CentR Icon CentR v0.1.0
GitHub
Introduction
Getting StartedArchitecture
Core Intelligence
Project MemoryGlobal LearningOptional Local Brain
Tools & Integrations
Model Context Protocol (MCP)CLI Command Reference
Engineering & Standards
Security & PrivacyBenchmarks & ValidationContributing Guide

Security & Privacy Policy

CentR is engineered with a strict zero-trust posture toward cloud telemetry and code leakage.

Non-Negotiable Privacy Guarantees

  • 100% Local Storage: Indexes, memories, and learnings are stored in local SQLite databases (.centr/centr.db and ~/.centr/learning.db).
  • Zero Cloud Telemetry: No code, tokens, file paths, or telemetry are ever transmitted to remote cloud servers.
  • Automated Secret Redaction: Automatic exclusion of .env, .pem, .key, AWS tokens, GitHub PATs, and private keys via DEFAULT_SECRET_PATTERNS.
  • Path Traversal Defense: All file accesses are verified and constrained within the project root via sanitizePath.
  • Parameterized SQL: 100% of database queries use SQLite parameterized placeholders (?), preventing SQL injection.
  • Sandboxed Brain: The optional local Brain cannot execute shell commands, edit files directly, or escape candidate sets.