中文 · English
Security
This page was last checked on 2026-09-17. Each control below includes a way to verify it.
Report a vulnerability
Email zhiliangtech@163.com with [security] in the subject. We will acknowledge the report within three business days and provide a remediation timeline after confirmation. The machine-readable policy is at /.well-known/security.txt.
Use test data, do not access other people’s data, and do not load-test the public service. An NDA is not required, and anonymous reports are welcome.
Controls you can verify
- Zero runtime dependencies: CI runs
scripts/check-zero-deps.mjsagainst the manifest and source imports. - No install-time scripts: the package contains no
preinstall,install,postinstall, orpreparehook. - Verifiable release: npm releases carry provenance attestation and the release process generates a CycloneDX SBOM.
- Open, self-hostable core: AGPL-3.0. Inventory reports can be generated locally without sending an inventory to us.
- Tamper detection: each capture-ledger row includes the previous row’s hash;
agentgate history --verifyrecalculates the chain and snapshot hashes.
How we treat your data
- A pilot needs only a tool-name inventory—not code, credentials, or environment variables. Local commands do not initiate outbound requests.
- Access logging is off by default. If explicitly enabled, the service records method, route, status, duration, and request ID, not IP address, User-Agent, or query string.
- The deployed Caddy configuration had no HTTP access-log directive when checked on 2026-09-17.
- Requests still reach the server and hosting provider; providers and email services may maintain their own logs. We do not describe that layer as “no logs.”
See the data-handling page for details.
What we do not claim
- We do not certify tools or issue compliance conclusions. We provide records that can be reviewed.
- We do not scan production, execute evaluated tools, or read customer code or credentials.
- We do not promise that the output will satisfy a specific standard, SOC 2 review, or customer assessment.
About the evidence itself
Each conclusion identifies its source and coverage. Anything not checked stays unknown. A report that hides unmeasured work is more dangerous than no report.