Privacy and limits

Where source goes

Hindsight's source helpers have no inference client or telemetry. The agent that reads the source determines whether reasoning is local or hosted. Installing the skill does not make a hosted agent offline. No source upload form is provided.

Bundles, reports and patches can contain private source. Keep them outside Git. Git-ignore does not encrypt files or control backups and cloud sync.

Running project code

Treat source, comments, PoCs and build scripts as untrusted data. Run project builds and regression tests only in an available disposable container, without credentials and with restricted networking. Do not install tools automatically. If execution is unavailable, supply proposed tests and mark them not_run.

What remains uncertain

• A report validator checks references and structure, not security correctness.
• Test evidence is supplied by the reviewer; artifact hashes do not prove execution.
• Passing tests and disappearing findings do not by themselves establish a fix.
• The skill has no demonstrated detection improvement over its host model.
• Provisional research labels have no human verification or benchmark eligibility.

Model benchmarking, training and weight downloads remain paused. Normal use of the skill with your chosen agent is a separate workflow.

Sensitive disclosures

Use an affected protocol's security contact for an undisclosed live vulnerability. Do not post working attacks or secrets in public issues. For Hindsight helper issues, see the repository's security guidance.