Security and limitations

Review trust boundaries for the SDK, website and artifacts.

The website publishes documentation and staged metadata. It keeps internal binaries outside the web root and exposes no arbitrary code execution service.

A matching SHA-256 confirms artifact integrity. Unsigned previews require a trusted handoff. Bytecode verification, bounded execution and host policy are defense layers with limited scope. External Clang, native executables and the operating system remain trust boundaries.