Security & data handling during alpha

What to expect for your data and security during the alpha.

Your data

• Tester accounts are scoped; admin/operator functions aren't exposed to testers.
• Logs are secret-redacted and line-capped.
• The host takes nightly checksummed backups; upgrades use a reversible path with retained rollback assets.
• Data may be reset during alpha — keep your own copies of anything important.

Platform security

• Deny-by-default firewall (22/80/443), loopback-only databases, a root agent reachable only over a local socket, and enforced admin 2FA.
• Updates are checksum-verified against a trusted manifest before apply.

More detail on the Security page and in Known limitations.