Security

    Atlarix runs on your machine, processes code locally, and never changes a file without your approval. This page describes the controls that enforce that.

    Approval model

    Every file edit the agent proposes is shown to you as a diff before it is written. You accept or reject each change individually. The agent cannot commit, push, or deploy without your explicit approval.

    In Explore and Plan modes, the agent operates read-only — it cannot modify files at all. In Build and Debug modes, edits are queued for your review.

    Sandbox confinement

    Commands the agent runs are confined to your project directory by an OS-level sandbox. On macOS this uses Seatbelt, on Linux it uses Landlock, and on Windows it uses AppContainer.

    The sandbox enforces write confinement — the agent can read files it needs for context, but writes are restricted to the workspace you opened. It cannot reach into your home directory, system files, or other projects.

    Commands that could cause damage (deleting branches, force-pushing, modifying system configuration) trigger a separate confirmation gate, even when the sandbox would otherwise allow them.

    What leaves the machine

    When you use a hosted AI provider (through your own API key or through Atlarix Core), your prompts and relevant code context are sent to that provider for inference. Each provider's privacy policy governs how they handle that data.

    When you use a local model (Ollama, LM Studio, or any local endpoint), nothing leaves your machine.

    • Analytics — opt-in PostHog telemetry (feature usage, session data). You choose on first launch and can change it anytime in Settings.
    • Error reports — Sentry crash reports (stack traces, device info). No code content is included.
    • Account data — email, name, subscription tier, stored in Supabase.
    • Payments — handled by LemonSqueezy. Atlarix never sees your card details.

    We do not store your code on our servers. We do not train on your code.

    Code signing

    macOS: Atlarix builds are code-signed and notarized by Apple. macOS trusts them out of the box — no Gatekeeper warnings.

    Windows: Windows builds are not yet code-signed. Windows Defender will show a SmartScreen warning on first install. We plan to add Windows code signing when resources allow.

    Linux: Builds ship as .deb, .rpm, and .AppImage with SHA256 checksums for download integrity verification.

    Vulnerability disclosure

    If you find a security issue, please report it to security@atlarix.dev. We will acknowledge your report within 48 hours and provide a timeline for a fix.

    We do not currently run a paid bug bounty program, but we credit reporters in the changelog when they consent.