Skip to content
Opsec

Reference

Security model

What Opsec can access, where data lives and how it is protected.

  • All processing happens inside your deployment. There is no hosted control plane.
  • Source access is read-only unless repairs are enabled.
  • Model weights run locally. Your code and findings are never used for training.
  • Data at rest is encrypted with keys you manage. All service-to-service traffic uses mTLS.
  • Every action by an agent or user is written to an append-only audit log.