Security
Self-review, not an audit
PatchScope has not had a third-party audit. Do not describe it as exploit-proof, Gold tier, or bug-free. Report issues against the repository disclosure policy when the source is published.
Trust boundaries
- Party text, evidence, and future model output are untrusted data.
- Policy, allowed classifications, ids, and deadlines are not chosen by that data.
- Keyword overlap is not proof that a protected behavior regressed.
- An acknowledgement is not verification.
- A local preview decision is not chain truth and is labeled on the decision itself.
- Team membership never becomes a signature.
- There is no server key that can submit a transaction.
Injection stance
Instructions hidden in a request, a clause, or an excerpt cannot select the classification. The local gate cites clause ids the user selected and evidence ids the packet actually holds. A deployed model path must keep the same gate after any nondeterministic read, and a shared invalid verdict is treated as a product bug, not as consensus success.
Known limits
- This preview clock is the browser clock, not GenLayer time.
- Web import is disabled. The runtime is not asked to fetch URLs.
- WalletConnect is disabled until a real project id is supplied. None is invented here.
- Local storage can be edited by whoever controls the browser. It is a workspace, not evidence.
- Studionet deployment and a two-wallet chain journey are not claimed until a receipt exists.