privatae/bastion-agent
2
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

bastion agent 0.1.16
ci / test (push) Successful in 1m1s
Details
ci / personal-data (push) Successful in 3s
Details
ci / reproducible (push) Successful in 4s
Details

Browse Source
This commit is contained in:
Privatae
2026-10-25 23:16:50 +00:00
parent 53094a6940
commit e3074f50b0
34 changed files with 1345 additions and 156 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+16 -7
View File
@@ -4,7 +4,7 @@
Please do not open a public issue for a security problem.
Email **info@privatae.ai** with:
Email **security@privatae.ai** with:
- the agent's version (`python3 bastion-agent-<version>.pyz --version`) and
platform,
@@ -50,13 +50,22 @@ example:
- **The bastion**, which installs, updates and supervises the agent, signs its
manifest and holds its keys. It is a separate program with its own policy:
[privatae-bastion's SECURITY.md](https://git.privatae.ai/privatae/privatae-bastion/src/branch/main/SECURITY.md).
[the bastion's SECURITY.md](https://github.com/Privatae/bastion/blob/main/SECURITY.md).
Report there, or to the same address.
- **The Privatae platform** the bastion connects to. It is separate software
with its own reporting path; reports about it sent to the address above are
forwarded.
- **What the design already says it does not do.** The rules-only `flag` mode
does not find names, and the recall pass is probabilistic
- **The Host** the bastion connects to, which is separate software. A
C-Series Host runs on your own machine, in its own Linux virtual machine;
its source is [Privatae/cseries](https://github.com/Privatae/cseries), under
AGPL-3.0-only, `npx cseries` installs the bastion beside it and pairs,
anchors and enrols it, and no Privatae account is needed. C-Series Cloud (a
Host on a server of its own that Privatae sets up and keeps patched) and a
Privatae network membership are optional and paid. A Host on Privatae's own
platform is the case where the Host's software is not open source; the
bastion keeps it to your grant and your approvals whatever the platform
does. Reports about a Host sent to the address above are forwarded.
- **What the design already says it does not do.** The rules-only `flag` mode,
which is the mode the bastion deploys, does not find names, street addresses
or dates of birth ([README](README.md#how-the-bastion-runs-it)), and the
recall pass of `sterilize` mode is probabilistic
([docs/pii-sterilization.md](docs/pii-sterilization.md#limits)); the extract
store in the output folder is plaintext by design
([docs/runtime.md](docs/runtime.md#where-an-agent-lives-rootagent)); the