Huda is a source candidate, not a security-qualified release. Read the threat model and gate matrix for the controls that exist in source and the qualification work that remains open.

Do not open a public issue, discussion or pull request for a suspected vulnerability. Report it privately through GitHub's private vulnerability reporting for this repository. Include the affected version or commit, target platform, reproduction steps and impact. Use a disposable profile for any reproduction; never attach real profile databases, OS secret-store entries, tokens or captured user data.

• Local IPC authentication, peer checks, framing limits and the single-writer boundary
• Profile directory/file ownership, permissions, leases and activation markers
• The opt-in loopback REST server (token, Host and Origin checks)
• Provider egress, redirect/proxy denial and public-address checks
• The sandboxed Bridge capture path
• Admission, authorization and immutable-history invariants in the SQLite authority
• Desktop login registration, tray behavior and native packages built by this repository

• Same-user attackers with full access to the user's account and OS secret store
• Behavior of locally configured models or third-party providers themselves
• Unsigned or ad-hoc-signed test packages being flagged by Gatekeeper/SmartScreen