Security Policy
How Andromity protects your codebase, local environment, and credentials.
1. Local Execution & Data Custody
Andromity is a local command-line application. All code parsing, planning outputs, and session histories reside strictly on your own computer. * Your code is never transmitted or cached on Andromity servers. * File scanning (symbol tables, AST generation) executes locally.
2. Granular Tool Permission Controls
To protect against destructive agent actions (such as formatting databases or executing dangerous shell scripts), Andromity introduces strict approval modes: * **SAFE (Default)**: Every file write, file edit, and shell command requires explicit human review and approval. * **TRUST**: File modifications run automatically, but shell invocations request approval. * **FULL**: Commands run autonomously, but destructive commands (like `rm` or `reset`) require prompt validation.
3. Telemetry Transparency
Andromity collects anonymous installation telemetry to help us track daily usage across different operating systems. * **What is sent**: Installation event, OS type, and CLI version. * **What is NOT sent**: Project filenames, file content, username, directories, IP addresses, or environment variables. * **Opting Out**: You can completely disable telemetry by setting the `ANDROMITY_TELEMETRY_DISABLED=1` environment variable in your shell.