OpenAI, Anthropic)
- Clear your browser data to remove stored keys
Local Database
- All data is stored locally in SQLite at
~/Library/Application Support/RA-H/db/rah.sqlite - No data is sent to external servers (except AI API calls with your keys)
- Back up this file to preserve your data
MCP Server
- The MCP server binds only to
127.0.0.1(localhost) - Do not expose it to external networks
- Only connect trusted AI assistants