Security
Your accounts, your machine, your merge
Tokenalytics is designed so agents can do useful work without holding more access than a stage needs.
This page describes the early-access design. A full security document will be published before general availability.
Principles
Credentials stay local
Account credentials are stored on your Mac. There is no Tokenalytics account that collects them.
Least privilege per stage
Reviewer agents cannot push. Building agents cannot merge. Tool lists are set per stage.
Isolated workspaces
Each card has its own worktree and branch, removed when the card is done.
People hold the gates
Starting work, approving plans, and merging always require a person.
Model providers
Code and context that agents need are sent to Anthropic or OpenAI under your account and their terms. Choose providers and accounts that match your organization's policies.
Feedback screening
Feedback cards are screened for spam and personal data before an agent reads them. Screening reduces risk; it does not replace your own data-handling rules.
Reporting a vulnerability
Email dev@abld.site with steps to reproduce. Please do not disclose the issue publicly until we reply.