Local-first does not mean permission-free.

BuildBrake runs with the permissions of the person who starts it. Review the trust boundary before using it with private or sensitive repositories.

What stays local

• BuildBrake state and receipts stay under the project’s .buildbrake/ directory.
• The dashboard binds to 127.0.0.1 by default.
• BuildBrake sends no telemetry of its own.
• Credentials are not collected or stored by BuildBrake.

What leaves your machine

BuildBrake launches your Codex CLI. Task prompts and selected project context are sent by Codex according to your Codex configuration and OpenAI account settings. Codex authentication and usage belong to the signed-in user.

Receipts may contain sensitive context

Receipts can include prompts, file paths, agent findings, and command output. The .buildbrake/ directory is Git-ignored by default, but you should still inspect receipts before sharing them.

Dashboard exposure

Do not bind the dashboard to a public interface on an untrusted network. The default localhost address is intended for the person running BuildBrake on that machine.

Report a vulnerability

Do not open a public issue containing credentials, private source code, or an unpatched exploit. Use GitHub private vulnerability reporting and include the affected version, reproduction steps, impact, and suggested mitigation.