# Security Notes

The local agent can cite security policy summaries and deployment boundaries.

Blocked material includes `.env`, private keys, customer exports, and unmanaged secret stores.

Network access should remain disabled during local preview.