Security

What the agent can do, what leaves the machine, and how secrets are held.

• content-security-policy.md: The CSP the web app serves and what it forbids.
• overview.md: What the agent can do, what leaves the machine, and where data lives.
• secrets.md: The machine-level credential store and how a box is granted a secret.