# Security policy

## Reporting

Please report vulnerabilities privately through GitHub's security advisory feature for this repository. Do not include API keys, prompts, source code sent to a model, or other secrets in a public issue.

## Data handling

pi-openrouter reuses Pi's OpenRouter authentication. It does not persist API keys, prompts, responses, or headers. Its local metrics contain model and provider identifiers, token counts, timings, generation IDs, session IDs, and costs. The cached model catalog is public OpenRouter metadata.

Local metric files are created with owner-only permissions where the platform supports POSIX modes.

## Trust boundary

Provider pinning prevents fallback to a different OpenRouter endpoint; it does not make a third-party provider trusted. Users remain responsible for choosing an endpoint whose retention and data-use policy fits their workload.