Use GitHub private vulnerability reporting on this repository. Include the affected version, Node/OS versions, expected behavior and a minimal reproduction using fictional data. Do not attach private configuration, databases, source feeds or tokens. Version 0.1.0 and the current default branch are supported.

The desk is local-only and has no authentication. Do not expose it through forwarding, a proxy, or a public network. It binds only 127.0.0.1 on allocated port 4178 and rejects unexpected Host headers. Every POST needs both the per-process token and the exact same-origin Origin header; absent/null Origin is rejected. Request bodies are capped at one MiB, JSON is required for mutations, and responses carry CSP, nosniff, same-origin referrer policy and frame denial. JavaScript is an allowlisted local static asset; inline styles are permitted. The token is a browser request defense, not an account credential. Local users who can access the desk can view and change data.

The OS account, executable config, configured source roots and private data directory are trusted. Keep them outside the checkout with suitable OS permissions. An actor label is not an authenticated identity. Sources are optional read-only inputs; no registry jobs or server commands are executed. Git inspection is bounded, local, shell-free and restricted to repositories under its configured root. Status feeds are restricted to their configured root. There are no service-network requests, telemetry or third-party runtime assets.

SQLite mutations append actor-attributed events inside transactions; events reject updates/deletes. Busy timeout is five seconds and rollback preserves the original failure. This is a local-disk store, not a distributed service. Stop the desk before demo reset or backup and retain the entire data directory. No encryption or retention policy is built in.

Audience exports use explicit field allowlists. Review free text, product URLs and selected visibility rules before publishing; these may contain whatever the operator entered. Internal exports include repository paths and owners. Executable configuration and imports must never be supplied by an untrusted administrator.

Run npm run preflight before publishing. Only fictional content belongs in the repository. Generic leak rules cannot identify all business-sensitive text; use a private external scanner for organization-specific identities. No private identity denylist belongs in this repository.