repro-tools/public/docs/PRIVACY-SECURITY.md

Privacy and security

All processing is local and in-memory. The CSP permits only same-origin connections and the application initiates none. There is no telemetry, persistence, account, remote asset or background upload.

Limits are 64 MiB per file, 256 MiB total, 10,000 entries, 4 MiB of aggregate path metadata and 128 MiB for ZIP input. Paths with traversal, absolute syntax, control characters, excessive length or duplicate normalized names are rejected. Reference manifests are limited to 4 MB and their schema, operation, totals and digest shapes are validated. Directory selection depends on the browser's file picker and exposes only files explicitly chosen by the user.