SECURITY
Your terminal is a live shell.
Treat access to it with the same care as SSH access to your machine.
Local access
The agent binds to loopback or a private address. It refuses a public interface. Every request uses a machine token. The server keeps connected machine tokens on the server side.
Cloud relay
Cloud uses an outbound connection from your agent. Terminal frames are encrypted with a pairing key before they reach the relay. The relay cannot read terminal bytes.
Updates and reports
Use the project security policy for supported versions and a private reporting route. Do not put a token or terminal capture in a public issue.