Elenchos runs a configured coding-agent command, starts a configured application, and passes the application URL to Kane. Treat the repository, agent, application, Kane account, and MCP client as untrusted until you review them.
Worktree isolation
A detached Git worktree protects the verification contract from ordinary repository edits and gives each run a known code state. It does not restrict the coding agent's operating-system permissions. The agent can still reach files outside the worktree and the network.
Loopback and MCP
Application readiness URLs must use HTTP or HTTPS and point to localhost or a loopback address by default.
Set `application.allowRemoteUrl` only for a remote target you trust.
The local MCP server exposes read-only inspection by default.
`elenchos_verify` requires an explicit enable flag and `confirm: true` on every call.
Credentials
Keep Kane, coding-agent, GitHub, npm, and other credentials in their own login or secret store.
Never place them in `.elenchos/config.json`, task files, source, logs, planning files, or commits.
Elenchos applies best-effort redaction to persisted output. Treat local evidence as sensitive anyway.
Untrusted agents and repositories
Use a container, virtual machine, or separate operating-system account when the agent or repository is not trusted. Elenchos v0.1.x should not be treated as a credential or host-isolation boundary.
MCP threat notes
Paths are confined to the configured repository with realpath checks.
Task source paths are omitted from tool responses.
Error messages replace the configured repository path with a placeholder.
Enabling verify can start processes, make network requests, consume Kane credits, and write `.elenchos` evidence.
Maintainer Kane workflow
The maintainer Kane GitHub workflow is manual-only and uses a `kane-verification` environment that should require reviewer approval. Kane credentials are scoped to the credential check and authentication steps. They are not available to checkout, dependency installation, or pull request jobs.
Supported version
Security fixes currently target the latest release of Elenchos. The npm package may lag the GitHub repository between releases. Check the package version before relying on a fix.